Secure DNS over HTTPS

Private DNS Resolver

Stop your ISP from reading every website you visit. This resolver encrypts your DNS queries, blocks surveillance, and races across 57 independent servers worldwide to return the fastest answer.

Your DoH Endpoint
Copied to clipboard
DNS Mode
Check Your DNS

See what DNS info websites can detect from your connection:

Checking...
Run Full DNS Leak Test
Setup Guide
01

Open browser Settings and search for DNS.

02

Go to Privacy and Security → Security and find Use Secure DNS.

03

Select With Custom Provider from the dropdown.

04

Paste your endpoint URL into the field above.

05

Verify by visiting dnsleaktest.com — your ISP's DNS should no longer appear.

01

Open Settings, scroll to the bottom, and click Network Settings.

02

Check Enable DNS over HTTPS.

03

Set the provider to Custom and paste your endpoint URL.

04

Choose Max Protection mode and click OK.

A

In your mobile browser (recommended): Open Chrome or Firefox on your phone and follow the same steps as the desktop guide above.

B

System-wide on Android / iOS: Use the RethinkDNS or Intra app. Set DNS mode to DoH and paste your endpoint URL.

Why not Android Private DNS or iOS settings? Those fields expect DNS-over-TLS (port 853) with a plain hostname — they do not accept an https:// URL. See the note below.
Why can't I paste this into Windows or Android settings?

Operating systems like Windows, Android Private DNS, and Apple profiles use DNS-over-TLS (DoT), which only accepts a plain hostname. Pasting this URL there produces an "Invalid Hostname" error.

This resolver runs on Cloudflare's global edge and speaks DNS-over-HTTPS (DoH) — the same port as every website you visit (443). Modern browsers have their own built-in DoH engine that works perfectly here. Your DNS traffic hides inside normal HTTPS, making it invisible to your ISP or any middlebox on the network.