Free tools Windows power users keep installed
One-click scans. No signup required.
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Android Private DNS encrypts DNS lookups between your phone and its DNS resolver. That helps stop someone watching the connection from reading or tampering with those lookups, but it does not hide your browsing from the resolver or encrypt everything your phone sends. The built-in setting is available on Android 9 and later.
What does Private DNS do on Android?
Before your phone connects to a site by name, such as www.google.com, it asks a DNS resolver to look up the corresponding IP address. On many networks, ordinary DNS requests and replies travel without encryption between the device and resolver.
Android’s Private DNS uses DNS-over-TLS (DoT) to create an encrypted channel for that exchange. Google describes traditional DNS as using UDP or TCP without encryption; DoT protects the connection between your phone and the resolver, not the resolver’s subsequent work or every other part of your internet traffic. The resolver still receives and processes your queries.
DNS-over-TLS and DNSSEC are different protections. DoT encrypts the transport between client and resolver. DNSSEC helps authenticate signed DNS data; it does not provide that transport encryption.
#1 Best Overall
- YOUR CONTENT, SUPER SMOOTH: The ultra-clear 6.7" FHD+ Super AMOLED display of Galaxy A17 5G helps bring your content to life, whether you're scrolling through recipes or video chatting with loved ones.¹
- LIVE FAST. CHARGE FASTER: Focus more on the moment and less on your battery percentage with Galaxy A17 5G. Super Fast Charging powers up your battery so you can get back to life sooner.²
- MEMORIES MADE PICTURE PERFECT: Capture every angle in stunning clarity, from wide family photos to close-ups of friends, with the triple-lens camera on Galaxy A17 5G.
- NEED MORE STORAGE? WE HAVE YOU COVERED: With an improved 2TB of expandable storage, Galaxy A17 5G makes it easy to keep cherished photos, videos and important files readily accessible whenever you need them.³
- BUILT TO LAST: With an improved IP54 rating, Galaxy A17 5G is even more durable than before.⁴ It’s built to resist splashes and dust and comes with a stronger yet slimmer Gorilla Glass Victus front and Glass Fiber Reinforced Polymer back.
Should you turn on Private DNS?
It can be useful if you want to encrypt DNS traffic on both Wi-Fi and mobile connections without installing a separate DNS app. Whether to use a custom provider depends on whether you trust its operator, accept its filtering behavior, and can reach it reliably on the networks you use.
When comparing providers, check whether the service supports DNS-over-TLS and the hostname Android requires; who operates it and what its privacy and data-retention policies say; whether it filters domains and could block legitimate sites; and how it behaves on networks that restrict encrypted DNS. The official technical sources describe compatibility and transport behavior, but do not establish comparative privacy policies or performance figures, so they do not support ranking providers.
Rank #2
- Carrier: This phone is locked to Tracfone, which means this device can only be used on the Tracfone wireless network. Tracfone plan required, activating is easy, just 3 steps.
- DISPLAY: Immersive viewing on a 6.7-inch super-bright 120Hz display with powerful stereo speakers and Bass Boost for cinematic entertainment.
- CAMERA SYSTEM: Advanced 50MP Quad Pixel camera captures sharp, detailed photos and videos in any lighting condition
- PERFORMANCE: Lightning-fast 5G connectivity paired with a powerful processor and RAM Boost for smooth multitasking.
- BATTERY LIFE: Long-lasting 5000mAh battery with TurboPower charging technology delivers hours of power in minutes.
How to set up a Private DNS provider hostname
Google’s instructions cover Android 9 (Pie) and later. The example path and labels can differ by manufacturer and Android release; if they do not match your phone, search Settings for “Private DNS.”
- Open Settings > Network & Internet > Advanced > Private DNS, or find “Private DNS” using Settings search.
- Select Private DNS provider hostname.
- Enter the hostname of a compatible DNS-over-TLS provider. Google’s setup example is
dns.google. - Tap Save.
The setting can apply across Wi-Fi and mobile data, unlike changing DNS on a single Wi-Fi network. Google’s setup instructions say the built-in feature is not supported on versions earlier than Android 9.
Rank #3
- YOUR CONTENT, SUPER SMOOTH: The ultra-clear 6.7" FHD+ Super AMOLED display of Galaxy A17 5G helps bring your content to life, whether you're scrolling through recipes or video chatting with loved ones.¹
- LIVE FAST. CHARGE FASTER: Focus more on the moment and less on your battery percentage with Galaxy A17 5G. Super Fast Charging powers up your battery so you can get back to life sooner.²
- MEMORIES MADE PICTURE PERFECT: Capture every angle in stunning clarity, from wide family photos to close-ups of friends, with the triple-lens camera on Galaxy A17 5G.
