Key takeaways
- Cloudflare (1.1.1.1) is the fastest free DNS for most people, with median lookups around 11 ms thanks to the largest server network of the four.
- Quad9 (9.9.9.9) blocks known malicious domains by default and is the best pick if security matters more than a few milliseconds, while OpenDNS is best for parental and content filtering.
- Speed depends on your location and ISP routing, so the only way to know your fastest resolver is to test from your own connection, which takes about two minutes.
ModemGuides is reader supported. When you buy through links on our site, we may earn an affiliate commission at no extra cost to you. Public DNS services covered here are free to use.
Why your DNS resolver matters
Every time you load a website, your device asks a DNS (Domain Name System) resolver to translate the human readable name, like example.com, into the IP address your hardware actually connects to. By default that job goes to your internet provider's resolver, which is often slower, less private, and less secure than the free public alternatives.
Switching DNS will not increase your plan's bandwidth, so it does not make a slow connection fast. What it can do is shave the small delay before each new site or game server starts loading, add a layer of security or filtering, and keep your provider from logging every domain you visit. It is one of the few free network tweaks that takes minutes and applies to every device on your home network.
The four contenders at a glance
These four resolvers handle the overwhelming majority of public DNS traffic. All are free, all support encrypted DNS, and all will work on any modem, router, or device.
| Resolver | Primary / Secondary IP | Typical global speed | Best for |
|---|---|---|---|
| Cloudflare | 1.1.1.1 / 1.0.0.1 | Fastest (around 11 ms) | Raw speed, gaming, low latency |
| Google Public DNS | 8.8.8.8 / 8.8.4.4 | Fast (around 20 ms) | Reliability, broad compatibility |
| Quad9 | 9.9.9.9 / 149.112.112.112 | Fast (around 25 ms) | Built-in malware blocking, privacy |
| OpenDNS | 208.67.222.222 / 208.67.220.220 | Solid (around 30 ms) | Parental controls, content filtering |
Speeds are approximate global medians from independent benchmarks. Your results will vary based on your physical location and how your provider routes traffic.
Speed: which DNS is actually fastest?
On global benchmarks, Cloudflare is the consistent leader. It runs resolver hardware in over 300 cities across more than 100 countries, which means there is almost always a server physically close to you, and it uses aggressive caching and anycast routing to answer queries quickly. Median response times sit around 11 milliseconds in most regions, making it the default choice when you care about the lowest possible latency.
Google Public DNS comes next. It is not quite as fast as Cloudflare on average, but it is extremely reliable and benefits from massive global caching, so popular domains resolve almost instantly. Quad9 and OpenDNS trail slightly on pure speed, though the gap is usually single digit milliseconds and not something you would notice during normal browsing. Notably, in parts of Europe, Quad9 sometimes edges out Cloudflare on latency.
Reality check: For everyday web browsing, all four are fast enough that you will not feel the difference. Milliseconds matter most for competitive online gaming and for people who open lots of new domains quickly. For the full list of recommended resolvers plus step by step setup instructions, see our complete guide to the best DNS servers and how to change your DNS.
Security: which DNS protects you?
This is where the four resolvers diverge the most.
Quad9 is built around security. Run by a Swiss nonprofit foundation, its default resolver checks every request against rotating threat intelligence feeds and blocks domains tied to malware, phishing, and botnets before your device ever connects. It validates DNSSEC and keeps no logs of your IP address. The trade off is that it can occasionally block a legitimate site flagged by a threat feed, and the free tier does not let you allowlist exceptions. If you want Quad9's privacy without the blocking, 9.9.9.10 is an unfiltered version.
OpenDNS, owned by Cisco, leans on the Talos threat intelligence network and is the strongest option for filtering. Its free Family Shield service (208.67.222.123 and 208.67.220.123) automatically blocks adult content with no account needed, and a free OpenDNS Home account lets you build custom category filters for an entire household.
Cloudflare keeps its standard 1.1.1.1 resolver unfiltered for maximum speed, but offers two zero configuration filtered versions for anyone who wants protection.
Cloudflare filtering addresses (no setup required):
- 1.1.1.2 and 1.0.0.2, blocks malware
- 1.1.1.3 and 1.0.0.3, blocks malware and adult content
Google Public DNS validates DNSSEC and protects against certain attacks, but it does not filter malicious or adult domains. It is a clean, fast, neutral resolver rather than a security tool.
Privacy: who is watching your lookups?
