Follow Zdnet: Add us as a favorite source On Google.
ZDNET’s main dishes
- Private DNS crypt your web traffic to prevent FAI monitoring.
- It improves both confidentiality and online security.
- It’s easy to activate, but its deactivation endangers your data.
Almost everything you do on your desktop, laptop, phone and tablet starts with a domain name system query (DNS). Essentially, DNS transforms domain names (such as ZDNET.com) in an IP address so that browsers and web applications know where to obtain the information you want.
Also: the best Android phones to buy in 2025
Without DNS, you will have to type 34.149.132.124 each time you wanted to go to ZDNET.com or 74.125.21.102 to go to Google.com. Even by simply performing Google research, DNS is at work. The problem is that the standard DNS is not encrypted, which means that all your requests are sent to the network in the form of raw text.
Why is the unacyed DNS a problem?
Let’s say you are on a public network – like coffee – and you start looking for things on your Android device. Or maybe you have to access a CMS or another working tool, and you don’t want the public to know the address you type. If someone else is on the same network and has skills, he could intercep your unsaggered research requests (or the URLs you visit) and know exactly what you are looking for.
Also: the most powerful safety function on your Android phone is deactivated by default and hidden – activate it now
This is where the private DNS mode comes into play. Once you have activated this feature, all your DNS requests are encrypted, so bad players will not be able to see them – even if they capture these packages. In other words, private DNS mode should be an absolute must for anyone who values their private life and safety.
But how do you activate private DNS mode on Android? It’s actually quite simple. Let me show you how.
How to activate private DNS mode (on Android version 11 or more recent)
If you use Android version 11 or more recent, the old private DNS method no longer works. Instead of managing this process manually, you must install an application created by Cloudflare, called 1.1.1.1 + warp. Once you have installed this application, it will open and you will see a marked cursor disconnected. Press this cursor and this will allow the service.
The Cloudflare Warp application facilitates the activation of private DNS on Android, starting with version 11.
Jack Wallen / ZDNET
There is a warning to use the application. If it is deactivated and you must reactivate the private DNS, you will not find the application in the drawer of your application. Instead, you will have to search for it in the Google Play Store and press Open from there. I would like to think that Cloudflare could correct this little discomfort, but until they do it, you at least know how to access the application. If, on the other hand, the application is running, you will see a notification entry which, once TAPP, will open the application.
How to activate private DNS mode (on Android versions over 11 years old)
What you will need: An Android device running version 10 or more. I use a Pixel 9 Pro (which means that I must now use the new method), but almost all modern Android phones are able to activate the private DNS.
Also: this silent Android functionality scans your photos for “sensitive content” – how to deactivate it
Open the Settings application (either from the notification shade or the application drawer), then press the network and the Internet. If you use a Samsung Galaxy device, you go to Settings> More connection settings.
Show more
The Network & Internet option must appear at the top of the Settings application.
Screenshot by Jack Wallen / ZDNET
You will find the entry for private DNs at the bottom of the network and the Internet window. On Galaxy devices, it will be located in the middle of the plus connection settings list. If you can’t find it, go back to the main settings page and search for private DNs.
Show more
Private DNS entry is in the network and internet section of the Settings application.
Screenshot by Jack Wallen / ZDNET
This is where it can become a little delicate. You must have the address of a supplier who offers a private DNS. Cloudflare is my choice supplier, so the address of their main secure DNS is:
Show more
1dot1dot1dot1.cloudflare-dns.com
Also: how to erase your Android phone cover (and why it makes such a big difference)
Some other possible host names you can use:
- Google DNS: DNS.GOOGLE
- Quad9: DNS.QUAD9.NET
- Cleanbrowsing DNS: Security-Filter-dns.Cleanbrowsing.org
- Opendns: 208.67.222.222
- NEXTDNS: 45.90.28.0
- Comodo Secure DNS: 8.26.56.26
- OpenNic: 192.95.54.3
Note: Although the free DNS services above are all worth trying, I recommend going with Cloudflare (1dot1dot1dot1.cloudflare-dns.com). I find it the fastest and most secure group in the group. In addition to speed, Cloudflare adds DNS filtering, which can help prevent emails from malicious IP addresses.
Also: I upgraded my pixel 9 pro to Android 16 – here is what I like (and what is still missing)
When you press private DNS, a new pop-up will appear. Press the host name of the private DNS supplier, then type the host name for the DNS supplier of your choice.
Adding a private DNS supplier for Android.
Screenshot by Jack Wallen / ZDNET
You can also choose Automatic, which will automatically go to Google private DNs when available. For those who are not so quick to trust Google for such a functionality, I recommend selecting private DNs, then type the address of your supplier of choice. Press Save to save the new parameter and close the Settings application. You can end up in a place where Google’s private DNS servers are not available, so using one as a cloudflare has advantages beyond speed.
Also: Changing these 12 parameters on my Android phone has extended its battery life per hour
You can then check that it works by opening your Android browser by default and pointing it to if you see “Use of DNS on TLS (DOT)” Define “Yes”, it works.
And that’s all there is. Once you have activated the private DNS on Android, your DNS requests are encrypted. Take advantage of this additional confidentiality and security.
Get the best morning stories in your reception box every day with our Newsletter Tech Today.
