---
layout: page
permalink: /providers/dns/
title: "Encrypted DNS Resolvers"
description: "Don't let Google see all your DNS traffic. Discover privacy-centric alternatives to the traditional DNS providers."
breadcrumb: "DNS"
---

{% include sections/dns.html %}

<h1 id="dns-desktop-clients" class="anchor">
  <a href="#dns-desktop-clients">
    <i class="fas fa-link anchor-icon"></i>
  </a> Encrypted DNS Client Recommendations for Desktop
</h1>

{%
  include cardv2.html
  title="Firefox's built-in DNS-over-HTTPS resolver"
  image="/assets/img/svg/3rd-party/firefox_browser.svg"
  description='Firefox comes with built-in DNS-over-HTTPS support with <a href="https://blog.mozilla.org/blog/2020/02/25/firefox-continues-push-to-bring-dns-over-https-by-default-for-us-users/">NextDNS and Cloudflare</a> set as the default resolver, but can be configured to use any DNS-over-HTTPS resolver.'
  labels="color==warning::icon==fas fa-exclamation-triangle::link==https://developers.cloudflare.com/1.1.1.1/privacy/firefox::text==Warning::tooltip==Cloudflare has agreed to collect only a limited amount of data about the DNS requests that are sent to the Cloudflare Resolver for Firefox via the Firefox browser."
  website="//support.mozilla.org/en-US/kb/firefox-dns-over-https#w_about-dns-over-https"
  privacy-policy="//wiki.mozilla.org/Security/DOH-resolver-policy"
  forum="TBD"
%}

{%
  include cardv2.html
  title="dnscrypt-proxy"
  image="/assets/img/svg/3rd-party/dnscrypt-proxy.svg"
  description='A flexible DNS proxy, with support for modern encrypted DNS protocols such as DNSCrypt v2, DNS-over-HTTPS and <a href="//github.com/DNSCrypt/dnscrypt-protocol/blob/master/ANONYMIZED-DNSCRYPT.txt">Anonymized DNSCrypt</a>.'
  website="//dnscrypt.info/"
  forum="TBD"
  github="//github.com/DNSCrypt/dnscrypt-proxy"
%}

{%
  include cardv2.html
  title="Unbound"
  image="/assets/img/svg/3rd-party/unbound.svg"
  description='Unbound is a validating, recursive, caching DNS resolver, supporting DNS-over-TLS, and has been <a href="//ostif.org/our-audit-of-unbound-dns-by-x41-d-sec-full-results/">independently audited</a>.'
  website="//nlnetlabs.nl/projects/unbound/about/"
  forum="TBD"
  github="//github.com/NLnetLabs/unbound"
%}

<h1 id="dns-android-clients" class="anchor">
  <a href="#dns-android-clients">
    <i class="fas fa-link anchor-icon"></i>
  </a> Encrypted DNS Client Recommendations for Android
</h1>

{%
  include cardv2.html
  title="Android 9's built-in DNS-over-TLS resolver"
  image=""
  description='Android 9 (Pie) comes with built-in DNS-over-TLS support.'
  labels="color==warning::icon==fas fa-exclamation-triangle::link==https://android-developers.googleblog.com/2018/04/dns-over-tls-support-in-android-p.html::text==Warning::tooltip==However, apps that perform their own DNS queries, instead of using the system's APIs, must ensure that they do not send insecure DNS queries when the system has a secure connection."
%}

{%
  include cardv2.html
  title="Nebulo"
  image="/assets/img/png/3rd-party/nebulo.png"
  description='An open-source application for Android supporting DNS-over-HTTPS and DNS-over-TLS, caching DNS responses, and locally logging DNS queries.'
  website="//git.frostnerd.com/PublicAndroidApps/smokescreen/-/blob/master/README.md"
  privacy-policy="//smokescreen.app/privacypolicy"
  forum="TBD"
  fdroid="https://git.frostnerd.com/PublicAndroidApps/smokescreen#f-droid"
  googleplay="https://play.google.com/store/apps/details?id=com.frostnerd.smokescreen"
  source="//git.frostnerd.com/PublicAndroidApps/smokescreen"
%}

<h1 id="dns-ios-clients" class="anchor">
  <a href="#dns-ios-clients">
    <i class="fas fa-link anchor-icon"></i>
  </a> Encrypted DNS Client Recommendations for iOS
</h1>

{%
  include cardv2.html
  title="DNSCloak"
  image="/assets/img/png/3rd-party/dnscloak.png"
  description='An open-source <a href="//github.com/DNSCrypt/dnscrypt-proxy">dnscrypt-proxy</a> client by <a data-toggle="tooltip" data-placement="bottom" data-original-title="A charitable non-profit host organization for international Free Software projects." href="//techcultivation.org/">the Center for the Cultivation of Technology gemeinnuetzige GmbH</a>, supporting DNSCrypt and DNS-over-HTTPS.'
  website="https://github.com/s-s/dnscloak/blob/master/README.md"
  privacy-policy="https://drive.google.com/file/d/1050No_pU74CAWUS5-BwQWyO2x_aiMzWc/view"
  ios="https://apps.apple.com/app/id1452162351"
  github="https://github.com/s-s/dnscloak"
%}

<h2 id="dns-further-reading">Further Reading</h2>