NordVPN DNS settings

A practical guide to configuring NordVPN DNS settings for privacy, security, and leak protection.
NordVPN DNS settings: a practical guide to safer DNS handling while using NordVPN
Many privacy-minded users want to control where their DNS requests go, especially when connected to a VPN. NordVPN offers DNS server addresses you can use to ensure DNS queries travel through NordVPN’s network, reducing the chance of leaks and improving privacy. This article explains what NordVPN DNS settings are, how to change them on common devices, and what to consider when choosing DNS configurations.
NordVPN DNS server addresses and options
| Option | Primary DNS | Secondary DNS | DNS over TLS | DNS over HTTPS | Notes |
|---|---|---|---|---|---|
| NordVPN default | 103.86.96.68 | 103.86.99.68 | supported | supported | Default when connected to VPN |
| Custom primary | 1.1.1.1 | 1.0.0.1 | yes | yes | Public DNS options |
| Custom secondary | 9.9.9.9 | 149.112.112.112 | yes | yes | Additional fallback |
| Encrypted TLS | Yes | Yes | yes | yes | TLS-based DNS only |
| No DNS leaks | Yes | Yes | yes | yes | Prevents leaks when offline |
Compiled November 2026; check the provider's site for current details.
What are NordVPN DNS server addresses?
NordVPN runs its own DNS servers to resolve domain names while you’re connected to the VPN. The official NordVPN DNS server addresses are:
- 103.86.96.100
- 103.86.99.100
Using these servers ensures that DNS queries are handled by NordVPN’s infrastructure, which helps keep your DNS requests within the VPN tunnel and can mitigate DNS leaks. NordVPN also provides guidance on DNS leak testing to verify your configuration.
Why you might want to change or enforce NordVPN DNS settings
- Enhanced privacy: Directing DNS requests through NordVPN reduces exposure to third-party DNS resolvers.
- Leak protection: If your device defaults to a local or ISP DNS, you might be leaking information about your activity even when the VPN is connected.
- Consistent behavior across networks: Some networks enforce captive portals or use DNS hijacking; NordVPN DNS can help maintain consistent resolution behavior.
Important note: Your VPN connection should generally override DNS settings when NordVPN is managing DNS. In some setups, NordVPN’s DNS will be used automatically, but in others you may need to explicitly configure or verify.
Use-case based DNS settings recommendations NordVPN disable auto connect
| Use-case | Recommended DNS setting | On-the-go vs home | Privacy angle | Speed concern | Notes |
|---|---|---|---|---|---|
| General browsing | NordVPN default | On-the-go | Balanced | Moderate | Default safe option |
| Privacy focus | Cloudflare + DoT/DoH | Both | High | Moderate | DNS privacy emphasis |
| Streaming | Fast public DNS | Home or mobile | Moderate | High | Low latency helps |
| Gaming | Low-latency DNS | Home | Moderate | High | Pick fastest responsive DNS |
| Public Wi‑Fi | DoT/DoH with VPN | Public | High | Moderate | Protects DNS queries |
Compiled November 2026; check the provider's site for current details.
How to change NordVPN DNS settings on common platforms
Below are practical steps to set NordVPN DNS on several popular devices. If your device has a specific app or OS version, the exact wording may differ slightly, but the overall process is similar.
Windows
- Open Settings > Network & internet > your active connection (Wi‑Fi or Ethernet).
- Scroll to DNS settings and choose to configure manually.
- Enter the NordVPN DNS addresses: 103.86.96.100 and 103.86.99.100.
- Save and reconnect the VPN to ensure DNS changes take effect.
MacOS
- Open System Settings (or System Preferences) > Network.
- Select your active network and click Details.
- Go to DNS and add 103.86.96.100 and 103.86.99.100.
- Apply, then reconnect your VPN to apply the DNS flow through NordVPN.
IOS (iPhone/iPad)
- Open Settings > Wi‑Fi > your network > Configure DNS > Manual.
- Add the NordVPN addresses: 103.86.96.100 and 103.86.99.100.
- Save and verify by performing a DNS leak test while connected to NordVPN.
Android
- Open Settings > Network & internet > Wi‑Fi > gear icon next to your network.
- Scroll to IP settings > Static (or edit DNS directly depending on OS).
- Enter 103.86.96.100 and 103.86.99.100 as DNS servers.
- Exit and reconnect to NordVPN to ensure DNS queries route through the VPN.
Routers
If you route all traffic through a VPN-enabled router, you can configure DNS on the router:
- Access the router’s admin panel.
- Find the DNS settings (often under WAN or LAN).
