Encrypted DNS (DoH) setup for every browser and OS

Introduction to DoH

To access a website, your device needs to perform a DNS lookup to resolve the domain name into an IP address. However, on some networks, the DNS server may block or refuse certain lookups, preventing you from accessing specific websites. Encrypting DNS queries using DNS over HTTPS (DoH) can help bypass these blocks. DoH sends DNS queries as HTTPS requests, making it difficult for the network to intercept or block them.

How to Identify a DNS Block

Before setting up DoH, it's essential to determine if the issue is indeed a DNS block. Run through the following checklist:

1. The website shows "server not found," "DNS probe finished," or an infinite spinner, while other websites load fine.
2. The site is measurably up for other people, but your browser cannot reach it.
3. A filter message appears (e.g., Securly, Forcepoint, or your antivirus) that names the website.

If any of these conditions are met, it's likely a DNS block. A block deeper in the connection (timeout on connect, reset) will not be affected by DoH.

Setting Up DoH in Firefox

To set up DoH in Firefox:

1. Open Settings, search for "DNS over HTTPS" (Privacy & Security section).
2. Set it to Max Protection - the default setting still falls back to the system resolver, which the filter can keep blocking.
3. Pick Cloudflare (fastest, logs minimal data) or Quad9 (filters known malware domains).
4. Restart the browser. Websites that were previously "not found" should now resolve.

Setting Up DoH in Chrome and Edge

To set up DoH in Chrome and Edge:

1. Settings, Privacy and security, Security.
2. Enable "Use secure DNS" and pick the provider, or paste a custom DoH address, such as https://dns.quad9.net/dns-query.
3. In Edge, the same switch hides under "Privacy, search, and services," Security.

Setting Up DoH on Android

To set up DoH on Android:

1. Settings, Network and internet, Private DNS.
2. Choose "Private DNS provider hostname" and enter one.one.one.one (Cloudflare) or dns.quad9.net (Quad9).
3. Every app on the phone will now resolve over TLS, including those that ignore system proxy settings.

Setting Up DoH on iOS and macOS

On iOS, install Cloudflare's free 1.1.1.1 app. On macOS, go to System Settings, your network, Details, DNS - recent macOS versions accept DoH configuration profiles signed by the provider; Cloudflare and Quad9 both publish them.

Setting Up DoH on Windows 11

Windows 11 supports DoH natively:

1. Settings, Network and internet, your connection, DNS server assignment, Edit.
2. Set manual DNS 1.1.1.1 / 1.0.0.1 and flip "DNS over HTTPS" to on.
3. This covers the whole machine, unlike the browser switch.

Limitations of DoH

While DoH can help bypass DNS blocks, it has limitations:

• It does not hide the website once your browser connects: if the network cuts the TCP or TLS connection to the website's address (an SNI block), DNS never mattered.
• On a managed school or work device, the administrator can force their resolver back or block DoH itself. If every provider fails, assume a deeper block.
• It does not hide your traffic from the network operator - it only removes the name resolution as a choke point.

Choosing a DoH Provider

Cloudflare (1.1.1.1) is a popular choice: fast, with no retention of personal data per their published policy [1]. Quad9 (9.9.9.9) filters malware domains on top, which can be useful. When choosing a provider, consider factors like speed, privacy, and security. You can also use our DNS setup tool to generate the exact steps for your device.

Cloudflare's DoH Setup

According to Cloudflare's setup documentation [1], you can set up DoH by following these steps:

1. Go to the Cloudflare 1.1.1.1 setup page.
2. Choose your device or router from the list.
3. Follow the instructions to set up DoH.

Quad9's DoH Setup

Quad9 provides a similar setup process [2]. You can set up DoH by:

1. Going to the Quad9 setup page.
2. Choosing your device or router from the list.
3. Following the instructions to set up DoH.

Troubleshooting DoH Issues

If you encounter issues with DoH, try the following:

• Check your internet connection and ensure it's stable.
• Verify that your device or router supports DoH.
• Try switching to a different DoH provider.
• Check for any software updates that may be causing the issue.

Conclusion

DoH is a powerful tool for bypassing DNS blocks and improving online privacy. By following the setup instructions for your device or browser, you can encrypt your DNS queries and access websites that were previously blocked. Remember to choose a reputable DoH provider and consider factors like speed, privacy, and security.

Additional Resources

For more information on DoH and online privacy, you can visit our guides section, which includes articles on choosing a VPN and using Tor. The method finder helps you pick the fix that matches your block.