Key Takeaways:
- Switching from your ISP's default DNS to a third-party server like Cloudflare (1.1.1.1) or Google (8.8.8.8) can noticeably improve page load times and give you more control over your online privacy.
- Changing your DNS at the router level applies the improvement to every device on your network at once, and the process takes less than five minutes on most routers.
- The best DNS server for you depends on your priorities. Cloudflare leads in speed and privacy, Google DNS offers rock-solid reliability, and Quad9 adds built-in malware blocking at no cost.
What Is DNS and Why Does It Matter?
DNS stands for Domain Name System. Think of it as the phone book of the internet. When you type a website address like google.com into your browser, DNS translates that human-readable name into a numerical IP address that computers use to find each other. Every single website visit starts with a DNS lookup.
By default, your internet service provider handles your DNS lookups automatically. The problem is that ISP DNS servers tend to be slower than third-party alternatives, and many ISPs log your browsing activity through DNS queries. Switching to a faster, more privacy-focused DNS server is one of the easiest upgrades you can make to your home network, and it costs nothing.
Best DNS Servers in 2026 Compared
Here are the top DNS providers worth considering, along with their primary and secondary server addresses. You will need both when configuring your devices.
Cloudflare DNS (1.1.1.1)
Primary: 1.1.1.1
Secondary: 1.0.0.1
IPv6: 2606:4700:4700::1111 / 2606:4700:4700::1001
Cloudflare consistently ranks as the fastest public DNS resolver in independent speed tests. It also has one of the strongest privacy policies in the industry. Cloudflare commits to never selling your data, never using it for ad targeting, and purging all DNS query logs within 24 hours. If speed and privacy are your top priorities, Cloudflare is the best all-around choice for most users.
Cloudflare also offers 1.1.1.2 and 1.1.1.3 variants that add malware filtering and adult content filtering, which is useful for families with children on the network.
Google Public DNS (8.8.8.8)
Primary: 8.8.8.8
Secondary: 8.8.4.4
IPv6: 2001:4860:4860::8888 / 2001:4860:4860::4444
Google DNS is the most widely used public DNS service in the world. It is extremely reliable with near-perfect uptime, and it resolves queries very quickly. Google does log some query data temporarily for diagnostic purposes but states it does not correlate DNS queries with your Google account. If you want dependable performance and do not mind Google handling your lookups, this is a solid and proven option.
Quad9 (9.9.9.9)
Primary: 9.9.9.9
Secondary: 149.112.112.112
IPv6: 2620:fe::fe / 2620:fe::9
Quad9 is a nonprofit DNS provider that automatically blocks access to known malicious domains. It pulls threat intelligence from over 25 security partners, giving you a built-in layer of protection against phishing sites, malware, and other threats. Quad9 does not log your IP address and is based in Switzerland, which has strong data privacy laws. This is an excellent choice if security is your primary concern.
OpenDNS by Cisco
Primary: 208.67.222.222
Secondary: 208.67.220.220
OpenDNS has been around since 2006 and is now operated by Cisco. The free Home tier includes built-in phishing protection and optional content filtering through a customizable dashboard. OpenDNS is a particularly good fit if you want granular parental controls or the ability to block specific categories of websites across your entire network. Speed is competitive but typically a step behind Cloudflare and Google in most regions.
Quick Comparison
Cloudflare 1.1.1.1 — Fastest average response times. Strongest privacy policy with 24-hour log purge. No built-in filtering on the standard addresses, but filtering variants are available.
Google 8.8.8.8 — Extremely reliable and fast. Temporary logging for diagnostics. No built-in content or malware filtering.
Quad9 9.9.9.9 — Built-in malware and phishing blocking. No IP logging. Nonprofit based in Switzerland. Slightly slower than Cloudflare in some regions.
OpenDNS 208.67.222.222 — Customizable content filtering dashboard. Phishing protection included. Owned by Cisco. Good for families and small businesses that want web filtering controls.
How to Change DNS on Your Router (Recommended)
Changing DNS at the router level is the best approach because it automatically applies to every device connected to your Wi-Fi, including smart TVs, game consoles, and IoT devices that do not have individual DNS settings. Here is how to do it.
