Why Change Your DNS?
The DNS (Domain Name System) translates website names into IP addresses. By default your router uses the DNS servers provided by your ISP. Those servers work, but they often lack privacy features, encrypted queries, and advanced security filters.
Switching to a third‑party DNS can:
- Reduce the amount of browsing data your ISP can see.
- Provide built‑in malware, phishing and ransomware blocking.
- Offer encrypted DNS (DoH or DoT) for added privacy.
- Potentially improve lookup speed and overall browsing performance.
Benefits of Popular Third‑Party DNS Providers
While many providers exist, a few stand out for ease of use and security:
- Cloudflare (1.1.1.1) – Fast, privacy‑first, supports DNS‑over‑HTTPS and DNS‑over‑TLS.
- Quad9 (9.9.9.9) – Blocks known malicious domains and does not log IP addresses.
- NextDNS – Highly customizable profiles per device, ad‑blocking, analytics, and both IPv4/IPv6 support.
Step‑by‑Step: Changing DNS on Your Router
1. Find the router’s IP address (default gateway). On Windows run ipconfig, on macOS run netstat -nr | grep default, or check the sticker on the router.
2. Open a web browser and enter the IP address. Log in with the admin username and password (often on the router or in the manual).
3. Locate the DNS settings. Look under sections named WAN, Internet, Routing, or DNS. Some routers have a search box to help.
4. Enter your preferred DNS servers. Add both IPv4 and IPv6 addresses if available. Example for Cloudflare:
- Preferred DNS (IPv4): 1.1.1.1
- Alternative DNS (IPv4): 1.0.0.1
- Preferred DNS (IPv6): 2606:4700:4700::1111
- Alternative DNS (IPv6): 2606:4700:4700::1001
5. Save the changes and reboot the router. After the reboot, all devices that obtain their IP via DHCP will start using the new DNS.
What to Do If Your ISP Locks the Router
Some ISP‑provided routers block access to DNS settings. If you encounter this:
- Use a separate, user‑owned router (e.g., a cheap AC1200 model) and connect it to the ISP modem.
- Change DNS settings on individual devices (smartphone, PC, smart TV) using their network settings.
- Consider flashing the ISP router with third‑party firmware (e.g., OpenWrt) only if you’re comfortable with advanced networking.
Final Tips
• Keep a backup of the original ISP DNS in case you need to revert.
• Test your new setup with DNSLeakTest.com to confirm encrypted queries.
• Periodically review the provider’s policy for logs and security updates.