DNS over HTTPS (DoH) is a privacy feature available in Windows 10 through multiple methods, but it was never an option that allowed consumers to use it. This has changed in Windows 11. Windows Network Settings now allows consumers to switch from an unencrypted to a fully encrypted network. This phone will show you how to use the DNS over HTTPS privacy feature in Windows 11.
What is DNS-over-HTTPS?
I am sure most of us now know HTTPS when visiting a website. The same has been implemented for DNS queries. Every time you access a website, the request is sent over a secure, encrypted network to the DNS or Domain Name Resolution server. This method ensures that no man-in-the-middle attack can tamper with the request and redirect you to a compromised website.
How to set DNS over HTTPS (DoH) in Windows 11
You can now set DNS over HTTPS (DoH) in Windows 11 via Windows Settings by taking these steps:
- Open Windows Settings (Win + I)
- Click on Network and Internet
- Depending on how PC or Laptop connected, click on Ethernet or Wireless
- It will reveal the Ethernet or WiFi settings and reveal all the control options that allow you to modify the network. Click on the Edit button next to the DNS server assignment.
- Once the Edit DNS settings window shows up, switch from Automatic to Manual using the dropdown allowing you to use DoH. Select Manual, and then toggle on IPv4 or IPv6, depending on what you are using on your PC.
- Next, type in the DoH server IP address, and then from the preferred DNS Encryption, select Encrypted Only. Repeat the same for Alternate DNS. You can even mix-match by using Google DNS as primary and Cloudflare DNS as secondary.
Finally, click on the Save button to complete the changes. Post this, any query made from the browser or application will be using DNS over HTTPS.
In the Network Setting, you should see Encrypted next to the IPv4 or IPv6 DNS Servers.
What are the types of DNS Encryption options available in Windows
- Unencrypted—Default unencrypted DNS.
- Encrypted—Use DoH servers only.
- Encrypted preferred, unencrypted only—The first preference is DoH, but it will use the unencrypted DNS if it’s unavailable.
List of DNS Over HTTPS services that work on Windows
There are tons of DoH available, and while most of them will work, it is recommended to use the popular ones such as Cloudflare (1.1.1.1 and 1.0.0.1 ), Google ( 8.8.8.8 and 8.8.8.4 ), and Quad9 (9.9.9.9 and 149.112.112.112) DNS servers.
How to enable DoH via Group Policy
If you love to use Group Policy for everything or if you are an IT admin who needs to manage computers via Group Policy, then DNS over HTTPS can be controlled using Group Policies. This works on all Windows versions, including Home, but you need to enable it on the Windows Home version.
Press Win + R to open the Run prompt
Type gpedit.msc and press the Enter key.
In the GP Editor, navigate to the following path.
Computer Configuration > Administrative Templates > Network > DNS Client
Click on the policy—Configure DNS over HTTPS(DoH) name resolution—and choose to enable it from the dropdown.
Next, locate the policy—DNS servers—and set the IP address
Apply the changes, and you are good to go.
How to enable DoH using Registry Method
While you can enable DNS over HTTPS in Windows 11 via Registry, you don’t need it as DoH is available through the settings. The Registry method involves creating a DWORD named EnableAutoDoh in the registry.
Should you use DNS over HTTPS?
Yes. It is important that neither your ISP, nor any software, nor anybody else can spoof what you are querying from the computer to DNS. It makes sure you are not directed to a website that can steal your data.
Read: How to Enable or Disable Wi-Fi and Ethernet adapter on Windows 11.
Can ISP see DNS over HTTPS?
No, they cannot because you are not using their DNS. While they may monitor the website, ISPs can not in any way compromise this.
Read: How to enable DNS over TLS in Windows 11
Is DNS over HTTPS faster?
It can be. DNS means Domain Name System, and the faster it is, the faster you connect to websites and resources. Cloudflare and Google are known to be the fastest DNS providers, and they will improve your experience.
How do I know if my DNS is working HTTPS?
Cloudflare offers a webpage that can check this setting. When you visit the page, click on Check my browser, and it will reveal any missing security measures. If you do not want to use
It is interesting to note that DNS over HTTPS was once enabled in Windows 10 in one of the insider builds but was taken away. It wouldn’t be surprising if they chose to enable it again in the future. It goes without saying that you should ditch your local ISP’s DNS IP address and choose Google, Cloudflare DNS, which offers DNS over HTTPS privacy feature in Windows 11 or any other OS.
TIP: It is also possible to enable DNS over HTTPS in Firefox, Chrome, Edge, Opera, etc.
