Last updated: November 2026
This guide is for anyone who set Mullvad's public encrypted DNS service (dns.mullvad.net and its ad-blocking variants) on an Android phone, an iPhone, iPad or Mac, a browser, a Windows PC, a router or a Pi-hole. Mullvad discontinued that service on November 2, 2026. The guide lists the retired addresses, explains what each device does when its DNS server disappears, and gives the steps to switch to Quad9, the replacement Mullvad recommends. It does not apply to DNS inside the Mullvad VPN app, which still works.
One limit on our reporting: we could not test how the retired servers respond today, and Mullvad has not published that detail. The symptoms described below come from how Google, Mozilla and Apple document their own software's behavior when a configured encrypted DNS server cannot be reached. Facts were checked on November 11, 2026.
Key Takeaways
- Mullvad discontinued its public encrypted DNS service on November 2, 2026. Any device still pointed at a dns.mullvad.net hostname or a 194.242.2.x address needs a new DNS server.
- Mullvad recommends Quad9 (9.9.9.9, or dns.quad9.net for encrypted DNS). Quad9 blocks malicious domains but does not block ads or trackers, so it does not replace Mullvad's ad-blocking variants.
- Mullvad VPN subscribers are not affected. DNS inside the VPN tunnel and the app's content blockers are a separate system.
Why did Mullvad DNS stop working?
Mullvad shut the service down on purpose. In a September 3, 2026 announcement, the company wrote: "If you have manually configured our DoH servers, switch before November 2nd 2026." Its help page adds: "Please note that the public encrypted DNS service will be discontinued on November 2, 2026."
DNS is the system that turns a website name into the numeric address your device connects to. Encrypted DNS hides those lookups from your internet provider, using either DNS over HTTPS (DoH) or DNS over TLS (DoT). Mullvad had offered both for free since 2022, mainly for people who were not connected to its VPN.
Mullvad's stated reason is that running a public DNS service is specialized work, and that it would put those resources toward financially supporting the Quad9 Foundation instead. Mullvad has not disclosed the amount, and as of November 11, 2026, Mullvad did not appear on Quad9's public sponsors page. On November 6, 2026, Mullvad confirmed the change in its Mullvad Browser 16.0 release notes: "Users of Mullvad's now discontinued Encrypted DNS service (DoH, DoT) will automatically be migrated to Quad9."
Which Mullvad DNS addresses were shut down?
Six hostnames and their matching addresses were retired, covering both DoH and DoT. If any of these appears in your settings, that setting needs to change.
| Hostname | IPv4 address | What it blocked |
|---|---|---|
| dns.mullvad.net | 194.242.2.2 | Nothing |
| adblock.dns.mullvad.net | 194.242.2.3 | Ads and trackers |
| base.dns.mullvad.net | 194.242.2.4 | Ads, trackers and malware |
| extended.dns.mullvad.net | 194.242.2.5 | Ads, trackers, malware and social media |
| family.dns.mullvad.net | 194.242.2.6 | Ads, trackers, malware, adult content and gambling |
| all.dns.mullvad.net | 194.242.2.9 | All of the categories above |
Older setups may use doh.mullvad.net or dot.mullvad.net, which Mullvad's help page lists as earlier names for the same service.
What happens on a device that is still set to Mullvad DNS?
It depends on whether the device is allowed to fall back to ordinary DNS. Some settings fail completely, which looks like an internet outage, and some fall back without telling you, which leaves your lookups unencrypted.
| Where Mullvad DNS was set | Documented behavior when the server is unreachable | What you see |
|---|---|---|
| Android Private DNS with a hostname | No fallback. Google's documentation says Android marks the network as "No internet access" if it cannot reach the server. | WiFi and mobile data connect, but nothing loads |
| Firefox, Max Protection | Firefox always uses secure DNS and shows a security warning if it cannot connect. | Warning pages in place of websites |
| Firefox, Default or Increased Protection | Firefox falls back to the system's DNS. | No error; lookups are no longer encrypted |
| Chrome with a custom provider | Google says: "When you select a custom provider, Chrome won't default to unencrypted mode." | Sites fail to load in Chrome |
| iPhone, iPad or Mac with a Mullvad profile | Mullvad says existing profiles "will stop working." Apple does not document the fallback behavior. | Varies; remove the profile |
| Mullvad Browser on default settings | Version 16.0 migrates the default to Quad9. | Works after you update the browser |
What should I use instead of Mullvad DNS?
