Android · Network & Internet
Encrypt DNS lookups with a private DNS provider
Private DNS routes domain name lookups through an encrypted DNS-over-TLS connection to a chosen provider, such as Google or Cloudflare, preventing networks along the way from seeing or tampering with which sites you're visiting.
How to open Private DNS
- Open Settings
- Tap Network & internet
- Tap Private DNS
- Choose Automatic, Off, or Private DNS provider hostname
- If choosing a provider, enter its hostname and save
What you should know
- Offers Automatic, Off, or Private DNS provider hostname modes
- Applies across both Wi-Fi and mobile data connections
- Common providers include Google (dns.google), Cloudflare (1dot1dot1dot1.cloudflare-dns.com), and others
- Works independently from, and can be combined with, a VPN
Why it matters
Standard DNS lookups are unencrypted by default, meaning any network operator, from a coffee shop router to an ISP, can see and potentially log every domain a device visits, even over an otherwise HTTPS-secured connection. Enabling Private DNS closes that visibility gap without needing a full VPN, adding a meaningful layer of privacy and tamper-resistance for a setting that takes seconds to configure.
Best practices
- Choose a well-known, reputable DNS provider hostname rather than an unverified third party
- Leave it on Automatic if unsure, since this opportunistically upgrades to encrypted DNS when the network supports it
- Combine with a VPN for full traffic encryption, since Private DNS alone doesn't hide browsing content, only DNS queries
- Test connectivity after switching providers, since some hostnames may be blocked on certain networks
Common problems and fixes
- Internet stops working after setting a Private DNS hostname
- Verify the hostname was typed correctly, or switch back to Automatic if the chosen provider is unreachable on the current network
- Some apps fail to connect despite normal browsing working
- Certain corporate or public networks block non-standard DNS ports; switch to Automatic or Off on those specific networks
- Setting reverts unexpectedly
- Check for a network-specific override or a managed device policy enforcing DNS settings
Tips and tricks
- Use a DNS provider that also offers ad or tracker blocking at the DNS level for a bonus privacy benefit
- Set this once system-wide rather than relying on individual apps or browsers with their own DNS settings
Frequently asked questions
Does Private DNS replace a VPN?
No, it only encrypts DNS lookups; a VPN additionally encrypts and reroutes the actual traffic content.
Will this slow down browsing?
Any slowdown is typically negligible with a reliable provider, and some providers are optimized for low latency.
Can my carrier still see what sites I visit if Private DNS is on?
They can see encrypted traffic to an IP address, but not the plaintext domain name that a standard DNS lookup would reveal.
Related settings
- Wi-Fi ConnectionWi-Fi settings let you view nearby networks, connect with a password or QR code, and manage saved networks including auto-reconnect behavior.
- VPNVPN settings let you add, connect to, and manage virtual private networks that route your device's traffic through an encrypted tunnel, commonly used for work access or added privacy on untrusted networks. Android also supports an 'always-on VPN' mode that blocks other network traffic until the VPN connects.
- Data Usage / Network & InternetNetwork & internet settings show a breakdown of mobile data and Wi-Fi usage per app, and let you set a data warning or hard limit to avoid unexpectedly exceeding your plan. Individual apps can also be restricted from using background data to further control consumption.
More Network & Internet guides for Android
- Bluetooth DevicesBluetooth settings let you pair headphones, speakers, watches, and other accessories, and manage previously connected devices.
- NFC & Tap to PayNFC (Near Field Communication) is the short-range radio that lets your phone exchange data with a nearby reader, most commonly used for contactless payments through Google Wallet at supported terminals. It's also used for pairing some accessories and reading NFC tags, but payments are its most common everyday use.
- Hotspot & TetheringHotspot and tethering let you share your phone's mobile data connection with other devices over Wi-Fi, Bluetooth, or a USB cable. This is useful for getting a laptop online while traveling, or letting a friend's device briefly borrow your connection.
- Nearby ShareNearby Share — recently rebranded Quick Share — lets you send photos, videos, links, and files directly to another nearby Android device, Chromebook, or Windows PC using a mix of Bluetooth and Wi-Fi, without needing cellular data or a shared internet connection. Visibility settings control exactly who can discover your device and send you something.
- Airplane ModeAirplane Mode simultaneously disables cellular, Wi-Fi, and Bluetooth radios with a single toggle, complying with airline requirements while optionally letting you re-enable Wi-Fi or Bluetooth individually afterward.
- SIM & eSIM ManagerThe SIM Manager lets you view, name, activate, or remove physical SIM cards and downloaded eSIM profiles, choose a default line for calls, texts, and data, and set up dual-SIM configurations on supported devices.