How to configure DNS leak protection on Surfshark

beginner 8 min read Updated 2026-03-19
Quick Answer

DNS leak protection on Surfshark prevents your DNS queries from bypassing the VPN tunnel and revealing your browsing activity. Enable it through the app's advanced settings by toggling the DNS leak protection feature and selecting secure DNS servers.

Prerequisites

  • Active Surfshark subscription
  • Surfshark app installed on your device
  • Administrator privileges on Windows/macOS
  • Basic understanding of VPN settings

Step-by-Step Instructions

1

Open Surfshark application

Launch the Surfshark app on your device and log in with your credentials. Ensure you have the latest version installed for optimal security features.
Check for app updates before configuring DNS settings to access the latest security improvements.
2

Access Settings menu

Click on the Settings icon (gear symbol) located in the top-right corner of the main interface. On mobile devices, tap the hamburger menu and select Settings.
3

Navigate to Advanced settings

In the Settings menu, scroll down and click on Advanced or Connection section. This will display additional security and connection options including DNS protection settings.
Advanced settings may be located under different menu names depending on your device platform.
4

Enable DNS leak protection

Locate the DNS or DNS Leak Protection option and toggle it ON. You should see a switch that turns blue/green when activated, indicating the feature is now enabled.
This feature is usually enabled by default on newer Surfshark installations.
5

Configure DNS server preferences

Select your preferred DNS server option:
  • Auto - Uses Surfshark's secure DNS servers
  • Custom - Allows you to specify DNS servers like 1.1.1.1 or 8.8.8.8
For maximum privacy, choose Auto to use Surfshark's no-log DNS servers.
Surfshark's own DNS servers provide the best integration with their VPN service.
6

Enable additional DNS security features

Turn on complementary features:
  • CleanWeb - Blocks ads and malware at DNS level
  • NoBorders - Helps bypass VPN restrictions
  • Kill Switch - Prevents DNS leaks if VPN disconnects
These work together to enhance DNS protection.
Enable Kill Switch to prevent any DNS queries from leaking during VPN reconnections.
7

Test DNS leak protection

Connect to a VPN server and visit dnsleaktest.com or ipleak.net. Run the extended test to verify your DNS queries are routed through Surfshark's servers. You should only see Surfshark's DNS servers in the results.
Perform DNS leak tests regularly, especially after system updates or network changes.
8

Save and apply settings

Click Save or Apply if prompted. Restart the VPN connection by disconnecting and reconnecting to ensure all DNS protection settings take effect properly.
Some settings may require a complete app restart to function correctly.

Common Issues & Troubleshooting

DNS leak test still shows ISP DNS servers

Disconnect from VPN, restart the Surfshark app, ensure DNS leak protection is enabled, then reconnect. Also disable any custom DNS settings in your system network configuration that might override VPN DNS.

Websites loading slowly after enabling DNS protection

Try switching to a different VPN server location or change DNS settings from Custom back to Auto. Clear your browser's DNS cache by typing chrome://net-internals/#dns in Chrome and clicking Clear host cache.

DNS leak protection option is missing

Update your Surfshark app to the latest version through your device's app store. On older versions, DNS protection might be under Connection or Protocol settings instead of Advanced.

Cannot access certain websites with DNS protection enabled

Temporarily disable CleanWeb feature as it might block legitimate websites. If issues persist, switch DNS setting to Custom and use public DNS servers like 1.1.1.1 and 1.0.0.1.

Prices mentioned in this guide are pulled from current plan data and may change. Always verify on the official Surfshark website before purchasing.
Up to 87% OFF

Affiliate link. We may earn a commission at no extra cost to you.