Mullvad recommends Quad9, a free DNS service run by a Swiss foundation. Quad9's standard service blocks known malicious domains and validates DNSSEC, and it supports both DoH and DoT.
| Quad9 setting | Value |
|---|---|
| IPv4 | 9.9.9.9 and 149.112.112.112 |
| IPv6 | 2620:fe::fe and 2620:fe::9 |
| DNS over HTTPS | https://dns.quad9.net/dns-query |
| DNS over TLS hostname | dns.quad9.net |
Three things to know before you switch:
- Quad9 is not an ad blocker. Its own site states: "Quad9 does not block advertisements or web trackers." If you used Mullvad's adblock, base, extended, family or all variant, Quad9 will not filter the same content. Mullvad has not named a replacement for that filtering outside its VPN app. A Pi-hole on your own network does the same job locally, and our Pi-hole setup guide covers the install.
- Quad9's privacy policy says it "does not collect or record user IP addresses".
- Quad9 has announced it will withdraw service from France on November 24, 2026, following a French court order. Readers in France need a different resolver.
For other options, our DNS server guide compares the main public resolvers.
How do I fix Mullvad DNS on Android?
Replace the hostname in Private DNS. Google's instructions give this path:
- Open Settings, then Network & internet, then Private DNS. If you do not see it, search Settings for "Private DNS."
- Select Private DNS provider hostname.
- Replace the Mullvad hostname with dns.quad9.net.
- Tap Save.
If your phone shows no internet at all, you can still reach this screen, because the setting is stored on the phone. Choosing Automatic instead also restores your connection, using encrypted DNS only when the network supports it.
How do I fix it on iPhone, iPad and Mac?
Delete the Mullvad DNS profile, then install a Quad9 profile if you still want encrypted DNS system-wide. Mullvad's announcement says existing iOS and macOS profiles stop working and should be replaced with Quad9's.
- On iPhone or iPad, open Settings, then General, then VPN & Device Management.
- Select the Mullvad profile and tap Delete Profile.
- On a Mac running macOS 13 or later, open System Settings, then General, then Device Management, select the profile and remove it.
- In Safari, download a profile from Quad9's Apple setup page, then open Settings and select Profile Downloaded to install it.
Quad9's page carries two cautions. Its current profiles expire on January 19, 2027, so they will need replacing. And when iCloud Private Relay or most VPN apps are active, the device does not use the DNS profile.
How do I fix it in Firefox, Chrome, Edge and Brave?
Change the custom DNS over HTTPS address to https://dns.quad9.net/dns-query in each browser where you entered a Mullvad address.
- Firefox: open Settings, then Privacy & Security, scroll to DNS over HTTPS, and replace the custom provider address.
- Chrome: open Settings, then Privacy and security, then Security, find Use secure DNS, and replace the custom provider.
- Edge: open Settings, then Privacy, search, and services, find Use secure DNS under Security, and replace the service provider.
- Brave: open Settings, then Privacy and security, then Security, find Use secure DNS, and replace the custom provider.
- Mullvad Browser: update to version 16.0 or later. Default settings move to Quad9 automatically. Mullvad says customized DoH settings are not changed, so replace those by hand.
How do I fix it on Windows 11?
Replace the DNS addresses in your network adapter's settings. Quad9's Windows 11 guide gives these steps:
- Open Settings, then Network & internet, then WiFi or Ethernet.
- Click Edit next to DNS server assignment and choose Manual.
- Turn on IPv4, enter 9.9.9.9 as the preferred DNS, and set DNS over HTTPS to On (automatic template).
