Private DNS encrypts the DNS lookup step your phone uses before opening websites and app services. Instead of letting every Wi-Fi network or carrier handle those lookups in plain text, Android can send them through a DNS provider you choose.
These steps apply to Android 9 Pie and later on Samsung, Pixel, Motorola, and other Android phones.
Does This Affect You?
Use this if you want to enable encrypted DNS, switch providers, or fix the message that Android could not connect to the private DNS provider.
Turn On Private DNS
- Open Settings > Network & internet > Private DNS.
- On Samsung, check Settings > Connections > More connection settings > Private DNS.
- Choose Private DNS provider hostname.
- Enter a provider hostname, such as dns.google, 1dot1dot1dot1.cloudflare-dns.com, or dns.quad9.net.
- Tap Save.
Android tests the hostname after saving. If it connects, DNS lookups on Wi-Fi and mobile data use that encrypted provider.
Fix Could Not Connect to Private DNS Provider
- Check the hostname spelling carefully. One missing character will fail.
- Try mobile data if you are on work, school, hotel, or public Wi-Fi. Some networks block DNS over TLS on port 853.
- If it only fails at home, check router parental controls, ad blocking, or DNS override settings.
- Try a different provider hostname to confirm whether the issue is provider-specific.
- Switch back to Automatic while troubleshooting so normal browsing keeps working.
Switch Back to Automatic or Off
- Open the Private DNS setting again.
- Choose Automatic to let Android use encrypted DNS when the network supports it and fall back when it does not.
- Choose Off to disable Private DNS and use the network DNS directly.
- Tap Save.
Privacy and Filtering Notes
Private DNS Is Not a VPN
Private DNS protects the lookup request, not all internet traffic. Websites still see your connection, and networks may still infer some activity from the servers you contact.
Provider Policies Still Matter
Google, Cloudflare, and Quad9 publish different retention and privacy policies. Quad9 also blocks many known malicious domains as part of its service.
It Can Bypass DNS-Based Filters
If a family router, school network, or ad-blocking DNS service depends on controlling DNS, choosing a different Private DNS provider can bypass that filtering. Be careful on managed or child devices.
Sources
- Android Help: Change DNS settings for Private DNS
- Google Public DNS: DNS over TLS documentation
- Cloudflare: Set up 1.1.1.1 on Android