Free tools Windows power users keep installed
One-click scans. No signup required.
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
On Android 9 (Pie) and later, open Settings > Network and Internet > Private DNS (or Network & Internet > Advanced > Private DNS on some devices), choose Private DNS provider hostname, enter a provider hostname such as dns.google or one.one.one.one, and tap Save. Then perform a fresh lookup and, if you selected Cloudflare, check 1.1.1.1/help for Using DNS over TLS (DoT): Yes. Private DNS encrypts DNS questions and answers; it is not a VPN and does not encrypt all app traffic.
What Android Private DNS does
DNS (Domain Name System) translates a hostname such as example.com into the IP address that an app connects to. On an unprotected connection, those DNS questions and answers can be read or altered by the network carrying them. Android’s Private DNS feature uses DNS over TLS (DoT), which sends DNS traffic through an encrypted TLS connection to a resolver.
Android 9 (Pie) introduced the built-in, system-wide Private DNS setting. When it is active, Android can apply the setting to both Wi-Fi and cellular connections. Cloudflare’s Android documentation describes this scope as using the configured resolver “on all networks — including cellular.” Older Android releases do not have this system-wide DNS-over-TLS control.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Private DNS protects the DNS exchange only. Google Android Help states: “Private DNS helps secure only DNS questions and answers. It can’t protect anything else.” Web pages, video streams, messages, downloads, and other application traffic still use their normal transport. A VPN, carrier VPN feature, or DNS-changing application can also take control of name resolution instead of Android’s Private DNS setting.
#1 Best Overall
- Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
- With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
- Wide Application: attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
- Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
- Economical &Reusable: Built durable materials with a long-lasting battery,our CAGIWIRU air duster it's a sustainable alternative to disposable air cans.
Check your Android version and competing network controls
- Android version: The built-in feature requires Android 9 or newer. Menu wording and placement vary by manufacturer and Android release.
- Network access: Have a working Wi-Fi or mobile-data connection before testing. A captive-portal network (for example, hotel or airport Wi-Fi) may require sign-in before encrypted DNS can work.
- VPNs and DNS apps: Note any VPN, carrier “secure DNS” feature, firewall, ad blocker, or DNS-changer app. These may supersede the operating-system setting.
- Hostname accuracy: A custom configuration accepts a hostname, not an IP address. Enter one hostname exactly as supplied by the provider.
If you cannot find the menu, open Settings and search for Private DNS. If the search returns nothing and the phone is older than Android 9, use the per-network method described later instead.
Set up Private DNS step by step
- Open Settings.
- Tap Network and Internet. Some manufacturers label this area Connections or place it under a similar network heading.
- Tap Private DNS. On some versions, go to Network & Internet > Advanced > Private DNS.
- Choose one of Android’s three modes: Off, Automatic, or Private DNS provider hostname.
- If you choose Private DNS provider hostname, type one hostname from the provider table below. Do not add spaces, a protocol prefix such as
https://, or a slash. - Tap Save. Android will attempt to reach the hostname using DNS over TLS.
What the three modes mean
- Off: Android does not use its Private DNS transport. DNS behavior is left to the network and any other active software.
- Automatic: Android uses the network’s resolver when the network supports the secure transport. This mode does not pin the phone to a particular public provider.
- Private DNS provider hostname: Android attempts to use the specific hostname you enter on every supported network. A typo, an unreachable provider, or a competing VPN/app can make this mode show a connection error.
Choose a provider hostname
These hostnames are documented by the providers. Filtering behavior is part of the resolver service, so select the policy that matches the device’s users and your troubleshooting needs.
| Provider and service | Hostname to enter in Android | Filtering policy | Verification option | Network scope and override caveat |
|---|---|---|---|---|
| Google Public DNS | dns.google |
Standard public resolver; no filtering option is specified here. | Use a fresh hostname-resolution test; the Cloudflare help page does not verify Google usage. | Android applies the configured resolver across Wi-Fi and cellular when no VPN or DNS app supersedes it. |
| Cloudflare standard resolver | one.one.one.one |
Standard resolver without the malware or adult-content filtering described for the other Cloudflare hostnames. | Open 1.1.1.1/help or 1.0.0.1/help; the field Using DNS over TLS (DoT) should read Yes. | Cloudflare documents use on all networks, including cellular, unless a VPN or DNS-changing app takes over. |
| Cloudflare malware blocking | security.cloudflare-dns.com |
Blocks domains identified by Cloudflare as hosting malware. | The Cloudflare help page can confirm DoT, but it does not by itself prove which filtering policy was selected. | Same Android system-wide scope, subject to VPN and app overrides. |
| Cloudflare malware plus adult-content blocking | family.cloudflare-dns.com |
Blocks malware and adult-content domains according to Cloudflare’s service policy. | The Cloudflare help page can confirm DoT; it is not a general content-policy test. | Same Android system-wide scope, subject to VPN and app overrides. |
Do not treat one resolver as universally fastest or most private. Performance depends on your location, carrier, Wi-Fi path, congestion, and current provider conditions. The hostname determines the resolver and, for the filtered Cloudflare options, the blocking policy; it does not turn the phone into a VPN.
Rank #2
- Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
- Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
- Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
- Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
- Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth
Verify that Private DNS is working
Verification should test both ordinary name resolution and, when possible, the encrypted transport itself. A page that appears instantly from cache is not proof that a new DNS query succeeded.
1. Force a fresh hostname lookup
- After saving the setting, open a browser and visit a hostname you have not just loaded, or close and reopen the browser before revisiting a familiar site.
- Refresh several times. This reduces the chance that a cached page is being mistaken for a successful DNS lookup.
- Confirm that the hostname loads normally. Google describes opening a hostname URL as a basic resolver test.
