Your internet service provider assigns you a DNS server by default — and by default, every domain lookup you make goes through their servers, where it can be logged, throttled, or sold to data brokers. Switching to a better DNS server takes about five minutes, requires no technical background, and can measurably speed up page loads, block malware, and stop your ISP from seeing your browsing history. Here is how to do it on every major platform in 2026.
What changed in 2026
- DNS-over-HTTPS (DoH) is now supported natively in Windows 11, macOS Ventura+, iOS 16+, and Android 9+. You no longer need a third-party app to encrypt DNS queries.
- Cloudflare, Google, and Nextdns all expanded their filtering options. Cloudflare's 1.1.1.2 blocks malware; 1.1.1.3 adds adult content filtering. Google's 8.8.8.8 added threat intelligence filtering.
- ISP DNS got worse. Several major ISPs now inject ads into DNS error pages or redirect mistyped domains — another reason to leave their servers.
- Router firmware improved DoH support. Many 2024+ routers with recent firmware support DoH natively in the DNS settings page — no per-device setup needed.
Best DNS servers in 2026
| Provider |
Primary |
Secondary |
Best for |
| Cloudflare |
1.1.1.1 |
1.0.0.1 |
Speed + privacy |
| Cloudflare (malware block) |
1.1.1.2 |
1.0.0.2 |
Families, security |
| Google |
8.8.8.8 |
8.8.4.4 |
Broad compatibility |
| Quad9 |
9.9.9.9 |
149.112.112.112 |
Security-focused |
| NextDNS |
Custom |
Custom |
Power users, filtering |
| AdGuard DNS |
94.140.14.14 |
94.140.15.15 |
Network-level ad blocking |
Cloudflare 1.1.1.1 is the fastest globally in most benchmarks and has a clear no-logging privacy policy. Quad9 is the best choice if security blocking without a custom dashboard is your priority. NextDNS is best for power users who want per-device filtering logs and custom blocklists.
How to change DNS on your router (covers all devices at once)
This is the recommended approach — one change, everything on your network benefits.
- Open a browser and go to your router's admin page — usually
192.168.1.1 or 192.168.0.1. Check the sticker on the router if unsure.
- Log in with your router credentials (default is often
admin/admin — change this if you have not).
- Find WAN settings, Internet settings, or DNS settings — location varies by brand.
- Change Primary DNS to
1.1.1.1 and Secondary DNS to 1.0.0.1 (or your preferred server pair).
- Save and apply. Your router will briefly reconnect.
- Test at 1.1.1.1/help to confirm it is working.
If your router supports DoH, look for a "DNS-over-HTTPS" or "Secure DNS" toggle in the same settings panel and enable it using Cloudflare's DoH URL: https://cloudflare-dns.com/dns-query.
How to change DNS on Windows 11
- Open Settings → Network and Internet → Wi-Fi (or Ethernet) → click your connection name.
- Under DNS server assignment, click Edit.
- Change to Manual, enable IPv4, enter your preferred DNS.
- To enable DoH: in the same dialog, set DNS-over-HTTPS to On (automatic template) for Cloudflare, Google, or Quad9 (Windows knows their DoH endpoints).
- Click Save.
How to change DNS on macOS
- Open System Settings → Network → click your active connection → Details.
- Click the DNS tab.
- Click the + button and add
1.1.1.1, then 1.0.0.1.
- Remove any existing ISP DNS entries.
- Click OK, then Apply.
For encrypted DNS (DoH/DoT) on macOS, the easiest method is installing a configuration profile from Cloudflare or NextDNS — each provider offers a downloadable .mobileconfig file.
How to change DNS on iPhone / iPad (iOS 16+)
- Settings → Wi-Fi → tap your network name → Configure DNS → Manual.
- Delete existing servers, add
1.1.1.1 and 1.0.0.1.
- For encrypted DNS: Settings → General → VPN & Device Management → install Cloudflare's DNS profile, which enables DoH system-wide.
How to change Private DNS on Android 9+
Android's "Private DNS" feature is DoT built-in — the simplest way to get encrypted DNS on Android.
- Settings → Network & Internet → Private DNS.
- Select Private DNS provider hostname.
- Enter
one.one.one.one (Cloudflare) or dns.google (Google) or dns.quad9.net (Quad9).
- Save. Android will now use DNS-over-TLS automatically.
How to pick
- Want the fastest DNS? Run dnsbench on Windows or
dnsperf on macOS/Linux to test response times to each server from your location. The fastest globally may not be the fastest for you.
- Want ad blocking without Pi-hole? Use AdGuard DNS or NextDNS with a custom blocklist.
- Want maximum security? Quad9 blocks confirmed malicious domains at the DNS layer.
- Family filtering? Cloudflare 1.1.1.3 is the simplest; OpenDNS FamilyShield is another solid option.
Common mistakes
Changing DNS on one device but not the router. If you change only your laptop, your phone still uses ISP DNS. Change the router to cover everything.
Forgetting IPv6 DNS. If your ISP assigns IPv6 addresses, also set IPv6 DNS (Cloudflare IPv6: 2606:4700:4700::1111 and 2606:4700:4700::1001).
Trusting any random "fastest DNS" list. DNS speed is geography-dependent. A server fast in Germany may be slow in Mumbai. Benchmark for your location.
Not testing after the change. Confirm with nslookup google.com in terminal or visit the provider's test page. A typo in the IP address leaves you with no resolution.
What to skip
- Obscure no-name DNS providers with no published privacy policy — your DNS logs are sensitive data.
- Changing DNS to bypass geo-restrictions — DNS alone does not change your IP; you need a VPN for that. DNS and VPN solve different problems.
- Multiple conflicting DNS configurations — if your router uses one DNS and your device overrides it, troubleshooting breaks. Pick one level to configure.
FAQ
Will changing DNS speed up my internet?
It can speed up the time to resolve domain names (the first step of any connection), but it does not change your download speed. On slow ISP DNS servers, the improvement is noticeable on page load times.
Is Cloudflare DNS private?
Cloudflare publishes a privacy policy committing to not selling DNS query data and deleting logs within 24 hours. KPMG audits this annually. Quad9 is a non-profit with similarly strong commitments.
Does changing DNS affect streaming geo-restrictions?
No. Some older geo-blocks used DNS-based tricks, but major streaming services check your IP address, not DNS. A VPN is needed to change your apparent location.
Can I use different DNS on each device?
Yes — device-level DNS overrides the router. This can be useful if you want stricter filtering on a kids' device and standard DNS everywhere else.
Where to go next
See How to set up a guest network in 2026, How to test internet speed in 2026, and How to set up a firewall in 2026.