DNS over HTTPS encrypts the lookup your device makes when it turns a website name into an address. It protects the DNS question itself, which is normally visible to the network or internet provider.
Does this affect you?
Use this if you saw Secure DNS, DNS over HTTPS, DoH, or Private DNS in a browser or phone setting. DoH can improve privacy, but it can also bypass router-level filtering, parental controls, and some local network DNS tools.
Turn it on in your browser
Browser-level DoH is the easiest way to try it because it affects that browser without changing every app.
- In Chrome, open Settings > Privacy and security > Security, then enable Use secure DNS and choose a provider such as Cloudflare or Google.
- In Firefox, open Settings > Privacy & Security, find DNS over HTTPS, choose a protection level, and select a provider.
- In Edge, open Settings > Privacy, search, and services, scroll to Security, and enable Use secure DNS.
- Restart the browser if pages or filtering behavior do not change immediately.
Turn it on system-wide
System DNS settings can affect more than one browser.
- Windows 11: open Settings > Network & Internet > Wi-Fi or Ethernet, edit DNS settings, choose a supported DNS provider, and set encryption to DNS over HTTPS.
- iPhone or iPad: use a DNS provider configuration profile or app, such as a provider app that installs encrypted DNS settings. Apple does not expose a simple universal DoH toggle in the same way Android does.
- Android 9 and later: open Settings > Network & Internet > Private DNS, choose Private DNS provider hostname, and enter a hostname such as dns.google or 1dot1dot1dot1.cloudflare-dns.com.
Turn it off if it breaks filtering
Secure DNS can conflict with DNS-based controls.
- Return to the same browser, Windows, Android, or iPhone profile/app setting you used to enable it.
- Switch the setting to Off, Automatic, Default, or use the network DNS provider.
- On iPhone, remove the DNS configuration profile under Settings > General > VPN & Device Management if that is how it was installed.
- Restart the browser or device to clear old DNS behavior.
More control
DoH can bypass router filters
Many ad blockers and parental controls work by forcing devices to use the router DNS service. Browser DoH can talk directly to an outside DNS provider, so router filtering may suddenly stop applying to that browser.
DoH protects only the lookup step
It hides the DNS request from the local network and internet provider, but it does not make you anonymous. Websites, accounts, cookies, and the chosen DNS provider can still identify activity in other ways.
Sources
- Cloudflare Learning Center – What is DNS over HTTPS (DoH)? (2025)
- Mozilla Support – DNS over HTTPS in Firefox (2025)
- Google Support – Secure DNS in Chrome (2025)