Public and shared Wi-Fi
On a café or hotel network, lookups that leak go to a network you don’t control.
DNS leak protection
DNS and IPv6 leak protection, on from the start
DNS leak protection keeps your website lookups inside the VPN, so they don’t reveal the sites you visit to your internet provider. In CopVPN it’s one setting, “Block IPv6 and keep DNS inside the VPN”, on by default in the Windows, Mac, Linux, iPhone, iPad and Android apps. On Android TV it’s always on.
Free on iPhone, iPad and Android. The browser extension has no DNS leak protection setting.
30-day money-back guarantee (except crypto and manual payments)
Real Settings screens · Mac and iPhone
DNS leak protection“Block IPv6 and keep DNS inside the VPN”
DNS leak protection at a glance
- Onby defaultWindows, Mac, Linux, iPhone, iPad, Android
- IPv6blocked while you’re connectedOne setting covers both
- Freeon iPhone, iPad and AndroidWith or without a plan
- Alwayson in the Android TV appWith no switch
How it works
Where your lookups go
Lookups stay in the tunnel
While you’re connected, CopVPN keeps your DNS lookups inside the VPN instead of sending them to your network’s own DNS server.
IPv6 is blocked
IPv6, a newer kind of internet address, can slip past a VPN. The setting blocks it while you’re connected, so that side door stays shut.
Nothing to set up
It’s on from the start. If you ever want to check, our DNS leak test page walks you through it.
Lookup yoursite.example ?
Your device
Inside the VPN
The lookup stays inside the VPN, so your network’s DNS server doesn’t see the site name.
IPv6Blocked while you’re connected
By platform
DNS leak protection on each platform
On by default wherever it exists; the browser extension has no DNS setting.
DNS leak protection“Block IPv6 and keep DNS inside the VPN”
On by default. The desktop app needs a plan to connect.
DNS leak protection“Block IPv6 and keep DNS inside the VPN”
On by default. The Mac app needs a plan to connect.
DNS leak protection“Block IPv6 and keep DNS inside the VPN”
On by default, with or without a plan.
Block IPv6 and keep DNS inside the VPNOn by default
Drawn from the Android app’s Settings, where this row sits lower down.
Block IPv6 and keep DNS inside the VPN
One switch, with no separate “DNS leak protection” label. On by default, with or without a plan.
The Android TV app keeps DNS leak protection always on. There is no switch to show.
No switch
Always on, with no switch. The TV app needs a plan.
| App | In the app | How it works there | Availability |
|---|---|---|---|
| Windows and Linux | DNS leak protectionBlock IPv6 and keep DNS inside the VPN | On by default. The desktop app needs a plan to connect. | With a plan |
| Mac | DNS leak protectionBlock IPv6 and keep DNS inside the VPN | On by default. The Mac app needs a plan to connect. | With a plan |
| iPhone and iPad | DNS leak protectionBlock IPv6 and keep DNS inside the VPN | On by default, with or without a plan. | Available |
| Android | Block IPv6 and keep DNS inside the VPN | One switch, with no separate “DNS leak protection” label. On by default, with or without a plan. | Available |
| Android TV | No switch | Always on, with no switch. The TV app needs a plan. | With a plan |
| Browser extension | Not in this app | No DNS leak protection setting. It protects this browser only. | Not available |
When to use it
Everyday moments it’s made for
Networks that use IPv6
If your home or mobile network hands out IPv6 addresses, blocking IPv6 while you’re connected keeps that route closed.
After a change
New router, new network, new device? Our DNS leak test page explains how to check which DNS servers your device is really using.
DNS leak protection limits
- If a network or app only works over IPv6, you can switch the setting off, but your lookups may then leave the tunnel. Turn it back on when you’re done.
- It protects your lookups, not what you share. Sites you sign in to still know who you are.
- The browser extension has no DNS leak protection setting, and it covers that browser only.
Questions
DNS leak protection questions
What is a DNS leak?
A DNS leak happens when your device asks your internet provider’s DNS server for a site’s address instead of asking through the VPN. Those lookups can reveal which sites you visit, even while the VPN is on.
What is IPv6 leak protection?
IPv6 is a newer kind of internet address that can travel outside a VPN tunnel. CopVPN’s setting blocks IPv6 while you’re connected, so that traffic can’t leak.
Should I disable IPv6 when using a VPN?
No. With CopVPN you don’t need to turn IPv6 off yourself: “Block IPv6 and keep DNS inside the VPN” is on by default in the Windows, Mac, Linux, iPhone, iPad and Android apps and blocks IPv6 while you’re connected.
How do I check for a VPN DNS leak?
Our DNS leak test page explains how lookups escape a VPN and how to check your CopVPN setup step by step.
Does the browser extension have DNS leak protection?
No, the extension has no DNS leak protection setting, and it protects that browser only. For DNS leak protection, use the CopVPN apps.
Keep reading
Related features and guides
- DNS leak testHow to check which DNS servers your device is using.
- Kill switchIf the VPN connection drops, the kill switch blocks your traffic.
- Block ads, trackers & malwareBlocks known ad, tracking and malware sites on your device. It isn’t antivirus.
- What is a VPN?How a VPN tunnel works, in plain words.
Plans
Get DNS leak protection with CopVPN
Free on iPhone, iPad and Android. The desktop and Android TV apps need a plan. Plans run from 1 month to 5 years.
30-day money-back guarantee (except crypto and manual payments)We follow a no-logs policy