Private DNS: Stay safe and see more

A “private DNS” typically refers to a non-public DNS server, so it’s a server that is not available for public use. While it doesn’t guarantee safety, often private DNS servers are secure because they use TLS and HTTPS protocols, offering encryption and protection from eavesdropping. If you still have doubts, you can use a DNS leak test to check your DNS service.

A private DNS server protects you from several types of cyberattacks and doesn’t let third parties snoop on your internet activity. That’s why we recommend always keeping your private DNS on.

A private DNS on Android is a feature that allows you to set a system-wide DNS server using DNS over TLS. In other words, DNS queries from your device, essentially your every click, is encrypted and sent over TLS. You can turn the feature on in the “Advanced” settings under “Network and internet” on your Android.

Yes, you can also set up a private DNS on your iOS devices like iPhones and iPads. To enable private DNS mode, you’ll need to configure it by adding the DNS address under the settings of your Wi-Fi network.

DNS filtering blocks websites and content at the DNS level (that is, before it can even be opened and loaded onto your device). While it can be used to filter malicious links and inappropriate websites, it’s also a tool for online censorship — public DNS services use filtering to block access to any content deemed illegal by autocratic governments.

DNS flushing refers to clearing the DNS cache on your computer. Your device automatically records previous DNS entries to save time in future queries, which can cause issues when the website you’re trying to visit has changed servers. Flushing your DNS cache will force your device to send a new DNS query and connect properly the next time you visit the site.

Smart DNS directs your DNS queries through its servers without affecting the rest of your data traffic or changing your IP address. This helps foil automatic protection systems that fire off when you try to visit certain sites from different IP addresses and lets you access networks that only allowlist your real IP (like your workplace).

Unlike a VPN connection using a private DNS, however, a smart DNS will not encrypt your online traffic — you might have an easier time accessing content, but you’ll still be very vulnerable. Most top VPNs offer smart DNS configurations, such as NordVPN’s aptly named SmartDNS feature.