Best DNS for Windows: A Practical Guide and Comparison

  • DNS servers translate domain names to IP addresses, and choosing alternative providers to those of your operator improves speed, stability, and security on Windows.
  • Services such as Google, Cloudflare, Quad9, OpenDNS, AdGuard, and CleanBrowsing offer free public DNS with an emphasis on performance, privacy, malware blocking, and parental controls.
  • In Windows 10 and 11 you can easily change the DNS from the network settings, Control Panel, CMD or PowerShell, or configure them on the router for the entire network.
  • Tools like DNS Jumper, DNS Benchmark, or NameBench help you measure which servers are fastest on your connection and choose the optimal option based on your location and operator.

Best DNS for Windows: A Practical Guide and Comparison

If you use Windows daily and notice that Websites take a long time to load, some pages don't open, or ping in your games It is higher than normalThe problem may not be with your WiFi or your provider, but with the DNS servers you are unknowingly using.

DNS servers are like the internet's contact list, and choosing the right ones makes all the difference between clumsy browsing and a reliable connection. faster, safer, and with fewer restrictionsLet's take a closer look at what they are, why it's advisable to change them in Windows, and which are the best servers you can configure right now.

What is a DNS server and why would you want to change it in Windows?

The DNS system (Domain Name System or Domain Name SystemThis system translates easy-to-remember website names like "google.com" or "microsoft.com" into numerical IP addresses that network devices understand. Without this system, you would have to memorize them. different number strings for each page, something completely unfeasible for any normal user.

In practice, DNS is a large distributed and hierarchical database distributed throughout the world. It stores information for each domain: its IP address, the corresponding mail servers (MX records), and even additional associated data that allows other services to function correctly.

When you type a URL into your browser, Windows first checks its local cache to see if it already knows the IP address for that domain. If it doesn't, it queries its configured DNS servers. These servers can be provided by your internet service provider or be third-party providers like Google, Cloudflare, Quad9, or OpenDNS, among others. The server responds with the IP address and That response is cached for a few seconds or minutes. to speed up subsequent access.

By default, almost everyone uses their ISP's DNS servers without changing them, but changing them in Windows can help you gain speed, improve security, and apply [optimization features/optimization]. parental control or bypassing blocks on certain websites that your operator has decided to filter.

Advantages and disadvantages of using alternative DNS

Advantages of the best DNS servers for Windows

One of the great advantages of using third-party DNS is the reliability and stabilitySpecialized providers (Google, Cloudflare, OpenDNS, Quad9, AdGuard, etc.) have huge networks of servers spread around the world and Anycast systems that send your requests to the nearest node, reducing downtime and availability problems.

It also usually improves resolution speedA good DNS server takes milliseconds to tell your PC which IP address corresponds to a specific website. If your internet service provider's server is slow or overloaded, you'll see pages take longer to start loading, even if your fiber optic connection is fast. Optimized DNS servers reduce this loading time and improve the perceived smoothness, which is especially noticeable in online games or streaming services.

Many alternative DNS servers add extra layers of security and protection against threatsSome automatically block domains associated with malware, phishing, fraudulent websites, or bots. Others support technologies like DNSSEC, DNS-over-HTTPS (DoH), DNS-over-TLS (DoT), or DNSCrypt, which prevent third parties from manipulating or spying on your domain name requests.

Another great asset is the Parental controls and content filtersServices such as CleanBrowsing, AdGuard DNS or OpenDNS FamilyShield allow you to block adult websites, filter specific categories (games, gambling, social networks, etc.) or force safe search on Google and YouTube without installing programs on each device.

On the downside, it's worth mentioning that some providers record some of your activity. Although they promise anonymity, the reality is that Not everyone has the same privacy policy Nor the same log retention time. And, of course, using third-party DNS doesn't make you completely anonymous: your ISP still sees which IP address you connect to.

