Windows 11 (Encrypted)
The easiest way to set Quad9 on your entire network is via your router settings. If you'd prefer to set Quad9 on an individual Windows device, please follow the steps below to configure Windows 11 to use Quad9.
- Firefox is set to use Cloudflare DNS by default in some regions. If you're using Firefox, check that this is disabled.
- VPNs typically do not respect the system or router-level DNS settings. If you're using a VPN, configure Quad9's IP addresses in the
Custom DNSsettings of your VPN client. Refer to your VPN provider's documentation for further information.
Right click the Network or WiFi icon on the system tray, and left click
Network and Internet Settings
WiFi, depending on your connection type.
Scroll down and click
DNS server assignment
Make the following changes:
- Toggle the
Onswitch to change the DNS server
- Enter into
Preferred DNS: 184.108.40.206
Preferred DNS encryptionto
Encrypted Only (DNS over HTTPS)
- Enter into
Alternate DNS: 220.127.116.11
- Set Alternate DNS encryption to Encrypted Only (DNS over HTTPS)
If using a laptop that roams to other networks which may block DNS over HTTPS, consider choosing
Encryption preferred, unencrypted allowed instead of
If using IPv6, which you can confirm here, you should also scroll down and set up Quad9 on IPv6. Note: if Windows is not configured with an IPv6 address, setting up an IPv6 DNS server could cause DNS resolution to fail.
- Open the Terminal application, and execute this command:
Resolve-DnsName -Type txt proto.on.quad9.net.
The output should show
doh. (DNS over HTTPS) in the
NameHost section if you set Quad9 in the Network Settings and enabled encryption.
Name Type TTL Section NameHost ---- ---- --- ------- -------- proto.on.quad9.net CNAME 60 Answer doh
Questions? Issues? Didn't work? Contact us!