Skip to content
TechBone
Android

Android: Set Up Private DNS for Encrypted Connections

If you never changed a DNS setting on your phone, every website you visit is still resolved through your carrier's own DNS server, even with mobile data or a different Wi-Fi network. That server can log every domain your device contacts, and public hotspots often use unencrypted DNS by default. Android has a built-in option to route this traffic through an encrypted provider instead, but it is off unless you switch it manually.

4 min5 steps
Version

Step by step

1 / 5

Step 1 of 5: Tap on **Settings**

1

Tap on Settings

Live simulator

Android 14 · Android 14
Set Up Private DNS on Android – Android 14: step 1 – Tap on Settings
Tap on Settings
1 / 5

Scroll or use the buttons for the next step

Feedback

Was the guide correct?

Help others: confirm the path or report a problem.

41

Confirmations

Forum verified this path

Android

Set Up Private DNS on Android auf Android

Private DNS encrypts the lookup that happens every time your phone turns a web address into a server location. Without it, that request travels in plain text through whatever DNS server your network assigns, usually your carrier's or the router's default.

Android handles this through a dedicated network setting, separate from Wi-Fi or mobile data configuration. Turning it on does not change your internet speed in any noticeable way, but it does stop the DNS provider from seeing a plain-text log of every domain you contact.

Menu path to enable Private DNS

SettingsNetwork & internetPrivate DNS ➔ choose Automatic or Private DNS provider hostname ➔ enter the hostname from your chosen provider and tap Save.

Automatic only encrypts DNS if your current network already supports it silently. Selecting Private DNS provider hostname and entering a provider address (for example a hostname from Cloudflare or Google) forces encryption on any network, including public Wi-Fi.

If a specific app or site fails to load after switching, the provider hostname may be blocking that domain or your network may block DNS-over-TLS entirely. In that case, switch back to Automatic or try a different provider hostname before assuming the app itself is broken.

Frequently asked questions

Use the hostname supplied by your chosen DNS provider, not an IP address. Enter it under SettingsNetwork & internetPrivate DNSPrivate DNS provider hostname, then tap Save.