- Enter 149.112.112.112 as the alternate DNS, and save.
How do I fix it on a router or a Pi-hole?
On a router with DoT or DoH support, replace the Mullvad hostname or address with dns.quad9.net or 9.9.9.9 and 149.112.112.112. Our guide to changing DNS on your router has the menu path for each brand.
One detail matters for routers. Mullvad's help page says its DNS addresses listened on the ordinary DNS port only to help set up the encrypted service. A router that had 194.242.2.2 entered as a plain DNS server was never getting general lookups from it, so check that your secondary DNS entry is valid too.
Pi-hole sends ordinary DNS to its upstream servers, so a Pi-hole that used Mullvad's encrypted DNS did so through a helper such as cloudflared or dnscrypt-proxy. You have two ways forward:
- Simplest: in the Pi-hole web interface, open Settings, then DNS, and select Quad9 as the upstream server.
- To keep encrypted upstream DNS: change the upstream address in your helper's configuration to https://dns.quad9.net/dns-query. Pi-hole's documentation warns that the cloudflared method it once recommended is deprecated and stops working on current cloudflared versions, so this is a good time to move to dnscrypt-proxy or Unbound.
One more monthly fee to kill
Renting your modem? That's $120+ a year.
Own it instead. It pays for itself in months. 90-day warranty and 30-day returns.
Pick your provider:
Are Mullvad VPN users affected?
No. Mullvad's announcement says the public servers are unnecessary when you use Mullvad VPN, because the VPN's internal DNS handles every lookup inside the encrypted tunnel.
The same holds for Mullvad VPN running on a router. Mullvad's router guide, updated October 20, 2026, still instructs users to forward DNS to 10.64.0.1 and lists the 100.64.0.x addresses for its in-tunnel content blockers. Those are internal addresses, separate from the public service. The exception is anyone who typed a 194.242.2.x address or a dns.mullvad.net address into a custom DNS field. That entry pointed at the retired public service and needs replacing.
FAQ
Is Mullvad DNS down, or gone for good?
It is gone for good. Mullvad discontinued its public encrypted DNS service on November 2, 2026 and describes it as discontinued in its November 6, 2026 browser release notes.
Why does my Android phone say there is no internet?
Android's Private DNS setting has no fallback when a hostname is entered. If that hostname is a Mullvad address, Android cannot look up any website and treats the network as having no internet access. Changing the hostname to dns.quad9.net fixes it.
Does Quad9 block ads like Mullvad DNS did?
No. Quad9 blocks domains it classifies as malicious and states that it does not block advertisements or web trackers. For ad and tracker blocking at the DNS level, run a Pi-hole on your own network.
Is Quad9 free?
Yes. Quad9 is operated by a nonprofit foundation based in Switzerland and funded by sponsors and donations. It does not require an account.
Do I need to change anything if I only use the Mullvad VPN app?
No. The app uses Mullvad's internal DNS inside the VPN tunnel, which is not part of the shutdown.
How do I check that my new DNS is working?
Quad9's Windows guide suggests looking up the test record proto.on.quad9.net, which reports how your lookup arrived. On any device, loading a few websites you have not visited recently confirms that lookups are succeeding.
Sources and how this article was reported
Shutdown dates and addresses come from Mullvad's own announcement, help page and release notes. Device behavior comes from Google, Mozilla, Apple and Quad9 documentation. We did not test the retired servers directly. Mullvad is a financial supporter of Quad9 by its own account, which readers should weigh when reading Mullvad's recommendation.
- Mullvad announcement, September 3, 2026
- Mullvad help: DNS over HTTPS and DNS over TLS
- Mullvad Browser 16.0 release notes, November 6, 2026
- Quad9 service addresses
- Quad9 threat blocking
- Quad9 on withdrawing from France
- Google: Private DNS on Android
- Mozilla: DNS over HTTPS in Firefox
- Pi-hole documentation on encrypted upstream DNS
