privacytools.io/pages/providers/dns.html

---
layout: page
permalink: /providers/dns/
title: "Encrypted DNS Resolvers"
description: "Don't let Google see all your DNS traffic. Discover privacy-centric alternatives to the traditional DNS providers."
breadcrumb: "DNS"
---

{% include sections/dns.html %}

<h1 id="dns-desktop-clients" class="anchor">
  <a href="#dns-desktop-clients">
    <i class="fas fa-link anchor-icon"></i>
  </a> Encrypted DNS Client Recommendations for Desktop
</h1>

{%
	include cardv2.html
	title="Unbound"
	image="/assets/img/svg/3rd-party/unbound.svg"
	description='Unbound is a validating, recursive, caching DNS resolver, supporting DNS-over-TLS, and has been <a href="//ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/">independently audited</a>.'
	website="//nlnetlabs.nl/projects/unbound/about/"
	forum="TBD"
	github="//github.com/NLnetLabs/unbound"
%}

{%
	include cardv2.html
	title="dnscrypt-proxy"
	image="/assets/img/svg/3rd-party/dnscrypt-proxy.svg"
	description='A flexible DNS proxy, with support for DNSCrypt, DNS-over-HTTPS, and <a href="//github.com/DNSCrypt/dnscrypt-protocol/blob/master/ANONYMIZED-DNSCRYPT.txt">Anonymized DNSCrypt</a>, a <a href="//github.com/DNSCrypt/dnscrypt-proxy/wiki/Anonymized-DNS">relay-based protocol that the hides client IP address.</a>'
	website="//github.com/DNSCrypt/dnscrypt-proxy/wiki"
	forum="TBD"
	github="//github.com/DNSCrypt/dnscrypt-proxy"
%}

{%
	include cardv2.html
	title="Firefox's built-in DNS-over-HTTPS resolver"
	image="/assets/img/svg/3rd-party/firefox_browser.svg"
	description='Firefox comes with built-in DNS-over-HTTPS support for <a href="https://blog.mozilla.org/blog/2020/02/25/firefox-continues-push-to-bring-dns-over-https-by-default-for-us-users/">NextDNS and Cloudflare</a> but users can manually any other DoH resolver.'
	labels="color==warning::icon==fas fa-exclamation-triangle::link==https://developers.cloudflare.com/1.1.1.1/privacy/firefox::text==Warning::tooltip==Cloudflare has agreed to collect only a limited amount of data about the DNS requests that are sent to the Cloudflare Resolver for Firefox via the Firefox browser."
	website="//support.mozilla.org/en-US/kb/firefox-dns-over-https#w_about-dns-over-https"
	privacy-policy="//wiki.mozilla.org/Security/DOH-resolver-policy"
	forum="TBD"
%}

<h1 id="dns-android-clients" class="anchor">
	<a href="#dns-android-clients">
		<i class="fas fa-link anchor-icon"></i>
	</a> Encrypted DNS Client Recommendations for Android
</h1>

{%
	include cardv2.html
	title="Android 9's built-in DNS-over-TLS resolver"
	image="/assets/img/svg/3rd-party/android.svg"
	description="Android 9 (Pie) comes with built-in DNS-over-TLS support."
	website="//support.google.com/android/answer/9089903#private_dns"
	forum="TBD"
%}

{%
	include cardv2.html
	title="Nebulo"
	image="/assets/img/png/3rd-party/nebulo.png"
	description='An open-source Android client supporting DNS-over-HTTPS and DNS-over-TLS, caching DNS responses, and locally logging DNS queries.'
	website="//git.frostnerd.com/PublicAndroidApps/smokescreen/-/blob/master/README.md"
	privacy-policy="//smokescreen.app/privacypolicy"
	forum="TBD"
	fdroid="https://git.frostnerd.com/PublicAndroidApps/smokescreen#f-droid"
	googleplay="https://play.google.com/store/apps/details?id=com.frostnerd.smokescreen"
	source="//git.frostnerd.com/PublicAndroidApps/smokescreen"
%}

<h1 id="dns-ios-clients" class="anchor">
	<a href="#dns-ios-clients">
		<i class="fas fa-link anchor-icon"></i>
	</a> Encrypted DNS Client Recommendations for iOS
</h1>

{%
	include cardv2.html
	title="DNSCloak"
	image="/assets/img/png/3rd-party/dnscloak.png"
	description='An open-source iOS client supporting DNS-over-HTTPS and DNSCrypt. Supports <a href="//github.com/DNSCrypt/dnscrypt-proxy/wiki">dnscrypt-proxy</a> options such as caching DNS responses, locally logging DNS queries, and custom block lists.'
	website="https://github.com/s-s/dnscloak/blob/master/README.md"
	privacy-policy="https://drive.google.com/file/d/1050No_pU74CAWUS5-BwQWyO2x_aiMzWc/view"
	ios="https://apps.apple.com/app/id1452162351"
	github="https://github.com/s-s/dnscloak"
%}

<h2 id="dns-further-reading">Further Reading</h2>