Private DNS

SettingAndroid 9 and later

Checked against official documentationLast reviewed 2026-10-081 min read

Private DNS is an Android setting (Android 9 and later) that encrypts DNS lookups, the step in which the phone asks which address belongs to a website name. It uses DNS over TLS. With a provider hostname, all lookups go encrypted to that provider on every network.

1The three modes

Off sends DNS unencrypted to the network's DNS server. Automatic uses encryption when the network's DNS server supports it and falls back otherwise. 'Private DNS provider hostname' always uses the provider you enter, for example dns.google or one.one.one.one.

2What it protects

Encryption hides the names of the sites you visit from others on the same network, such as public Wi-Fi. The DNS provider itself still sees the lookups, so choose one whose privacy policy you trust.

3When it causes problems

Some public Wi-Fi sign-in pages and company networks need their own DNS server. If a network says 'Connected, no internet', switching Private DNS to Automatic can help.

How to set Private DNS

Open Settings > Network & internet (or Connections).
Tap Private DNS (sometimes under More connection settings).
Choose Private DNS provider hostname and enter the provider's hostname, for example dns.google.
Tap Save and open a website to check.

Cautions

If the hostname is wrong or the provider is unreachable, websites will not load until you switch back to Automatic.
Private DNS does not hide your traffic like a VPN; it only encrypts name lookups.

Sources

DNS over TLS support in Android P Developer Preview (Android Developers Blog) android-developers.googleblog.com
Public DNS: DNS-over-TLS (Google for Developers) developers.google.com

Last reviewed: 2026-10-08