There are also security risks if you end up using fraudulent or misconfigured DNS servers. An attacker can set up a rogue DNS server that responds with fake IPs and redirects you to cloned websites to steal credentials or banking information, a practice known as DNS phishing. cache poisoning or DNS spoofing attacksThat's why it's important to choose well-known and reliable suppliers.

Types of DNS: public, private, free, paid…

When choosing, it's important to distinguish between several types of DNS servers. On one hand, there are the Public DNSThese services are accessible to anyone and are generally offered by large technology companies, non-profit organizations, or security providers. Examples include Google Public DNS, Cloudflare, Quad9, OpenDNS, AdGuard, and CleanBrowsing.

On the opposite side are the Private DNSThese are typically used in companies to manage access to internal resources, corporate networks, or intranets. They are not publicly accessible and are configured so that employees can resolve both public domains and the organization's own internal names.

Another important distinction is between Free and paid DNSMost of the home options you'll use on Windows are free, but some advanced services offer premium versions with more features: detailed statistics, more filters, custom profiles, technical support, longer log retention, or multi-user configurations.

Typically, a paid DNS service geared towards businesses or administration usually offers Better support, more customization, and service guarantees (SLA). For home use, however, free DNS from well-known providers is usually more than enough, as long as you choose wisely based on your needs: speed, security, privacy, or content control.

List of top DNS servers for Windows

On Windows, you can easily use the main public DNS servers on the market. All of the ones you'll see below are: free and easy to set up both in the system itself and at the router level, so that your entire network can use them.

Google Public DNS – 8.8.8.8 and 8.8.4.4

Google offers one of the best-known public DNS services. Its addresses 8.8.8.8 and 8.8.4.4 are very easy to remember and have a massive data center infrastructure distributed globally, which translates into very good speeds and stability.

To use it, you don't need to register or install anything; simply configure those IPs as your preferred and alternate DNS servers. Google guarantees to delete the source IP within a few days. 24-48 horasHowever, it does retain aggregated and anonymized data for a longer period for internal analysis and service improvement.

Cloudflare DNS – 1.1.1.1 and 1.0.0.1

Cloudflare, one of the biggest names in content delivery networks (CDNs), offers a public DNS with addresses as simple as 1.1.1.1 and 1.0.0.1. It is highly rated for its speed and emphasis on privacy, with promises not to sell data and to delete records in less than 24 hours audited by third parties.

It's a particularly interesting option if you play online or if reducing initial ping is important to you, as it has over 200 locations worldwide and supports modern technologies like DNS-over-HTTPS and DNS-over-TLS. It doesn't include an ad blocker by default, but a free account allows you to do so. create rules to filter website categories.

IBM Quad9 – 9.9.9.9 and 149.112.112.112

Quad9 is a project driven by IBM, the Global Cyber ​​Alliance, and other organizations focused on providing a DNS very secure and respectful of privacyIts most well-known IP address is 9.9.9.9, accompanied by the alternative 149.112.112.112, and it includes blacklists with thousands of dangerous domains.

Each request you make is checked against the IBM X-Force intelligence engine and 18 other security databases, allowing you to automatically block websites containing malware, phishing, or fraudulent content before they even load. Quad9 claims not to log users' IP addresses or sell data to third parties.

OpenDNS Home – 208.67.222.222 and 208.67.220.220

Cisco's OpenDNS combines performance with extensive filtering features. The free Home version allows you to create an account and configure your DNS settings. Profiles with parental controls, blocking of certain categories of sites and protection against suspicious domains.

Its main servers for general use are 208.67.222.222 and 208.67.220.220, but it also offers specific addresses like FamilyShield that come pre-configured to block adult content without requiring any additional steps. At the enterprise level, OpenDNS manages hundreds of billions of requests daily and boasts of having blocked millions of malicious domains.

Verisign – 64.6.64.6 and 64.6.65.6

Verisign, known for managing domains like .com and .net, also offers a public DNS. It's not the fastest in the rankings, but it's characterized by its stability, good availability, and a fairly conservative privacy policyIts main IPs are 64.6.64.6 and 64.6.65.6.

