Skip to content

Android

Android 9 and later can send every DNS query over TLS to a host name you choose. This covers all apps, on Wi-Fi and mobile data.

You need: your profile id and a name for this phone.

  1. Open Settings → Network & internet → Private DNS.

    On Samsung phones: Settings → Connections → More connection settings → Private DNS. On other brands, search Settings for “Private DNS”.

  2. Choose Private DNS provider hostname.

  3. Enter:

    <device>-<profile-id>.dns.opdns.net

    for example pixel-8-abc123.dns.opdns.net. Letters, digits and hyphens only; the part after the last hyphen must be your 6-character profile id.

  4. Tap Save. If Android cannot reach the host it says “Couldn’t connect”; check the name for typos.

  5. Check it works: the phone’s queries should appear in the profile’s log under the device name you chose.

Notes

Section titled “Notes”
  • Strict, no fallback. With a host name set, Android does not fall back to your network’s DNS. If opdns is unreachable, name resolution fails until you switch Private DNS back to Automatic.
  • Captive portals. Some hotel and airport Wi-Fi sign-in pages need the network’s own DNS. Switch Private DNS to Automatic to sign in, then back.
  • Apps with their own DNS. Chrome’s Use secure DNS and some apps use their own resolver. Chrome follows the system’s Private DNS when it is set.
  • Work profiles and VPNs. A VPN app can override Private DNS while it is connected.