01
Choose a DNS provider
Select a provider with documented DNS over HTTPS support and review its privacy policy.
Choose a trusted **DNS over HTTPS** provider and configure encrypted DNS for your network connection.
Requirements
- Windows 11 25H2 x64
- Working internet connection
- DNS provider supporting DoH
- Permission to change network settings
Instructions
02
Open network properties
Open **Settings > Network & internet** and select the active Wi-Fi or Ethernet connection.
03
Edit DNS settings
Find **DNS server assignment**, click **Edit**, and change the configuration from automatic to manual.
04
Enter provider addresses
Enable the applicable IP version and enter the DNS addresses published by your chosen provider. Select an available encrypted DNS mode.
tipUse the provider's exact documented addresses and DoH template if Windows requests one.
05
Save and reconnect
Click **Save** and reconnect the network if necessary. Confirm that websites resolve normally.
06
Verify DNS configuration
Use the provider's official DNS test page when available. Confirm that encrypted DNS is active rather than relying only on successful browsing.
Common issues
Websites stop resolving.
Check DNS addresses and encrypted DNS configuration. Temporarily restore automatic DNS if the connection cannot be repaired.
Encrypted DNS is unavailable.
Confirm the chosen provider supports DoH and that Windows recognizes its configuration.
Frequently asked
Does DoH encrypt all internet traffic?
No. It encrypts supported DNS queries, not every connection.
Will DoH hide browsing from my employer?
No. Managed networks and other network metadata may still reveal activity.
How to undo this
Open the network connection's **DNS server assignment**, choose **Automatic (DHCP)**, and save. Reconnect to restore the previous DNS behavior.
Interactive version: checklist, feedback, related guides →
Free · no account needed · tracks your progress