—/10DNS

Testing your DNS…

Each check appears as soon as it finishes, and then we compare with other DNS services.

Your current DNS

    Comparison with other DNS services

    Measured from your browser over HTTPS (DoH). It's good for comparing them with each other, but your device's classic DNS may take a different time.

    Fastest from your connection

      Live log

      What is my DNS: test your DNS and compare it with others

      Your device can have one DNS set up and be using another. This test shows the server that really resolves your queries and compares live how long other well-known DNS services take from your connection.

      How we know which DNS you use

      Your browser tries to open a unique, made-up name under our domain. Nobody else knows that name, so the only one who can ask us about it is your DNS server, and that is how we see its address. One provider often uses several addresses.

      How we compare with other DNS services

      Your browser queries 14 well-known DNS services over HTTPS, such as Google, Cloudflare, Quad9, OpenDNS, AdGuard and NextDNS, and doesn't count the first query, which opens the connection. "Response" asks for a name they usually have stored, and "New name" for a made-up one they must look up from our server. Some don't allow reading their answer from another website: for those we measure time but not DNSSEC, which is why a dash appears.

      What each result means

      "Finds sites" shows whether your DNS resolves names for IPv4 and IPv6. "Your DNS uses IPv6" uses a name whose server can only be reached over IPv6. "Validates DNSSEC" checks that it rejects a site with a broken signature. "New lookup" is an approximate calculation of how long it takes with a name it doesn't know yet.

      How to change your DNS

      The easiest way is on your router, because it applies to all your devices; you can also do it on each device. Some well-known public DNS services are Google's 8.8.8.8, Cloudflare's 1.1.1.1 and Quad9's 9.9.9.9. Changing DNS can make names load faster, but it won't raise your download speed or give you IPv6.

      Frequently asked questions

      How is the DNS score calculated?

      Out of 10 points: finding sites (5), validating DNSSEC (2), resolving a new name in under 300 ms (2) and using IPv6 (1). Anything that can't be tested doesn't count toward the total. That new name is looked up all the way to our server in Mexico, so it can take longer from far away even if your DNS is good.

      Should I switch to the fastest DNS?

      Not just for a few milliseconds: they're barely noticeable and the order can change. Compare over several tests, and also look at what each one offers, such as filters, DNSSEC validation and its privacy policy.

      Why do I see a DNS I didn't set up?

      It can happen if your browser uses secure DNS, if you have a VPN or if your provider redirects queries. The test shows the one that really answered.

      What is DNSSEC?

      It's a set of signatures that let a resolver check that a DNS answer wasn't altered along the way. Not all sites use them, and a DNS that validates them rejects answers with a wrong signature.

      Why does it say "Internal DNS"?

      Because the server that asked has a private address, which doesn't exist on the internet. It usually happens when your DNS and our server are on the same network, so there's no public provider to show.

      How do I flush my DNS cache?

      On Windows, run ipconfig /flushdns. On macOS, sudo dscacheutil -flushcache. On Linux with systemd-resolved, resolvectl flush-caches. On a phone, turning airplane mode on and off is usually enough.