Encrypted DNS Resolvers
Don't let Google see all your DNS traffic. Discover privacy-centric alternatives to the traditional DNS providers.
||Some||Yes||Yes||Based on server choice|
||No||Yes||Yes||Some DoH servers can optionally filters ads, trackers, or malicious domains.|
||Some||Yes||Yes||Based on server choice.||
|Foundation for Applied Privacy||
||No||No||Yes||Based on server choice (DoH servers only)|
||Optional||Yes||Yes||Based on server choice||
||No||Yes||Yes||Based on server choice|
||No||Yes||Yes||Based on server choice, Malware blocking by default|
Encrypted DNS Clients for Desktop
A DNS proxy with support for DNSCrypt, DNS-over-HTTPS, and Anonymized DNSCrypt, a relay-based protocol that the hides client IP address.
Firefox's built-in DNS-over-HTTPS resolver
Encrypted DNS Clients for Android
Android 9's built-in DNS-over-TLS resolver
Encrypted DNS Clients for iOS
Native Operating System Support
In iOS, iPadOS, tvOS 14 and macOS 11, DoT and DoH were introduced. DoT and DoH are supported natively by installation of profiles (through mobileconfig files opened in Safari). After installation, the encrypted DNS server can be selected in Settings → General → VPN and Network → DNS.
DNS-over-TLS (DoT): A security protocol for encrypted DNS on a dedicated port 853. Some providers support port 443 which generally works everywhere while port 853 is often blocked by restrictive firewalls.
DNS-over-HTTPS (DoH): Similar to DoT, but uses HTTPS instead, being indistinguishable from "normal" HTTPS traffic on port 443 and more difficult to block. Warning
DNSCrypt: With an open specification, DNSCrypt is an older, yet robust method for encrypting DNS.
Anonymized DNSCrypt: A lightweight protocol that hides the client IP address by using pre-configured relays to forward encrypted DNS data. This is a relatively new protocol created in 2019 currently only supported by dnscrypt-proxy and a limited number of relays.
Privacy Guides is a socially motivated website that provides information for protecting your data security and privacy.
Unless otherwise noted, the original content on this website is made available under a CC0 1.0 Universal Public Domain Dedication.