Beginner
How to configure DNS leak protection on Surfshark
Quick Answer
DNS leak protection on Surfshark prevents your DNS queries from bypassing the VPN tunnel and revealing your browsing activity. Enable it through the app's advanced settings by toggling the DNS leak protection feature and selecting secure DNS servers.
Prerequisites
- Active Surfshark subscription
- Surfshark app installed on your device
- Administrator privileges on Windows/macOS
- Basic understanding of VPN settings
1
Open Surfshark application
Launch the Surfshark app on your device and log in with your credentials. Ensure you have the latest version installed for optimal security features.
Tip
Check for app updates before configuring DNS settings to access the latest security improvements.
2
Access Settings menu
Click on the Settings icon (gear symbol) located in the top-right corner of the main interface. On mobile devices, tap the hamburger menu and select Settings.
3
Navigate to Advanced settings
In the Settings menu, scroll down and click on Advanced or Connection section. This will display additional security and connection options including DNS protection settings.
Tip
Advanced settings may be located under different menu names depending on your device platform.
4
Enable DNS leak protection
Locate the DNS or DNS Leak Protection option and toggle it ON. You should see a switch that turns blue/green when activated, indicating the feature is now enabled.
Tip
This feature is usually enabled by default on newer Surfshark installations.
5
Configure DNS server preferences
Select your preferred DNS server option:
- Auto - Uses Surfshark's secure DNS servers
- Custom - Allows you to specify DNS servers like
1.1.1.1or8.8.8.8
Tip
Surfshark's own DNS servers provide the best integration with their VPN service.
6
Enable additional DNS security features
Turn on complementary features:
- CleanWeb - Blocks ads and malware at DNS level
- NoBorders - Helps bypass VPN restrictions
- Kill Switch - Prevents DNS leaks if VPN disconnects
Tip
Enable Kill Switch to prevent any DNS queries from leaking during VPN reconnections.
7
Test DNS leak protection
Connect to a VPN server and visit dnsleaktest.com or ipleak.net. Run the extended test to verify your DNS queries are routed through Surfshark's servers. You should only see Surfshark's DNS servers in the results.
Tip
Perform DNS leak tests regularly, especially after system updates or network changes.
8
Save and apply settings
Click Save or Apply if prompted. Restart the VPN connection by disconnecting and reconnecting to ensure all DNS protection settings take effect properly.
Tip
Some settings may require a complete app restart to function correctly.
Troubleshooting
DNS leak test still shows ISP DNS servers
Disconnect from VPN, restart the Surfshark app, ensure DNS leak protection is enabled, then reconnect. Also disable any custom DNS settings in your system network configuration that might override VPN DNS.
Websites loading slowly after enabling DNS protection
Try switching to a different VPN server location or change DNS settings from Custom back to Auto. Clear your browser's DNS cache by typing
chrome://net-internals/#dns in Chrome and clicking Clear host cache.DNS leak protection option is missing
Update your Surfshark app to the latest version through your device's app store. On older versions, DNS protection might be under Connection or Protocol settings instead of Advanced.
Cannot access certain websites with DNS protection enabled
Temporarily disable CleanWeb feature as it might block legitimate websites. If issues persist, switch DNS setting to Custom and use public DNS servers like
1.1.1.1 and 1.0.0.1.Ready to get started with Surfshark?
Put this tutorial into practice. Visit Surfshark and follow the steps above.
Visit Surfshark →