Step 1: Log Into Your Router
Open a web browser on any device connected to your network. Type your router's IP address into the address bar. The most common addresses are 192.168.1.1 or 192.168.0.1. If neither works, check the sticker on the bottom of your router or refer to your router's manual. Enter your admin username and password to log in.
If you have never changed your router login credentials, the defaults are usually printed on the router itself. Common defaults include admin/admin or admin/password.
Step 2: Find the DNS Settings
Look for a section labeled WAN, Internet, or Network Settings. DNS fields are typically found on the same page where your internet connection type is configured. On some routers, DNS settings are under a LAN or DHCP section instead. The exact location varies by brand, but it is almost always within one or two clicks of the main settings page.
Step 3: Enter Your Preferred DNS Addresses
Replace the existing DNS values (or change the setting from "Automatic" to "Manual") and enter your chosen DNS server addresses. For example, to use Cloudflare, enter 1.1.1.1 as the Primary DNS and 1.0.0.1 as the Secondary DNS. Always fill in both fields so you have a backup if the primary server is temporarily unreachable.
Step 4: Save and Reboot
Click Save or Apply, then reboot your router. After the router restarts, all devices on your network will begin using the new DNS servers. You can verify the change is working by visiting 1.1.1.1/help (for Cloudflare) or running a DNS leak test at dnsleaktest.com.
How to Change DNS on Windows 10 and Windows 11
Windows 11
Open Settings, then go to Network and Internet. Click on Wi-Fi or Ethernet depending on your connection type. Click Hardware properties, then next to DNS server assignment click Edit. Switch from Automatic to Manual, toggle on IPv4, and enter your preferred DNS addresses. Click Save.
Windows 10
Open Settings, then go to Network and Internet. Click Change adapter options. Right-click your active connection and select Properties. Select Internet Protocol Version 4 (TCP/IPv4) and click Properties. Choose "Use the following DNS server addresses" and enter your preferred primary and secondary DNS. Click OK.
How to Change DNS on Mac
Open System Settings, then click Network. Select your active connection (Wi-Fi or Ethernet) and click Details. Click the DNS tab. Click the plus (+) button to add your preferred DNS addresses and remove any existing entries by selecting them and clicking the minus (-) button. Click OK, then Apply.
How to Change DNS on iPhone and iPad
Open Settings, then tap Wi-Fi. Tap the info icon (the small "i" in a circle) next to your connected network. Scroll down to Configure DNS and change it from Automatic to Manual. Delete the existing servers and add your preferred DNS addresses using the Add Server button. Tap Save.
Note that this setting only applies to the specific Wi-Fi network you configure. If you change networks, you will need to update the setting again. This is why changing DNS at the router level is the more practical solution for most people.
How to Change DNS on Android
Open Settings, then go to Network and Internet (or Connections on Samsung devices). Tap Private DNS. Select "Private DNS provider hostname" and enter the hostname for your chosen provider. For Cloudflare, enter one.one.one.one. For Google, enter dns.google. For Quad9, enter dns.quad9.net. Tap Save.
The Private DNS setting on Android uses DNS over TLS, which encrypts your DNS queries for additional privacy. This setting applies across all networks, making it more convenient than per-network configuration.
How to Tell If Your New DNS Is Working
After making changes, you should verify that your device is actually using the new DNS servers. Here are a few quick ways to check.
Visit 1.1.1.1/help in your browser. If you set Cloudflare as your DNS, this page will confirm whether your connection is using their resolver and whether encrypted DNS protocols are active.
Run a DNS leak test at dnsleaktest.com. Click the Extended Test button. The results will show which DNS servers are handling your lookups. If you still see your ISP's servers listed, your change did not take effect and you may need to flush your DNS cache or double-check your settings.
To flush your DNS cache on Windows, open Command Prompt and type ipconfig /flushdns then press Enter. On Mac, open Terminal and type sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder then press Enter.
Troubleshooting Common DNS Issues
Websites Not Loading After Changing DNS
Flush your DNS cache using the commands above, then restart your browser. If the issue persists, double-check that you entered the DNS addresses correctly and that both primary and secondary fields are filled in. Try temporarily switching back to automatic DNS to confirm the problem is DNS-related and not a broader connection issue.