- Set primary and secondary DNS to 103.86.96.100 and 103.86.99.100.
- Save and reboot if required. Ensure the router’s VPN client is active.
Note: Some routers support DNS over HTTPS (DoH) or DNS over TLS (DoT). NordVPN’s DNS addresses can be used in standard DNS fields, but DoH/DoT configurations may require additional steps or separate DNS names. NordVPN dedicated IP price: what you need to know about cost and value
How to test for DNS leaks after configuring NordVPN DNS
Testing ensures your DNS queries are indeed resolving through NordVPN and not leaking to your ISP or local networks.
- NordVPN DNS leak test: Use NordVPN’s DNS leak test page, which guides you through verifying that requests resolve via NordVPN’s DNS servers.
- Third-party tests: Use reputable DNS leak test sites and run the test with the VPN connected. Ideally, the test should show the NordVPN DNS IPs (103.86.96.100, 103.86.99.100) or the test should indicate no public DNS resolution leaks.
- Kill switch and IPv6: If your setup uses IPv6, ensure IPv6 DNS isn’t leaking. Some users disable IPv6 in settings or enable the VPN’s IPv6 kill switch if available.
If a leak is detected, double-check:
- The DNS entries you configured on each device.
- Whether any apps bypass system DNS settings.
- The VPN’s own settings to ensure DNS requests are forced through the VPN.
DNS comparison: NordVPN DNS vs. public DNS while using NordVPN
| Aspect | NordVPN DNS (103.86.96.100 / 103.86.99.100) | Public DNS (e.g., Google 8.8.8.8 / 8.8.4.4) |
|---|---|---|
| Primary benefit | DNS requests go through NordVPN network, aiding privacy inside the VPN tunnel | Often fast and globally distributed; may be outside VPN tunnel if not used with VPN-specific settings |
| Leak risk | Reduced when correctly configured; should align with VPN tunnel | Potential leaks if VPN DNS isn’t used or if the device defaults to public DNS during VPN connection |
| Availability | Provided and supported by NordVPN | Publicly available for anyone; independence from VPN provider |
| Privacy considerations | Higher control under NordVPN policy; depends on their DNS logging policy | Depends on provider; some may log or use data for analytics |
In short, NordVPN DNS is designed to keep DNS queries within the VPN’s privacy framework, which can improve overall privacy when properly configured. Public DNS options can be used, but require careful handling to avoid leaks.
Testing and diagnostics table for NordVPN DNS NordVPN coupon code 3 year
| Test | What to check | Result indicators | Tool / method | Expected outcome | Frequency |
|---|---|---|---|---|---|
| DNS leak test | IP address seen | Matching VPN IP | dnsleaktest.com | No home IP visible | After connect |
| Ping DNS | Response time | ms value | ping | Low latency | Periodic |
| Resolve domain | Correct IP | Expected IP | nslookup/dig | Matches intended server | When changed |
| DNSSEC validation | Signatures validated | Yes / No | dig +dnssec | Yes | After changes |
| TLS/DoT/DoH status | Protocol in use | Yes / No | browser | system logs | Upon config |
Compiled November 2026; check the provider's site for current details.
Troubleshooting common issues
- DNS not changing after configuration: Some devices cache DNS settings. Reboot the device or flush the DNS cache after applying changes.
- VPN connection drops but DNS remains active locally: Re-enable the DNS setting or toggle the VPN to ensure DNS alignment with the VPN session.
- Slow DNS resolution: If you experience latency, test with and without NordVPN DNS to assess performance differences. Some users may prefer to keep NordVPN DNS for privacy and accept small latency, while others may opt for a faster public resolver if privacy needs are met through VPN.
- IPv6 leaks: If your network primarily uses IPv6, ensure that IPv6 DNS is also set through NordVPN or disable IPv6 to prevent leaks.
Best practices for NordVPN DNS settings
- Always pair DNS settings with a VPN that can enforce DNS routing. NordVPN’s DNS is designed to work within its ecosystem. Enabling it helps ensure queries resolve inside the VPN.
- After changing DNS settings, run a DNS leak test to confirm the change. Regular checks are a good habit, especially after OS updates or network changes.
- For devices with multiple network profiles (work, home, public), unify DNS settings where possible so you don’t accidentally fall back to a non‑NordVPN DNS on one profile.
- If you worry about IPv6 leaks, either disable IPv6 on the device or make sure NordVPN’s DNS setup handles IPv6 consistently across your network.
- Document your changes. Keep a small note of which devices have NordVPN DNS configured so you can troubleshoot quickly if something breaks.
