Every time you type a web address into your browser, your device sends a query to a Domain Name System (DNS) server to translate human-readable names (e.g., google.com) into machine-routable numerical IP addresses (142.250.190.46). By default, your home router uses the DNS servers supplied by your Internet Service Provider (ISP)—which are frequently sluggish, prone to lookup outages, and actively logged for advertising profiling.
Switching to an independent, privacy-focused DNS resolver reduces webpage lookup latency, blocks malicious phishing domains, and encrypts your queries with DNS-over-HTTPS (DoH).
The Best Public DNS Resolvers Compared
| Provider | Primary IPv4 | Secondary IPv4 | Primary Focus |
| :--- | :--- | :--- | :--- |
| Cloudflare | 1.1.1.1 | 1.0.0.1 | Fastest lookup speed, strict 24-hour privacy log purging |
| Google Public DNS | 8.8.8.8 | 8.8.4.4 | Global resilience, high availability, anycast routing |
| Quad9 (Security) | 9.9.9.9 | 149.112.112.112 | Blocks malware, phishing domains, and malicious botnets |
| Cloudflare Family | 1.1.1.3 | 1.0.0.3 | Automatically blocks adult content and known malicious URLs |
Method 1: Change DNS at the Router Level (Protects All Home Devices)
Configuring DNS in your router settings automatically upgrades every smartphone, smart TV, console, and guest laptop connected to your Wi-Fi network without individual device setup.
- Open a browser and type your router's gateway IP (commonly
192.168.1.1,192.168.0.1, or10.0.0.1). - Log in with your router administrator credentials (located on your router's physical underside sticker).
- Look for WAN, Internet, or DHCP / DNS Settings.
- Change DNS from Automatic / ISP Assigned to Manual.
- Enter:
- Primary DNS:
1.1.1.1 - Secondary DNS:
1.0.0.1
- Click Save / Apply and reboot your router to propagate the new nameservers across your network.
Method 2: Change DNS on Windows 11 (With Encrypted DNS-over-HTTPS)
Windows 11 natively supports encrypted DNS to prevent Wi-Fi eavesdropping on public coffee shop hotspots:
- Open Settings > Network & internet > Wi-Fi (or Ethernet).
- Click on your active network connection name.
- Next to DNS server assignment, click Edit.
- Switch from Automatic (DHCP) to Manual.
- Toggle IPv4 to On:
- Preferred DNS:
1.1.1.1 - DNS encryption: Choose Encrypted only (DNS over HTTPS).
- Alternate DNS:
1.0.0.1 - DNS encryption: Choose Encrypted only (DNS over HTTPS).
- Click Save.
Method 3: Change DNS on Android (Private DNS) & iPhone
- Android 9+: Go to Settings > Network & internet > Private DNS. Select Private DNS provider hostname and type
one.one.one.oneordns.google. Tap Save. - iPhone / iOS: Go to Settings > Wi-Fi, tap the (i) icon next to your network, scroll down to Configure DNS, select Manual, remove the existing entries, and add
1.1.1.1and1.0.0.1.