Today I’ll show you how to set custom DNS servers on Windows 11 and enable DNS encryption (DNS over HTTPS or DoH) if your provider supports it, to increase security and privacy. Let’s get started.
Free DNS Providers
Before changing DNS servers, you’ll need to find a third-party DNS provider. There are plenty of good (and free) services available, and I recommend Google DNS which is what I use and have never had an issue. I will list here the most popular DNS providers:
GOOGLE (Supports DoH encryption)
- Primary IPv4: 126.96.36.199
- Secondary IPv4: 188.8.131.52
- Preferred IPv6: 2001:4860:4860::8888
- Alternate IPv6: 2001:4860:4860::8844
OPENDNS (Supports DoH encryption)
- Primary: 184.108.40.206
- Secondary: 220.127.116.11
- Preferred IPv6: 2620:0:ccc::2
- Alternate IPv6: 2620:0:ccd::2
- Primary: 18.104.22.168
- Secondary: 22.214.171.124
COMODO (Supports DoH encryption as a paid service)
- Primary: 126.96.36.199
- Secondary: 188.8.131.52
VERISIGN (Supports DoH encryption)
- Primary: 184.108.40.206
- Secondary: 220.127.116.11
Set custom DNS servers on Windows 11
- Click Start , then Settings
- Select Network & Internet from side-menu, then click either Ethernet or Wireless depending on how your computer connects to the Internet (if you use both, you will need to repeat this entire process for each connection)
- Under DNS server assignment click the Edit button
- Change Automatic (DHCP) to Manual, toggle IPv4 to on, then enter IPv4 IP address (i.e. 18.104.22.168). Choose Encrypted only (DNS over HTTPS) if your provider supports it. Repeat this process for Alternate DNS
- Toggle IPv6 to on, then enter an IPv6 IP address (i.e. 2001:4860:4860::8888). Choose Encrypted only (DNS over HTTPS) if your provider supports it. Repeat this process for Alternate DNS, and click Save
- After clicking Save, confirm the changes by viewing the new settings.
- Your Internet connection will now use your chosen DNS IP addresses.
Hopefully everything went smoothly for you and you’re now using safe and secure DNS. If you had any issues, hit me up in the comments or socials/email.