This service doesn't include an ad blocker, but it does implement protections against certain types of attacks and vulnerabilities. It's an interesting option if you prioritize a reliable and predictable response over maximum speed.

FreeDNS – 37.235.1.174 and 37.235.1.177

FreeDNS is a free service with servers in Austria, Germany, the United States, and Singapore that offers a simple, registration-free experience. Its most commonly used addresses are: 37.235.1.174 and 37.235.1.177although it also has other nodes spread across several cities.

The main difference is that it doesn't keep activity logs and doesn't require account creation, but in return, it doesn't include filters against malicious websites, bots, or phishing. If you choose FreeDNS, you should strengthen your security. Your security comes with other layers like a good antivirus and common sense. when browsing.

CleanBrowsing – DNS with parental controls

CleanBrowsing is geared towards families and educational centers looking for a Convenient parental controls without installing software on each deviceIt works solely through DNS, so if you configure it on your router, all devices in the house will inherit those filters.

It offers several profiles: a family profile that blocks adult content and forces safe searches; a stricter profile focused solely on security; and a third profile specifically for blocking pornography sites. It's compatible with any operating system, and its configuration on Windows is the same as for any other public DNS server.

AdGuard DNS

AdGuard is known for its ad blockers, and its DNS service is no exception. It allows you to choose between different profiles: one without filters, another that blocks ads and trackers, and one for family protection that adds adult content blocking and safe search.

The most popular IPs are 94.140.14.14 and 94.140.15.15 for the profile with ad and tracker blocking, but it also offers alternative addresses for those who don't want filtering or are looking for strict family mode. It's a very useful option if you want reduce intrusive advertising at the network level without installing extensions in each browser.

Other recommended DNS

In addition to the ones listed above, there are many more public DNS servers you can try on Windows depending on your needs: Level3, WATCH, GreenTeamDNS, SafeDNS, OpenNIC, SmartViper, Dyn, Alternate DNS, Yandex DNS, UncensoredDNS, Hurricane Electric, puntCAT, Neustar, UltraDNS, UltraDNS Family, Norton ConnectSafe, Control D or Public DNS Server List, among others.

Each one has its own focus: some prioritize performance, others content filtering, others censorship resistance or privacy. Ideally, you should test several with measurement tools and stick with the one that gives you the best results. your city, your operator, and your type of use.

Tools to find the fastest DNS on your network

There is no single "perfect DNS" that works best for everyone, everywhere. Distance to servers, your internet service provider, network congestion, and other factors all play a role. That's why it makes sense to use a variety of DNS servers. programs that measure the actual speed of different DNS servers from your own connection and, if you experience latency or slow networks, follow guides to Optimize Windows 11 for slow networks.

Among the most recommended tools are DNS Jumper, DNS Benchmark, NameBench, and the online platform DNSPerf. These utilities perform a battery of tests against dozens of DNS servers and show you the results. response times, stability and average performance so you can compare.

When choosing one of these applications, consider several details: compatibility with your system (Windows, macOS, Linux), ease of use, minimal resource consumption, good documentation, and, if applicable, a reasonable price. make sense for the use you're going to give itMany have free versions that are more than sufficient for a home user.

Useful apps for changing DNS on PC and mobile

Best DNS for Windows

Changing DNS settings in Windows isn't particularly difficult, but sometimes it's more convenient to use programs that automate the process. Instead of wading through menus, these apps allow you to... Select a DNS server from a list, apply the change, and test the speed. with just a couple of clicks.

DNS Jumper, for example, is a portable tool for Windows with a Spanish interface that detects your network adapters, comes with a large collection of pre-configured DNS servers, and can automatically search for them. Which server is the fastest for your specific connection?It requires no installation and you can carry it on a USB drive. It is also recommended. audit the network connection with specialized tools to diagnose more complex problems.