Your provider's default DNS can log every domain you visit and, in some cases, use that data commercially. The public resolvers all publish privacy policies and commit to not selling your browsing history.
Quad9 has the strongest privacy posture of the group as a no logs Swiss nonprofit that does not record your IP address. Cloudflare commits to not writing your IP to disk and to purging logs quickly, with the policy independently audited. Google retains some anonymized data for service operation, which is the most data retention of the four, though it does not tie permanent logs to your identity. OpenDNS logs vary depending on whether you use a free account with custom settings.
All four support encrypted DNS over HTTPS (DoH) and DNS over TLS (DoT), which hides your lookups from anyone snooping on your network, including your provider. Quad9 has also added DNS over QUIC (DoQ) for newer clients.
Heads up: Some ISP gateways override your DNS settings or force all queries back through the provider, which defeats the purpose of switching. If your changes will not stick, our guide on flashing your router with open-source firmware covers how to take back control at the network level.
Which DNS should you choose?
- You want the fastest, simplest upgrade: Cloudflare 1.1.1.1. Best raw speed, clean privacy policy, no setup beyond changing two numbers.
- You want built-in malware and phishing protection: Quad9 9.9.9.9. Security and privacy by default with a minimal speed cost.
- You have kids and want content filtering: OpenDNS Family Shield (208.67.222.123), or a free OpenDNS Home account for custom controls.
- You want maximum reliability and broad device support: Google Public DNS 8.8.8.8.
- You game competitively: Cloudflare for the lowest latency, but test it against Google from your own connection first.
How to test the fastest DNS for your connection
Because routing differs by region and provider, the fastest resolver for someone across the country may not be fastest for you. The good news is that testing is quick and free.
-
Windows: open Command Prompt and run
nslookup google.com 1.1.1.1against each resolver, or use a free tool like GRC's DNS Benchmark to test dozens at once. -
Mac or Linux: use the
digcommand, for exampledig @1.1.1.1 google.com, and compare the query times. - Anyone: change your router DNS to one resolver, use your connection for a day, then switch and compare how responsive new sites feel.
How to change your DNS
You can set DNS on a single device, but the cleanest approach is to change it once on your router so every device on the network benefits. The exact menu depends on your hardware. The general steps are: log into your router's admin page, find the WAN, Internet, or DNS settings, switch from automatic to manual DNS, enter your chosen primary and secondary addresses, then save and reboot.
For a full walkthrough covering Windows, Mac, iPhone, Android, and router-level changes, see our complete guide to the best DNS servers and how to change your DNS. If you are still running an old ISP gateway, a modern modem will also help with stability and speed, so check our picks for the best DOCSIS 3.1 modems.
You can also confirm the details directly from each provider: Cloudflare, Google Public DNS, Quad9, and OpenDNS.
Frequently asked questions
Is Cloudflare or Google DNS faster?
Cloudflare 1.1.1.1 is faster on most global benchmarks, with median response times around 11 ms versus roughly 20 ms for Google's 8.8.8.8. The difference comes down to Cloudflare's larger network of server locations. Your own results depend on your location, so test both if you want certainty.
Does changing my DNS make my internet faster?
It does not increase your plan's bandwidth, so it will not fix slow downloads. It can slightly reduce the delay before new websites and game servers start loading, which feels snappier, especially if your provider's default DNS is slow or congested.
Is it safe to use a public DNS like 1.1.1.1 or 8.8.8.8?
Yes. These are run by major, reputable organizations and are used by hundreds of millions of people. They are generally more private and secure than the default DNS from your internet provider, and resolvers like Quad9 add active malware blocking.
Which DNS is best for blocking inappropriate content?
OpenDNS Family Shield (208.67.222.123 and 208.67.220.123) blocks adult content automatically with no account required. Cloudflare's 1.1.1.3 also blocks malware and adult content. For custom category filtering, a free OpenDNS Home account gives you the most control.
Can I use two different DNS providers at once?
Yes, and it is common to set a primary from one provider and a secondary from another for redundancy. Keep in mind that your device will not always use the faster of the two, so mixing providers is more about uptime than speed.
Will changing DNS on my router cover all my devices?
Yes. Setting DNS at the router level applies to every device that connects through it, including phones, smart TVs, and game consoles, without configuring each one individually.
Does public DNS hide my browsing from my internet provider?
Only if you enable encrypted DNS (DoH or DoT). Switching to a public resolver stops your provider from being your DNS handler, but to hide the lookups from your provider's network you also need encryption, which all four resolvers support.
