v19.84 secure

Encrypted DNS

Encrypted DNS Resolvers for Improved Internet Privacy

The most reliable source for privacy tools since 2015. Software, services and privacy guides to fight surveillance with encryption for better internet privacy.

NextDNS: Blocks security threats, ads and trackers
Freemium Win Android iOS Mac Linux Router

The major advantage of NextDNS over AdGuard DNS is to be able to configure the service to your needs via parental controls, website restrictions or block whole categories of websites and apps. Easy to setup within minutes. Comes with setup guides for all systems. 300,000 queries/month for free, after that it will just work like a classic non-blocking DNS service.

Based in United States. Supports: DNS-over-TLS (DoT), DNS-over-HTTPS (DoH) and DNSCrypt.

AdGuard DNS: Blocking of Ads, Trackers and Malicious Domains
Freemium Win Android iOS Mac Linux Safari Router

Easy to setup within minutes. Comes with setup guides for all systems. You only need to enter two IP adresses. 300,000 queries/month for free, after that it will just work like a classic non-blocking DNS service. Limited to five devices on the free plan.

Based in Cyprus. Supports: DNS-over-TLS (DoT), DNS-over-HTTPS (DoH) and DNSCrypt.

Cloudflare: High Performance DNS Resolver
Free Plan Win Android iOS Mac Linux Router Bitcoin

Based in United States. Supports: DNS-over-TLS (DoT) and DNS-over-HTTPS (DoH).

Quad9: Open DNS Recursive Service for Free Security and Privacy
Free Plan Android Bitcoin Router

Based in Switzerland. Supports: DNS-over-TLS (DoT), DNS-over-HTTPS (DoH) and DNSCrypt.

Pi-hole: Self-hosted solution for experts
Free Plan For Experts Raspberry Pi Linux Self-Hosted

You can run Pi-hole in a container, or deploy it directly to a supported operating system via installer.

Definitions Explained

DNS-over-TLS (DoT): A security protocol for encrypted DNS on a dedicated port 853. Some providers support port 443 which generally works everywhere while port 853 is often blocked by restrictive firewalls.

DNS-over-HTTPS (DoH): Similar to DoT, but uses HTTPS instead, being indistinguishable from "normal" HTTPS traffic on port 443 and more difficult to block. DoH contains metadata such as user-agent (which may include system information) that is sent to the DNS server.

DNSCrypt: With an open specification, DNSCrypt is an older, yet robust method for encrypting DNS.


Encrypted DNS Clients for Improved Internet Privacy

dnscrypt-proxy: Flexible DNS proxy, supports modern encrypted protocols
Win Android Mac Linux

(Desktop) A flexible DNS proxy, with support for modern encrypted DNS protocols including DNSCrypt V2, DNS-over-HTTPS and Anonymized DNSCrypt. Also allows for advanced monitoring, filtering, caching and client IP protection through Tor, SOCKS proxies or Anonymized DNS relays.

Unbound: Validating, recursive, caching DNS resolve
Audited Win Mac Linux

(Desktop) Validating, recursive, caching DNS resolve with support for DNS-over-TLS. Designed to be fast, lean, and secure Unbound incorporates modern features based on open standards. Unbound was recently audited.

Nebulo: Light-weight, customizable and battery efficient
Android Phones Tablets

(Android) Non-root, small-sized DNS changer utilizing DNS-over-HTTPS and DNS-over-TLS.

DNSCloak: iOS GUI and Wrapper for dnscrypt-proxy
iOS Phones Tablets

(iOS) Allows for the use for dnscrypt-proxy on an iPhone or iPad, which gives users the ability to encrypt their DNS requests through the use of an on-device VPN profile.

Firefox: Built-in DNS-over-HTTPS resolver
Win Mac Linux

(Desktop) If you're using Firefox you don't need additional tools. DNS-over-HTTPS (DoH) FAQ.

DNS or Domain Name Servers are necessary for IPv4 and IPv6 devices to locate Internet services. However, DNS servers can track your web activity, but they do not convey security data. That is why you need to find safe and encrypted DNS services.

Internet privacy has become a concern, especially for users from China, Russia, and Iran. To improve internet privacy, it is important to have encrypted DNS resolvers. The DNS Resolver is a key component of a computer that directs traffic to servers. With these tools, you can set up your own encrypted DNS resolver and ensure internet privacy in various locations worldwide.

Ad blockers are beneficial to protect users against unwanted ads while surfing the internet. Commercial advertisers have been using different ways to spam users without even knowing it, by using pop-ups ads and banners on websites. If you need a simple and easy solution, here is a list of web browsers ad blockers that will keep you safe from these unwanted ads while surfing the internet.

Privacy tools listed on this page are all open-source unless marked otherwise: Criteria.

Have your Data Deleted Today

Incogni: Get your personal data off the market

Thousands of companies are collecting, aggregating and trading your personal data without you knowing anything about it. Incogni removes them for you. Available for US, UK, Canada, Switzerland, and EU residents only. 30-day money-back guarantee. Cancel anytime. Sign up now.