I changed my Android’s DNS for the first time a few years ago and it was like taking a blindfold off my connection. Pages that loaded slowly started opening instantly, certain ISP blocks disappeared, and I felt like I was browsing more privately. Setting up custom DNS on Android is one of those simple improvements that makes a real difference.
Table of contents
Table of contents
- What is DNS and why you should change it
- Best DNS servers for Android in 2026
- How to set up custom DNS on Android step by step
- Custom DNS and VPN: do they work together?
- Common mistakes when changing DNS on Android
- DNS over HTTPS vs DNS over TLS: what’s the difference?
- Family DNS: protecting younger users
- FAQ: Frequently asked questions
- Conclusion
What is DNS and why you should change it
DNS stands for Domain Name System. It’s like the phone book of the internet: when you type “google.com” in your browser, DNS translates that name into the numeric IP address that servers understand (like 142.250.80.46). Without DNS, you’d have to remember numbers instead of names.
By default, your ISP assigns you its own DNS servers. These aren’t always the best: they can be slow, log your browsing history, block certain sites, or even inject ads. Switching to a custom DNS on Android gives you more control over your connection.
Benefits of using a custom DNS:
- Faster loading speeds: Faster DNS servers reduce name resolution time.
- Better privacy: Some DNS providers don’t log your browsing history.
- Ad blocking: DNS like NextDNS block ads at the network level.
- Content access: They can bypass basic regional blocks.
- Security: Some DNS automatically filter malicious sites and phishing.
Pro-tip: Changing DNS is not the same as using a VPN. DNS only affects domain name resolution, it doesn’t encrypt all your traffic like a VPN does. For maximum privacy, use both.
Best DNS servers for Android in 2026
Before configuring DNS on your Android, choose the right server. Here are the ones I recommend.
Cloudflare DNS (1.1.1.1)
The fastest DNS in most tests. Cloudflare promises not to log your browsing history. It’s my primary choice.
- Primary DNS: 1.1.1.1
- Secondary DNS: 1.0.0.1
- Encrypted (DoH): https://cloudflare-dns.com/dns-query
Google DNS (8.8.8.8)
The most popular and reliable. Google does log anonymous data to improve its services, but it’s fast and stable.
- Primary DNS: 8.8.8.8
- Secondary DNS: 8.8.4.4
- Encrypted (DoH): https://dns.google/dns-query
NextDNS
My favorite for blocking ads and tracking. You can configure it with custom blocklists. Has a free tier of 300,000 queries per month.
- Primary DNS: 45.90.28.x (varies by account)
- Secondary DNS: 45.90.30.x
- Control panel: my.nextdns.io
Quad9 (9.9.9.9)
Security-focused DNS. Automatically blocks known malicious domains. Ideal if security is your priority.
- Primary DNS: 9.9.9.9
- Secondary DNS: 149.112.112.112
| DNS | Speed | Privacy | Ad blocking | Security |
|---|---|---|---|---|
| Cloudflare 1.1.1.1 | Very high | High | No | Medium |
| Google 8.8.8.8 | High | Medium | No | Medium |
| NextDNS | High | High | Yes (configurable) | High |
| Quad9 | Medium | High | No | Very high |
| AdGuard DNS | Medium | High | Yes | High |
How to set up custom DNS on Android step by step
Android offers several ways to change DNS. Here are the three most common methods.
Method 1: From Android settings (Android 9+)
This is the easiest method and doesn’t require additional apps.
- Open Settings on your Android.
- Go to Connections > More connection settings (varies by brand).
- Tap Private DNS.
- Select Private DNS provider hostname.
- Enter the hostname of your preferred DNS:
- Cloudflare:
one.one.one.one - Google:
dns.google - NextDNS: your custom NextDNS hostname
- Cloudflare:
- Tap Save.
Method 2: Change DNS for a specific WiFi network manually
If you prefer to change DNS only for a specific WiFi network:
- Go to Settings > WiFi.
- Long-press the WiFi network you’re connected to.
- Tap Modify network or the gear icon.
- Tap Advanced options.
- Change IP settings from DHCP to Static.
- Enter the DNS addresses in the DNS 1 and DNS 2 fields.
- Save changes.
Method 3: Use a DNS app
Apps like 1.1.1.1 (Cloudflare) or Nebulo make DNS switching easy and support DNS over HTTPS (DoH) for greater privacy.
- Download the app from Google Play.
- Open the app and select your preferred DNS.
- Enable the connection. The app creates a local VPN to route DNS queries.
Pro-tip: Method 1 (Android’s private DNS) uses DNS over TLS, which encrypts your DNS queries. It’s the best option for most users because it works on all networks (WiFi and mobile data) without needing apps.
Custom DNS and VPN: do they work together?
Yes, but with nuances. If you use a VPN, traffic first goes through the VPN tunnel and then DNS is resolved. This means:
- If your VPN has its own DNS (most do), your Android’s custom DNS might be ignored.
