Best Public DNS Servers

Best Public DNS Servers 2025: Speed, Privacy & Security

Some links in this article may be affiliate links. If you choose to purchase through them, we may earn a small commission — at no extra cost to you. Advertising Disclosure

 

Changing your DNS can speed up lookups, improve privacy, and optionally block malware or adult content. Pick one provider and set both the Primary and Secondary addresses on your device or router. Don’t mix providers.

Quick Comparison Table

ProviderFilter / PurposePrimary DNS (IPv4)Secondary DNS (IPv4)Notes
Cloudflare (1.1.1.1)Unfiltered, privacy-focused1.1.1.11.0.0.1Fast global anycast
Cloudflare for FamiliesBlock malware1.1.1.21.0.0.2Malware protection only
Cloudflare for FamiliesBlock malware + adult1.1.1.31.0.0.3Stricter family filtering
Google Public DNSUnfiltered, reliable8.8.8.88.8.4.4Huge global footprint
OpenDNS (Home)Unfiltered by default208.67.222.222208.67.220.220Optional filtering via account
OpenDNS FamilyShieldPreconfigured adult block208.67.222.123208.67.220.123“Set it & forget it” family mode
Quad9 (Secured)Malware blocking + DNSSEC9.9.9.9149.112.112.112Strong security focus
AdGuard DNS (Default)Blocks ads/trackers/phishing94.140.14.1494.140.15.15Good for ad blocking at DNS
AdGuard DNS (Family)Adult + ads/trackers94.140.14.1594.140.15.16Enforces SafeSearch
CleanBrowsing (Security)Malware blocking185.228.168.9185.228.169.9No adult filtering
CleanBrowsing (Adult)Adult blocking185.228.168.10185.228.169.11Includes security filter
CleanBrowsing (Family)Adult + mixed sites blocked185.228.168.168185.228.169.168Strongest family profile

How to Change DNS (Short Version)

  1. Open your device or router network settings.
  2. Find the DNS fields and enter the Primary and Secondary IPs from one provider above.
  3. Save & restart your connection. Test by visiting dns leak test or the provider’s test page.

What Is a DNS Server?

The Domain Name System (DNS) translates human-friendly names like example.com into IP addresses that computers use to connect. A DNS resolver (the “DNS server” you configure) answers those lookups and returns the correct address, ideally as quickly and privately as possible.

How It Works (Short Version)

  • Your device asks your configured DNS resolver for the IP of a domain.
  • The resolver either serves a cached answer or queries authoritative name servers.
  • Responses are cached for a set time (the TTL) to speed up future lookups.

Why Change Your DNS?

  • Speed: Some resolvers have faster global networks and smarter caching.
  • Reliability: Anycast routing and large footprints reduce outages.
  • Security: Options like malware blocking and phishing protection (e.g., Quad9, CleanBrowsing).
  • Privacy: Certain providers minimize logs and support encrypted transport.
  • Content Controls: “Family” profiles block adult content or enforce SafeSearch.

Privacy & Encryption

Traditional DNS is unencrypted. Many resolvers now support:

  • DNS over HTTPS (DoH) & DNS over TLS (DoT): Encrypt DNS traffic between you and the resolver.
  • Minimal/anonymous logging: Some providers commit to reduced retention. Check each provider’s policy.

IPv4 vs. IPv6

Most lists show IPv4 addresses (e.g., 1.1.1.1). Many providers also offer IPv6 (e.g., 2606:4700:4700::1111). If your network uses IPv6, add those too.

Best Practices

  • Configure both Primary and Secondary from the same provider.
  • Set DNS on your router to cover your whole network; override per device if needed.
  • After switching, flush DNS cache on your device/router for immediate effect.
  • Test with a DNS leak/check tool and a few sites you often visit.

When Not to Change

  • Corporate or school networks that rely on internal DNS (“split DNS”).
  • ISP features tied to their DNS (e.g., IPTV or captive portals) unless you know the impact.

Troubleshooting Tips

  • If some sites don’t resolve, revert temporarily to your old DNS to compare.
  • Check for typos and ensure the Secondary address is reachable.
  • Restart your router and device after changes; clear browser DNS/host resolver cache.
Quick Reminder: Choose one provider from the table above and use both of its addresses. For encryption (DoH/DoT), consult the provider’s setup guides for your OS, browser, or router firmware.

Comments

No comments yet. Why don’t you start the discussion?

    Leave a Reply

    Your email address will not be published. Required fields are marked *