Encrypted Domain Name System (DNS) Resolvers
Terms
- DNS-over-TLS (DoT) - A security protocol for encrypted DNS on a dedicated port 853. Some providers support port 443 which generally works everywhere while port 853 is often blocked by restrictive firewalls.
- DNS-over-HTTPS (DoH) - Similar to DoT, but uses HTTPS instead, being indistinguishable from "normal" HTTPS traffic on port 443.
- DNSCrypt - An older yet robust method of encrypting DNS.
Note: Using an encrypted DNS resolver will not make you anonymous, nor hide your internet traffic from your Internet Service Provider. But, it will prevent DNS hijacking, and make your DNS requests harder for third parties to eavesdrop on and tamper with. If you are currently using Google's DNS resolver, you should pick an alternative here.
| DNS Provider |
Server Locations |
Privacy Policy |
Type |
Logging |
Protocols |
DNSSEC |
QNAME Minimization |
Filtering |
Source Code |
Hosting Provider |
|
AdGuard
|
Anycast (based in
Cyprus)
|
|
Commercial |
No |
DoH, DoT, DNSCrypt |
Yes |
Yes |
Ads, trackers,
malicious domains
|
|
Serveroid, LLC
|
|
BlahDNS
|
Finland,
Germany,
Japan
|
|
Hobby Project |
No |
DoH,
DoT ,
DNSCrypt
|
Yes |
Yes |
Ads, trackers,
malicious domains
|
|
Choopa, LLC,
Data Center Light,
Hetzner Online GmbH
|
|
Cloudflare
|
Anycast (based in
US)
|
|
Commercial |
Some |
DoH, DoT |
Yes |
Yes |
No |
? |
Self |
|
CZ.NIC
|
Czech Republic
|
|
Association |
No |
DoH, DoT |
Yes |
Yes |
? |
? |
Self |
|
Foundation for Applied Privacy
|
Austria
|
|
Non-Profit |
Some |
DoH,
DoT
|
Yes |
Yes |
No |
? |
IPAX OG
|
|
NextDNS
|
Anycast (based in
US)
|
|
Commercial |
Based on user choice
|
DoH, DoT, DNSCrypt |
Yes |
Yes |
Based on server choice
|
? |
Self |
|
NixNet
|
Anycast (based in
US),
US,
Luxembourg
|
|
Informal collective
|
No |
DoH, DoT |
Yes |
Yes |
Based on server choice
|
|
FranTech Solutions
|
|
PowerDNS
|
The Netherlands
|
|
Hobby Project |
No |
DoH |
Yes |
No |
No |
|
TransIP B.V. Admin
|
|
Quad9
|
Anycast (based in
US)
|
|
Non-Profit |
Some |
DoH, DoT, DNSCrypt |
Yes |
Yes |
Malicious domains
|
? |
Self,
Packet Clearing House
|
|
Snopyta
|
Finland
|
|
Informal collective
|
No |
DoH, DoT |
Yes |
Yes |
No
|
? |
Hetzner Online GmbH
|
|
UncensoredDNS
|
Anycast (based in
Denmark),
Denmark,
US
|
|
Hobby Project |
No |
DoT |
Yes |
No |
No |
? |
Self,
Telia Company AB
|