Slow Speeds After Switching DNS
DNS performance can vary depending on your geographic location and ISP. If one provider feels slower, try a different one. Cloudflare tends to be fastest in North America and Europe, but results can differ. You can test your DNS response times using the free tool at dnsperf.com to see which provider is fastest from your location.
DNS Settings Keep Reverting
Some routers and ISPs override manual DNS settings. If your changes are not sticking, check whether your router has a setting that forces DNS through the ISP. Setting DNS at the router level rather than on individual devices can help avoid this. If your ISP is overriding router-level DNS, using encrypted DNS (DNS over HTTPS or DNS over TLS) on your devices can prevent this interception.
Some Devices Not Using the New DNS
Devices that were connected before the change may still be using cached DNS settings. Restart those devices or disconnect and reconnect them to Wi-Fi. Smart home devices and streaming boxes may require a full power cycle to pick up the new DNS from your router.
Should You Use Encrypted DNS?
Standard DNS queries are sent in plain text, which means your ISP (and anyone monitoring your network) can see every website you look up. Encrypted DNS solves this using one of two protocols: DNS over HTTPS (DoH) or DNS over TLS (DoT). Both encrypt your DNS queries so they cannot be read or tampered with in transit.
Cloudflare, Google, and Quad9 all support both DoH and DoT. Most modern browsers including Chrome, Firefox, Edge, and Brave now support DoH natively, and you can usually enable it in the browser's privacy or security settings. Android's Private DNS feature uses DoT by default when configured with a provider hostname.
For most users, enabling encrypted DNS in your browser or through Android's Private DNS setting is the easiest path to more private browsing. If you want network-wide encrypted DNS, look into running a Pi-hole or similar DNS proxy on your home network that forwards queries over an encrypted connection.
Frequently Asked Questions
What does changing your DNS server do?
Changing your DNS server changes which service translates website names into IP addresses for your devices. A faster DNS server means quicker initial connections to websites. A privacy-focused DNS means your browsing lookups are less likely to be logged, sold, or used for targeted advertising by your ISP.
Is it safe to change your DNS server?
Yes. Changing to a reputable public DNS provider like Cloudflare, Google, or Quad9 is completely safe and reversible. These services are used by millions of people worldwide. If you experience any issues, you can switch back to automatic DNS settings at any time.
Which is better, Cloudflare DNS or Google DNS?
Cloudflare DNS (1.1.1.1) is generally faster and has a stronger privacy policy, committing to delete all logs within 24 hours and never use data for advertising. Google DNS (8.8.8.8) is extremely reliable and slightly better known, but Google does retain some anonymized query data for diagnostic purposes. For most users prioritizing privacy, Cloudflare is the better choice.
Will changing DNS speed up my internet?
Changing DNS can speed up how quickly websites start loading because the initial lookup happens faster. However, it will not increase your actual download or upload speeds, which are determined by your internet plan and your modem and router hardware. The improvement is most noticeable when browsing many different websites rather than streaming or downloading large files.
How do I change DNS on my router?
Log into your router's admin panel (usually at 192.168.1.1 or 192.168.0.1 in a browser), navigate to WAN or Internet settings, change the DNS fields from automatic to manual, enter your preferred primary and secondary DNS addresses, then save and reboot the router. This applies the new DNS to all devices on your network.
What is the fastest DNS server in 2026?
Cloudflare's 1.1.1.1 consistently performs as the fastest public DNS server in most independent benchmarks and global testing, including data from DNSPerf. Google DNS (8.8.8.8) and Quad9 (9.9.9.9) are close behind and may be faster in specific regions. Your results can vary by location and ISP, so testing with a tool like DNSPerf or DNS Benchmark is recommended.
Can my ISP see my browsing if I change DNS?
If you only change your DNS server without using encryption, your ISP can still see your DNS queries because they are sent in plain text. To prevent this, enable DNS over HTTPS (DoH) in your browser settings or use DNS over TLS (DoT) on Android. Encrypted DNS hides your lookups from your ISP, though they can still see the IP addresses you connect to unless you also use a VPN.