- To use custom DNS with a VPN, you need a VPN that allows custom DNS configuration (like WireGuard or OpenVPN with manual setup).
- Some VPNs like NordVPN and Mullvad allow changing DNS in their settings.
My recommendation: if you use a trusted VPN, let it handle DNS. If you don’t use a VPN, configure custom DNS on Android directly.
Common mistakes when changing DNS on Android
Not verifying the change worked
After changing DNS, verify it’s active. Go to dnsleaktest.com from your browser and check that your configured DNS appears, not your ISP’s.
Using unknown or untrusted DNS
Don’t use DNS from unknown sources. A malicious DNS can redirect you to fake sites, log everything you do, or inject code into pages. Only use DNS from recognized providers: Cloudflare, Google, Quad9, NextDNS, AdGuard.
Changing DNS without understanding what it does
If you change DNS and then can’t access certain websites, the DNS you chose might have active filters. Quad9, for example, blocks malicious sites but might block false positives.
Not configuring DNS for mobile data
Many users change DNS only for WiFi and forget that mobile data uses the ISP’s DNS. Android’s private DNS method (Method 1) applies to all connections.
DNS over HTTPS vs DNS over TLS: what’s the difference?
When setting up custom DNS on Android, we encounter two encryption technologies: DNS over HTTPS (DoH) and DNS over TLS (DoT). Both encrypt your DNS queries so nobody can spy on which sites you visit, but they work slightly differently.
DNS over TLS (DoT) uses a dedicated port (853) for encrypted DNS queries. It’s what Android’s native “Private DNS” method uses. It’s efficient and easy to block by firewalls if needed.
DNS over HTTPS (DoH) sends DNS queries inside normal HTTPS traffic (port 443). This makes it harder to detect and block, since it blends in with other web traffic. It’s what apps like Cloudflare’s 1.1.1.1 use.
For most users, the difference is irrelevant. Both options effectively protect your privacy. DoH has the advantage of being harder to block, while DoT is easier to configure natively on Android.
| Feature | DNS over TLS | DNS over HTTPS |
|---|---|---|
| Port | 853 | 443 |
| Android configuration | Native (Method 1) | Requires app |
| Difficulty to block | Easy | Hard |
| Speed | Slightly faster | Similar |
| Data usage | Minimal | Minimal |
Pro-tip: If you travel to countries with internet censorship, DoH is the better option because it’s harder to block. At home, DoT is sufficient and simpler to configure.
Family DNS: protecting younger users
If you have children who use Android, you can configure specific DNS servers that automatically block inappropriate content. This works across the entire device without needing additional apps.
CleanBrowsing Family Filter:
- DNS: 185.228.168.168 and 185.228.169.168
- Blocks adult content, phishing, and malware
Cloudflare for Families:
- Security DNS: 1.1.1.2 and 1.0.0.2
- Security + Family DNS: 1.1.1.3 and 1.0.0.3
- The family level also blocks adult content
OpenDNS Family Shield:
- DNS: 208.67.222.123 and 208.67.220.123
- Automatic adult content blocking
These DNS servers don’t replace complete parental supervision, but they add an extra layer of protection that works without the child having to do anything. Configure them using Android’s Private DNS Method 1 so it works on both WiFi and mobile data.
| DNS | Blocks adults | Blocks malware | Speed |
|---|---|---|---|
| CleanBrowsing Family | Yes | Yes | High |
| Cloudflare 1.1.1.3 | Yes | Yes | Very high |
| OpenDNS Family Shield | Yes | Yes | High |
FAQ: Frequently asked questions
Does changing DNS improve internet speed?
It can improve page loading speed by reducing domain name resolution time. It doesn’t increase your download speed (that depends on your ISP), but it can make websites feel faster.
Is it safe to change DNS on Android?
Yes, as long as you use a trusted DNS. Cloudflare, Google, and Quad9 are safe. Avoid DNS from unknown sources.
Does custom DNS affect all apps?
If you use Android’s private DNS method (Method 1), it affects all connections on your device. If you change WiFi-only DNS (Method 2), it only affects that network.
Can I use custom DNS with mobile data?
Yes. Android’s private DNS method works on both WiFi and mobile data. This is the main advantage of that method.
Is free NextDNS enough?
For personal use, yes. The free tier of 300,000 queries per month covers one person’s normal usage. If you need more, the premium plan costs about $2/month.
Conclusion
Setting up custom DNS on Android is one of those quick improvements you can make today with no risk and immediate benefits. If you want speed, use Cloudflare 1.1.1.1. If you want ad blocking, NextDNS or AdGuard. If you want security, Quad9.
My recommendation for the average user: use Android’s private DNS (Method 1) with Cloudflare (one.one.one.one). It’s fast, private, and works on all your connections. In under a minute, you’ll have an improved browsing experience.
TecnoOrange