Standard DNS queries may expose the domain names your computer resolves. Configure Windows 11 to use DNS over HTTPS with a compatible resolver and verify name resolution.
Configure a supported DNS provider under your active network connection, enable DNS over HTTPS with an automatic template, and disable fallback to plaintext if strict encryption is required.
Open **Settings > Network & internet** and select your active **Wi-Fi** or **Ethernet** connection. Find **DNS server assignment** and record whether it uses automatic or manual configuration, including any existing server addresses. This information lets you restore your previous setup if the new resolver causes problems.
Under **DNS server assignment**, select **Edit**. Change the configuration from **Automatic (DHCP)** to **Manual** if you intend to specify a DNS provider directly. Leave the separate IP address assignment unchanged because encrypted DNS does not require a static local IP address.
In the DNS editor, switch **IPv4** to **On**. Enter the preferred IPv4 DNS address supplied by your chosen provider in **Preferred DNS**, and optionally enter its alternate address in **Alternate DNS**. Make sure the resolver you choose officially supports DNS over HTTPS.
Under the preferred server's DNS settings, find **DNS over HTTPS** and select **On (automatic template)** if it is supported for that resolver. Repeat the selection for the alternate server when configured. Windows will use the available automatic HTTPS resolver template instead of sending normal unencrypted DNS requests to that server.
Find **Fallback to plaintext** for the configured resolver. Set it to **Off** if you want DNS lookups to fail rather than use unencrypted DNS when the secure resolver is unavailable. This provides stricter protection but can interrupt name resolution if the HTTPS service cannot be reached.
Select **Save** and return to your active network settings. Confirm that Windows displays the intended DNS servers and encrypted DNS configuration. Open **Microsoft Edge** and visit a normal HTTPS website to check that domain resolution still works.
Confirm the operating system is Windows 11 and that you have selected a compatible resolver. The automatic template option might not be available for a custom provider.
Reopen DNS server assignment > Edit and check the configured server addresses. Restore the previous DNS settings if the resolver is unavailable.
Check for additional configured DNS servers, including IPv6 resolvers. Ensure their encryption settings are consistent with your intended configuration, and verify that your network does not block the chosen resolver.
No. It encrypts supported DNS lookups but does not hide your IP address from websites or encrypt unrelated traffic.
Yes. Browsers such as Microsoft Edge and Firefox can manage secure DNS independently, so their settings may affect which resolver is used.
https://support.microsoft.com/en-us/windows/experience/connectivity-networking/essential-network-settings-and-tasks-in-windows
Open Settings > Network & internet, select the active connection, and choose Edit under DNS server assignment. Restore Automatic (DHCP) if it was previously selected, or reenter your original manual DNS configuration, then select Save.
Free · no account needed · tracks your progress