Final recommendation
If your priority is privacy and consistent DNS behavior within the NordVPN ecosystem, use NordVPN’s DNS server addresses (103.86.96.100 and 103.86.99.100) and configure them across your devices. Verify with NordVPN’s DNS leak test to confirm that DNS requests are resolved through NordVPN’s network. For most users who want the best balance of privacy and reliability, enabling NordVPN DNS and performing regular leak checks provides a straightforward, robust approach. If you need ultra-fast DNS for non-sensitive browsing, you may experiment with a trusted public DNS, but ensure you have a reliable DNS leak protection in place and understand the privacy trade-offs.
| VPN | Obfuscation | From / month | Plan | Free plan | Refund | Alipay | UnionPay | Crypto | Website opens in China | Trustpilot | |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Turn on manually Obfuscated Servers / NordWhisper | $3.49/mo | 27 months: $94.23 | No | 30 days | ? | ✗ | ✓ | ✓ | ✗ Blocked | 4.2/5 (51,628 reviews) | |
| Turn on manually Shadow | $2.49/mo | 27 months: $59.99 | Yes | 7 days | ✓ | ✓ | ✓ | ✓ | ✓ Yes (2.5 s) | 4.2/5 (195 reviews) | |
| ✓ On by default all servers | $3.00/mo | 28 months: $84 | No | 30 days | ✗ | ✗ | ✓ | ✗ | ✗ Blocked | 4.4/5 (29,706 reviews) | |
| ✓ On by default Camouflage, with OpenVPN | See site | See site | No | 30 days | ✗ | ✗ | ✗ | ✓ | ✗ Blocked | 4.3/5 (31,823 reviews) | |
| Turn on manually Stealth, free plan too | $2.99/mo | 12 months: $35.88 | Yes | 30 days | ✗ | ✗ | ✗ | ✓ | ✓ Yes (2.5 s) | 2.1/5 (1,040 reviews) | |
| Turn on manually StealthVPN / OpenWeb | $12.50/mo | 24 months: $300 | No | See site | ✗ | ✗ | ✗ | ✓ | ✗ Blocked | 1.3/5 (110 reviews) | |
| Turn on manually Shadowsocks, OpenVPN only | $2.03/mo | 40 months: $81.2 | No | 30 days | ✗ | ✗ | ✗ | ✗ | ✗ Blocked | 4.2/5 (11,033 reviews) | |
| Turn on manually selected servers | $2.19/mo | 28 months: $61.32 | No | 45 days | ✗ | ✗ | ✗ | ✓ | ✗ Blocked | 4.0/5 (24,178 reviews) | |
| Turn on manually switch to OpenVPN | $1.69/mo | 60 months: $101.55 | No | 31 days | ? | ✗ | ✗ | ✓ | ✓ Yes (2.6 s) | 4.4/5 (17,994 reviews) | |
| ✓ On by default TrustTunnel | $2.99/mo | 24 months: $71.76 | Yes | 30 days | ✓ | ✗ | ✓ | ✓ | Official site blocked; our special link opens (2.3 s) | 4.3/5 (290 reviews) | |
| Turn on manually QUIC / Shadowsocks / LWO | $5.61/mo | €5/mo | No | 14 days | ✗ | ✗ | ✗ | ✓ | ✗ Blocked | 3.2/5 (192 reviews) | |
| Turn on manually Stealth / WStunnel | $5.75/mo | 12 months: $69 | Yes | See site | ✗ | ✗ | ✗ | ✓ | ✗ Blocked | 4.7/5 (13,355 reviews) | |
| Turn on manually Scramble, OpenVPN TCP | See site | See site | No | 30 days | ✓ | ✗ | ✗ | ✗ | ✗ Blocked | 4.4/5 (2,695 reviews) | |
| Not listed | $7.08/mo | 12 months: $84.99 | Yes | 30 days | ✓ | ✓ | ✓ | ✓ | ✓ Yes (2.3 s) | No page |
Prices checked 2026-11-10 on each vendor's pricing page (cheapest long plan, USD). Check the vendor's checkout for the final price.
Obfuscation checked 2026-11-14 on each vendor's site and help center: "on by default" = nothing to set; "turn on manually" = switch protocol or mode in settings; "not listed" = the vendor describes no obfuscation.
Payment methods checked 2026-11-10 on each vendor's payment pages: all 14 take cards and PayPal; ✗ = not listed, ? = the vendor's own pages disagree.
China access: whether the official website opens from mainland China networks (tests the website only, not the VPN connection). Last checked 2026-11-11 04:07 Beijing time.
Trustpilot score and review count checked 2026-11-10.