Your internet provider can normally see the domains and services you connect to. HTTPS protects page contents, but the fact that you connected to a site can still be visible through DNS lookups and connection metadata.
Does this affect you?
Use this if you want to know what actually hides browsing from an ISP and what does not. The two practical tools are a VPN and encrypted DNS, and they solve different parts of the privacy problem.
Use a VPN for broader traffic privacy
A VPN sends your traffic through an encrypted tunnel before it leaves for the wider internet.
- Choose a reputable VPN provider with a clear, independently audited no-logs policy.
- Install the VPN app on each device you want protected, or configure it on the router if you want whole-home coverage.
- Turn the VPN on before browsing. Your ISP sees a connection to the VPN server, not the individual websites.
- Use a nearby VPN server when possible to reduce speed loss.
- Turn the VPN off for services that require your real location or block VPN traffic, such as some banks or streaming apps.
Use encrypted DNS for a lighter option
Encrypted DNS hides one common way browsing is observed, but it is not as complete as a VPN.
- Understand the limit: DNS is the lookup that asks for the address of a domain before a connection starts.
- Enable DNS over HTTPS in your browser or device privacy settings.
- Choose a provider such as Cloudflare 1.1.1.1, Quad9 9.9.9.9, or another trusted resolver.
- In most browsers, look under Settings > Privacy and Security > Use secure DNS.
- Remember that the destination IP address may still let an ISP infer some sites even when DNS is encrypted.
More control
Private browsing is not ISP privacy
Incognito or private windows stop local history from being saved on your own device. They do not hide traffic from your ISP.
HTTPS protects content, not always the domain
Most modern sites encrypt page contents, forms, and passwords with HTTPS. A VPN or encrypted DNS adds protection for connection-level clues.
Your VPN provider becomes important
When a VPN hides browsing from the ISP, the VPN provider is in the trusted position. Its logging policy, ownership, audits, and reputation matter.
ISP privacy features may mean something else
Some provider privacy add-ons focus on advertising or data sharing, not on hiding browsing from the provider network itself. Read the fine print.
Sources
- Electronic Frontier Foundation – What ISPs Can See About You (2025)
- Cloudflare Learning Center – What is DNS over HTTPS? (2025)
- FTC – What ISPs Know About You (2024)