Switch your DNS resolver - the classic first fix

Introduction to DNS Resolvers

When you try to access a website, your device sends a request to a DNS resolver to translate the domain name into an IP address. By default, your device uses the DNS resolver provided by your Internet Service Provider (ISP). However, this resolver may be filtering or blocking certain websites. To unblock these websites, you can change your DNS resolver to a public DNS service.

Do this first: the 30-second test

If you are on Windows or macOS, temporarily set your device DNS manually to 8.8.8.8 (Google) or 9.9.9.9 (Quad9) and reload the blocked site. On Android, use Private DNS dns.google. If the site opens, you are done: your network was a pure DNS filter. This test will help you determine if changing your DNS resolver will unblock the website.

Per device: the exact clicks

To change your DNS resolver, follow these steps for your device:

• Windows 11: Settings, Network and internet, your connection, DNS server assignment, Edit, Manual. Preferred 8.8.8.8, alternate 8.8.4.4. Leave DoH off for this test - plain DNS is the point.
• macOS: System Settings, Network, your interface, Details, DNS. Add 8.8.8.8 and 9.9.9.9, remove or leave the old entries.
• Router (covers everything behind it): log into the router admin page (usually 192.168.1.1 or 192.168.0.1), find the WAN/DNS settings, and replace the automatic DNS with 8.8.8.8 / 8.8.4.4 or 9.9.9.9. Every device in the household then stops asking the filtered resolver - phones included, which is why this is the classic fix for smart TVs and consoles that lack settings screens.
• Android: Private DNS (encrypted) or Wi-Fi, long-press the network, Modify network, Advanced, IP settings, Static, set DNS 2/3.

Using Cloudflare's 1.1.1.1

Cloudflare's 1.1.1.1 is a popular public DNS service that offers fast and private DNS resolution. To use 1.1.1.1, follow these steps:

• Windows 11: Settings, Network and internet, your connection, DNS server assignment, Edit, Manual. Preferred 1.1.1.1, alternate 1.0.0.1.
• macOS: System Settings, Network, your interface, Details, DNS. Add 1.1.1.1 and 1.0.0.1, remove or leave the old entries.
• Router (covers everything behind it): log into the router admin page (usually 192.168.1.1 or 192.168.0.1), find the WAN/DNS settings, and replace the automatic DNS with 1.1.1.1 / 1.0.0.1.

Why this often stops working

Network admins learned the trick. Modern filters do three things beyond DNS: block DoH endpoints, drop IP connections to blocked site IPs, and inspect the TLS handshake. When you set 8.8.8.8 and the site still fails with a timeout, you are past the resolver layer - do not spend more time on DNS, move to a tunnel (WARP, Psiphon, Tor) or a VPN.

Which resolver to pick

There are several public DNS services available, each with its own strengths and weaknesses. Here are a few options:

• 8.8.8.8 (Google): fast, everywhere, large anycast network. Google sees your lookups.
• 1.1.1.1 (Cloudflare): fast, short data retention per their published policy.
• 9.9.9.9 (Quad9): non-profit, malware-blocking by default.
• Your ISP's resolver: the thing you are replacing. It is usually the honest answer for unblocking nothing and fastest for nothing.

Pick by what matters on your network. If a government filter also forces 8.8.8.8 through a transparent proxy (common in heavy-censorship countries), plain DNS changes do nothing - jump to Tor with bridges.

Troubleshooting

If you are having trouble changing your DNS resolver, here are a few things to check:

• Make sure you have the correct IP addresses for the DNS service you are using.
• Check that your device is using the new DNS resolver by visiting a website that was previously blocked.
• If you are using a router, make sure you have updated the DNS settings for the router and not just your device.

Conclusion

Changing your DNS resolver is a simple and effective way to unblock websites and improve your online security and privacy. By following the steps outlined in this guide, you can switch to a public DNS service like Google Public DNS, Quad9, or Cloudflare's 1.1.1.1 and start browsing the internet with more freedom.

For more information on DNS and online security, visit our guides page for more resources on how to unblock websites and stay safe online.

As Quad9 notes, "Quad9 is a free service that replaces your default ISP or enterprise Domain Name Server (DNS) configuration" [2]. By using a public DNS service like Quad9, you can improve your online security and privacy.

According to Cloudflare, "1.1.1.1 for Families automatically blocks DNS queries to domains associated with malware, phishing, or (optionally) adult content" [3]. This makes Cloudflare's 1.1.1.1 a great option for families and individuals who want to block malicious content.

As Google notes, "Google Public DNS is a free, global Domain Name System (DNS) resolution service that you can use as an alternative to your current DNS provider" [1]. By using Google Public DNS, you can improve your online security and privacy.