On Android, there are apps like DNS Changer that allow you to modify your connection's DNS settings without root access, improve your protection on public Wi-Fi networks, and test different servers to improve ping or speed. They usually include predefined lists with the main public DNS servers so you don't have to type IP addresses manually.

Other tools like Blokada go a step further and act almost like a lightweight VPN, blocking ads, trackers, and malware at the network level through the combined use of filtered DNS and encrypted tunnels. Nebulo, meanwhile, implements DNS-over-HTTPS and DNS-over-TLS for encapsulate your domain name requests and prevent them from being spied on or manipulated.

How to see which DNS your Windows is currently using

Before changing anything, you might want to know which DNS your computer is currently using. On Windows, it's very simple: just open a command prompt (CMD) and type the command ipconfig / all (one of the commands to diagnose problemsAmong all the data shown, you will see a line "DNS Servers" with one or more IP addresses.

If you see something like 192.168.1.1 or 192.168.0.1, you're probably using the DNS server itself. Router IPwhich in turn will forward the requests to the DNS servers configured by your internet service provider. If you see IP addresses like 8.8.8.8 or 1.1.1.1, it means that someone has already changed the DNS settings on your computer or router.

How to change DNS in Windows 10 and Windows 11

Modifying DNS settings in Windows isn't complicated if you follow the steps carefully. You can do it in several ways: from the settings panel, from the classic Control Panel, or even via the command line using CMD or PowerShell. Let's review the most common methods.

Changing DNS from network settings in Windows 10

In Windows 10, the most visual way is to enter the menu of Settings> Network and InternetYou can access it from the gear icon in the Start menu, from the notification center, or by typing "Network & Internet" in the search bar.

Once inside, you'll see the network status. On the right, there's a link called "Change adapter options." Clicking it will open the standard window for Control Panel Network Connections, where your WiFi, Ethernet, etc. adapters appear.

Right-click on the adapter that provides your internet connection (for example, Ethernet or Wi-Fi) and select "Properties". In the list of items, look for "Internet Protocol Version 4 (TCP / IPv4)"Select it and click on "Properties" again.

In the new window, at the bottom, check the box for «Use the following DNS server addressesEnter the IP addresses of your chosen service in "Preferred DNS Server" and "Alternate DNS Server" (for example, 1.1.1.1 and 1.0.0.1 for Cloudflare). If desired, check "Validate settings on exit," click "OK," and close all windows.

Change DNS in Windows 11

In Windows 11, the process is similar, but with a slight name change. Open "Settings" using the Win + I shortcut and go to Network and InternetFrom there, go to "Advanced network settings", where you will see your adapters and related options.

Within that section, click on "More network adapter options," which will take you back to the classic Network Connections window, just like before. From there, the process is identical: right-click on your Wi-Fi or Ethernet adapter, select "Properties," and double-click on Internet Protocol version 4 (TCP / IPv4), activate the option to use manual DNS and enter the addresses you want to use.

Another quick way is to type "View network connections" in the Windows 11 search bar and jump directly to the same Control Panel window. On machines that frequently switch networks, it can be useful to configure the DNS settings on the network adapter. that applies to all connections made by that interface.

Change DNS with CMD (netsh)

If you're comfortable using the console, the command netsh (one of the best commands for diagnosing problemsThis allows you to modify DNS settings without opening windows. Open Command Prompt as administrator (search for "cmd", right-click, "Run as administrator") and type the following:

netsh interface show interface

This will show you the exact names of your network interfaces (for example, "Ethernet", "Wi-Fi", etc.). To set a primary DNS server in IPv4, you would use a command like:

netsh interface ipv4 set dnsservers «Net_name» static IP_DNS primary

And to add a secondary one:

netsh interface ipv4 add dnsservers «Network_name» IP_DNS index=2

Replace "Network_Name" with the actual name of the adapter and "DNS_IP" with the address of the server you want. When you're finished, it's a good idea to flush the DNS cache with ipconfig / flushdns so that the new addresses can be put into use immediately.

