Public DNS Servers
Addresses for Cloudflare, Google, Quad9 and more, and how to switch on any device
| Provider | IPv4 | IPv6 | Private DNS / DoT hostname |
|---|---|---|---|
Cloudflare Fastest in most tests; 1.1.1.2 adds malware filtering, 1.1.1.3 adds adult-content filtering. | 1.1.1.1, 1.0.0.1 | 2606:4700:4700::1111, 2606:4700:4700::1001 | one.one.one.one |
Google Public DNS Very reliable worldwide; no filtering. | 8.8.8.8, 8.8.4.4 | 2001:4860:4860::8888, 2001:4860:4860::8844 | dns.google |
Quad9 Non-profit; filters known malicious domains by default. | 9.9.9.9, 149.112.112.112 | 2620:fe::fe, 2620:fe::9 | dns.quad9.net |
Cisco OpenDNS Long-running service with optional family filtering (FamilyShield). | 208.67.222.222, 208.67.220.220 | 2620:119:35::35, 2620:119:53::53 | – |
AdGuard DNS Filters ads and trackers for every app on the device. | 94.140.14.14, 94.140.15.15 | 2a10:50c0::ad1:ff, 2a10:50c0::ad2:ff | dns.adguard-dns.com |
CleanBrowsing (Family) Filters adult content; good for children's devices. | 185.228.168.168, 185.228.169.168 | 2a0d:2a00:1::, 2a0d:2a00:2:: | family-filter-dns.cleanbrowsing.org |
Not sure which DNS servers you use now? Our DNS leak test shows every server that answers your lookups and who runs it.
What Is a DNS Server?
DNS (the Domain Name System) turns names like safepassvpn.com into the IP addresses computers connect to. Every time you open a site or an app checks for updates, your device asks a DNS server, called a resolver, for the address.
By default that resolver is run by your internet provider. It sees the name of every site you look up, and unless the lookup is encrypted, so can anyone else on the network. Switching to a public DNS service can be faster and more reliable, and some filter out malware or ads.
Which DNS Server Is Best?
- Fastest: Cloudflare (1.1.1.1) is usually quickest, with Google close behind. Speed depends on where you are, so try both.
- Security: Quad9 (9.9.9.9) or Cloudflare 1.1.1.2 filter known malicious sites.
- Fewer ads: AdGuard DNS filters ads and trackers in apps as well as browsers.
- Family: CleanBrowsing Family, Cloudflare 1.1.1.3 or OpenDNS FamilyShield.
A public DNS changes who sees your lookups, not who sees your traffic. Your provider still sees which sites you connect to. Encrypted DNS (Private DNS on Android, DNS over HTTPS in browsers) hides the lookups themselves.
How to Change Your DNS Server
Android (9 and newer)
Settings → Network & internet → Private DNS (on Samsung: Connections → More connection settings → Private DNS). Choose Private DNS provider hostname and enter a hostname from the table, such as one.one.one.one. This encrypts your lookups on Wi-Fi and mobile data.
iPhone and iPad
Settings → Wi-Fi → tap (i) next to your network → Configure DNS → Manual. Remove the existing servers, add two addresses from the table and tap Save. This applies to that Wi-Fi network only.
Windows 11
Settings → Network & internet → Wi-Fi or Ethernet → your network → DNS server assignment → Edit. Choose Manual, turn on IPv4 (and IPv6), enter the addresses and set DNS over HTTPS to On if offered.
Mac
System Settings → Wi-Fi (or Network) → Details next to your network → DNS. Click + to add the addresses, remove the old ones, then OK.
Router
Open the router's admin page (often 192.168.0.1 or 192.168.1.1), find the DNS or WAN/Internet settings, and enter the addresses. Every device on your network then uses them unless it has its own setting.
DNS and VPNs
A good VPN sends your DNS lookups through its encrypted tunnel to its own resolvers, so your provider doesn't see them. SafePassVpn does this on Android. If you set a Private DNS hostname, Android sends lookups to that service instead, so set Private DNS to Automatic or Off while the VPN is on to keep everything inside the tunnel. Our Private DNS on Android guide explains each setting.
Check it worked with the DNS leak test, and see your connection details on What Is My IP.
DNS Server FAQs
Quick answers to common questions.