This confirms that name resolution and the subsequent connection work, but it does not identify which provider answered unless the provider supplies a dedicated diagnostic page.
2. Use Cloudflare’s DoT diagnostic when applicable
If the configured hostname is one of Cloudflare’s hostnames, open 1.1.1.1/help (or 1.0.0.1/help). Find Using DNS over TLS (DoT). A value of Yes indicates that the diagnostic sees DNS over TLS. This is a Cloudflare-specific check: it does not prove that a different provider, such as Google, is being used.
Rank #3
- 【Large size】：Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
- 【LED backlight mouse pad】：Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
- 【Anti-slip rubber base】：Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
- 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
- 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.
3. Compare hostname and fixed-IP behavior
- If a hostname fails but a test that connects directly to a known fixed IP works, suspect DNS configuration, a typo, or a resolver that the current network cannot reach.
- If both hostname and fixed-IP tests fail, investigate general connectivity, Wi-Fi sign-in requirements, a captive portal, VPN routing, or network blocking rather than Private DNS alone.
- If the Cloudflare diagnostic reports that DoT is not being used, check the selected hostname, the Private DNS mode, and any VPN or DNS-changing app before drawing conclusions.
Fix “Private DNS cannot connect”
Check the hostname and mode
Return to Settings > Network and Internet > Private DNS and verify that Private DNS provider hostname is selected. Re-enter the hostname exactly, such as dns.google, one.one.one.one, security.cloudflare-dns.com, or family.cloudflare-dns.com. Android expects a hostname, so an IP address, a URL beginning with https://, or a hostname with an extra space will not work as intended.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Finish captive-portal sign-in first
Public Wi-Fi often blocks normal internet access until you accept terms or sign in through a web page. Static or encrypted DNS settings can interfere with that detection. Temporarily use Automatic or turn Private DNS off, connect to the portal, complete the sign-in, and then restore the chosen provider hostname. Cloudflare specifically notes that static DNS settings can interfere with captive-portal Wi-Fi.
Temporarily remove competing VPN or DNS layers
Disable the VPN, carrier VPN feature, firewall, or DNS-changer app briefly and test again. Android’s Private DNS setting cannot tell you which layer ultimately handled a query. If the test succeeds only after the competing layer is disabled, decide which configuration you actually want and re-enable only that arrangement. A VPN may intentionally supply its own DNS for policy, privacy, or corporate access.
Rank #4
- 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
- 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
- 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
- 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
- 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.
Test another network
Try both a trusted Wi-Fi network and cellular data. A provider hostname that works on one path but not another can indicate network-specific blocking or connectivity problems. Because Android’s setting is intended to cover both Wi-Fi and cellular, a difference between them is useful diagnostic evidence rather than proof that the setting is limited to Wi-Fi.
Restart the connection after changing settings
After correcting the mode or hostname, toggle Wi-Fi or mobile data off and on, then repeat the fresh hostname test. Close and reopen the browser so an earlier cached result does not obscure the new behavior.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →What to do on Android versions before Android 9
Phones older than Android 9 do not provide Android’s system-wide Private DNS (DNS-over-TLS) control. You can set DNS addresses separately for individual Wi-Fi networks through that device’s advanced or static IP settings, but this is not equivalent to Private DNS:
Best Value
- 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
- 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
- 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
- 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
- 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.
- The setting is normally per Wi-Fi network rather than global.
- It does not automatically cover cellular data.
- Menu names and the fields available differ by manufacturer and Android release.
- Static DNS values may disrupt captive-portal detection; connect to the portal first, then restore the static configuration if you continue using that legacy method.
Because those older settings do not provide Android’s built-in DNS-over-TLS transport, they should not be described as system-wide encrypted Private DNS.
Security boundaries and privacy trade-offs
What is protected
With a functioning Private DNS configuration, the DNS questions and answers between Android and the selected resolver are transported using DNS over TLS. This helps prevent the local network from reading or modifying that DNS exchange.
What remains visible or unprotected
Private DNS does not encrypt all application traffic, hide your IP address, provide anonymity, or replace a VPN. Applications still connect to their services using their own protocols. A site can also learn information through the connection that follows DNS, and the resolver can see the DNS queries it receives under its own service policies.
Why the operating-system resolver matters
Android Developers warns that an app implementing its own DNS transport can bypass Android’s built-in transport security. Relying on Android’s resolver and a known secure provider reduces the chance that an individual app silently substitutes a weaker or different DNS path. This does not prevent a VPN or another device-management layer from deliberately overriding the operating-system resolver.
Quick Recap
A practical decision path
- Need the simplest supported setup? On Android 9 or newer, select Automatic and verify with a fresh hostname lookup.
- Need a fixed public resolver? Select Private DNS provider hostname and enter
dns.googleorone.one.one.one. - Need malware filtering? Use
security.cloudflare-dns.comand verify that DoT is active with Cloudflare’s diagnostic. - Need malware and adult-content filtering? Use
family.cloudflare-dns.com, remembering that the filtering policy belongs to the resolver and may block legitimate domains. - Seeing different results? Check VPNs, carrier features, DNS apps, captive portals, and the network itself before changing providers repeatedly.
Common mistakes to avoid
- Entering a resolver IP address instead of the documented hostname.
- Assuming Automatic always means a particular public provider. It delegates to the network’s resolver when Android can use its supported secure transport.
- Using the Cloudflare diagnostic to claim that Google is configured, or using a successful web page load as proof that DNS over TLS is active.
- Calling Private DNS a VPN or expecting it to encrypt every app connection.
- Leaving a VPN or DNS-changer app enabled while diagnosing Android’s setting, then attributing that app’s behavior to Private DNS.
- Trying to use an Android 9+ procedure on an older phone that has no Private DNS menu.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