Change DNS with PowerShell

PowerShell offers another very fast way. Open it as administrator (right-click on the Start menu and choose Windows PowerShell (Admin)) and run the following first:

Get-DnsClientServerAddress

This will show you the adapters and DNS servers they use. To change the addresses of a specific interface, for example "Ethernet", you can use:

Set-DNSClientServerAddress «Ethernet» -ServerAddresses («8.8.8.8″,»8.8.4.4»)

Again, replace that with your adapter name and your preferred IP addresses. Then clear the DNS cache with ipconfig /flushdns and you're done. It's a convenient method if you frequently automate configurations or work via scripts.

Change DNS settings on routers, mobile phones, and consoles

In addition to configuring them in Windows, you can change the DNS settings directly on your home router. This allows you to... all local network connections (PC, mobile, tablet, Smart TV, console…) Use those servers without having to touch each device separately.

To do this, open your browser and go to your router's gateway address, which is usually 192.168.0.1, 192.168.1.1, or something similar. Log in with your device's username and password (often "admin/admin" or the credentials indicated on the router's sticker) and look in the menus for a section like "Internet Settings," "WAN," or simply "DNS."

There you can replace the ISP's default DNS addresses with the ones you want to use, whether it's 1.1.1.1 and 1.0.0.1, 8.8.8.8 and 8.8.4.4, or any combination. After saving the changes, the router may restart, and when it comes back on, The entire network will begin using the new DNS servers..

You can also change them on mobile devices: on iOS, go to Settings > Wi-Fi, tap the "i" next to the network, and modify the DNS section to manual by adding servers; on Android, press and hold the Wi-Fi network, choose "Modify network," expand the advanced options, and change the IP settings to "Static" to be able to Edit DNS 1 and DNS 2.

Consoles like PlayStation, Xbox, and Nintendo Switch also allow you to manually enter primary and secondary DNS settings in their advanced network menus. Microsoft, for example, recommends Only change this setting if you know which servers you're going to use. and it really does provide improvements in latency or stability.

Enhanced security and privacy: DNSCrypt and encrypted protocols

If you want to take security a step further, you can use technologies such as DNSCrypt, DNS-over-HTTPS or DNS-over-TLSThese protocols encrypt DNS queries between your computer and the server so that no one in between can spy on or modify the responses.

DNSCrypt, for example, authenticates communications between the DNS client and the resolver and uses strong cryptographic signatures to verify that the response actually comes from the server you selected and hasn't been altered. It's independent of specific companies, and its implementations are usually open source and verifiable.

Clients like dnscrypt-proxy or graphical tools like Simple DNSCrypt on Windows allow you to choose from a list of compatible resolvers, apply local filters (blacklists of ads, trackers, or malware), force the use of TCP, or route traffic through Tor, in addition to monitor in real time which domains are being resolved in your network.

Even so, it's important to understand that an encrypted DNS protocol doesn't replace a full VPN: it only protects domain name requests, but it doesn't hide all your traffic or your public IP address from the websites you visit.

Monitor the result after changing DNS

Once you've changed the DNS settings in Windows or on your router, it's a good idea to spend a few days observing how the connection behaves. Pay attention to whether Pages load faster if resolution errors are reduced., if you notice less lag in games or if any service stops working due to overly aggressive filters.

You can complement that subjective observation with more objective tests: run speed tests, ping different websites, try 4K streaming or heavy downloads. If you see that with a specific DNS you lose performance or experience more errors, don't hesitate to try another option from the list, because Not all servers perform equally well in all areas or with all operators..

Changing your DNS settings in Windows is one of those adjustments that costs little, is reversible, and can give you a tangible improvement in speed, security, and daily convenience, especially if you take advantage of well-configured services with parental controls, malware blocking, or extra privacy protection.

DNS server is not responding in Windows 10: how to fix it
Related article:
DNS server is not responding in Windows 10: how to fix it