- NEED MORE STORAGE? WE HAVE YOU COVERED: With an improved 2TB of expandable storage, Galaxy A17 5G makes it easy to keep cherished photos, videos and important files readily accessible whenever you need them.³
- BUILT TO LAST: With an improved IP54 rating, Galaxy A17 5G is even more durable than before.⁴ It’s built to resist splashes and dust and comes with a stronger yet slimmer Gorilla Glass Victus front and Glass Fiber Reinforced Polymer back.
What happens if the Private DNS server cannot be accessed?
With a specified provider hostname, Android attempts to contact that provider securely. If it cannot establish the connection, name resolution can fail and the network may show “No internet access.” This is different from the documented Android P Automatic behavior, which uses the network-specified DNS server, tries TLS on port 853, and can fall back to UDP on port 53.
Google’s DNS-over-TLS documentation describes two transport profiles. These generic profile names explain the underlying tradeoff; they are not interchangeable with Android’s UI labels:
Rank #4
- PRIVACY DISPLAY: Automatically hide your screen from those beside you. The built-in privacy display can be preset¹ to turn on when receiving notifications, typing passwords, or using specific apps
- TYPE IT IN. TRANSFORM IT FAST: Enhance any shot in seconds on your smartphone by using Photo Assist² with Galaxy AI.³ Add objects, restore details, or apply new styles by simply typing or tapping
- NIGHTS, CAPTURED CLEARLY: From gigs to city lights, record and capture moments after dark with clarity using Nightography so your photos and videos stay crisp and clear on your Samsung Galaxy
- MAKE IT. EDIT IT. SHARE IT: Turn everyday moments into something personal with creative tools built right into your mobile phone, whether it’s a special contact photo, custom wallpaper, an invitation or more⁴
- HELP THAT KEEPS UP: Stay in the moment while Now Nudge with Galaxy AI helps you respond faster and stay organized with smart suggestions⁵ that appear exactly when you need them on your phone
- Strict privacy: requires an authenticated TLS connection to the configured server on port 853. If the connection cannot be established, DNS resolution fails rather than switching to unencrypted DNS.
- Opportunistic privacy: tries TLS but can fall back to ordinary DNS on port 53. That fallback removes DNS encryption and protection against active attackers on that leg.
If changing the setting stops name lookups from working, switch back to Automatic or turn Private DNS off temporarily to diagnose whether the provider hostname or network reachability is the issue. The precise controls may vary by device.
Recommended Free Tools
Can VPNs or apps bypass Android Private DNS?
They can affect whether the system setting applies. Google notes that VPNs and DNS-changing apps could override Private DNS in some Android 9 scenarios, with that issue fixed in Android 10; behavior can still depend on the Android version and the app.
Best Value
- Carrier: This phone is locked to Tracfone, which means this device can only be used on the Tracfone wireless network. Activating is easy, just 3 steps.
- ACTIVATION Promotion: Includes 1500 min, 1500 texts & 1500 MB Data + add more as you need it
- CAMERA SYSTEM: 50MP Quad Pixel camera. Capture sharper, more vibrant photos day or night with 4x the light sensitivity.
- PERFORMANCE: Blazing-fast Qualcomm performance. Get the speed you need for great entertainment with a Snapdragon 680 processor and 4GB of RAM.
- 64GB built-in storage. Get plenty of room for photos, movies, songs, and apps. Made for US
An app that makes DNS requests itself rather than using Android’s system APIs may also need to ensure it does not send insecure DNS queries. As a result, the system setting should not be treated as proof that every app’s DNS traffic uses the same protected path.
Does Private DNS hide your browsing?
No. It encrypts DNS messages on the route from your phone to the resolver, but the resolver still sees the requests it handles. It does not encrypt web-page contents or every internet connection, and it does not make you anonymous. HTTPS is a separate protection for supported web traffic.
Private DNS also should not be assumed to block ads, malware, trackers, or all censorship. Those outcomes depend on the resolver’s behavior and are not guaranteed by enabling DNS-over-TLS.
Quick Recap
Sources
- Android Developers Blog: “DNS over TLS support in Android P Developer Preview” (13 April 2018).
- Google Public DNS: “Get Started: Configure your devices to use Google Public DNS.”
- Google Public DNS: “DNS-over-TLS” (last updated 3 September 2024).
- Google Public DNS: “Secure transports for DNS.”
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
