Free protective DNS for individual users in Europe

1. Open Settings, then Network and internet.
2. Select the connection you are using, Wi-Fi or Ethernet.
3. Find DNS server assignment and choose Edit.
4. Switch from Automatic (DHCP) to Manual and turn on IPv4.
5. Enter the first address of your chosen resolver as the preferred DNS, and the second as the alternate.
6. If your connection uses IPv6, turn that on as well and enter both IPv6 addresses.
7. Save, then reconnect to the network.

Windows 11 offers a DNS over HTTPS setting in the same dialog.

1. Open System Settings, then Network.
2. Select the connection you are using and choose Details.
3. Open the DNS tab.
4. Remove the servers listed there, then add the first and second address of your chosen resolver.
5. Choose OK, then Apply.

1. Open Settings, then Wi-Fi.
2. Tap the info button beside the network you are on.
3. Tap Configure DNS and switch from Automatic to Manual.
4. Delete the servers listed, then add both addresses for your chosen resolver.
5. Tap Save.

This applies to that Wi-Fi network only. Mobile data keeps using the carrier's resolver.

Private DNS is the better route on Android. It is DNS over TLS, it takes a hostname rather than an address, and it applies to Wi-Fi and mobile data together.

1. Open Settings, then Network and internet, then Private DNS.
2. Choose Private DNS provider hostname.
3. Enter the DNS over TLS hostname for your chosen resolver, for example protective.joindns4.eu.
4. Save.

To set plain addresses on one Wi-Fi network instead, edit that network, change IP settings from DHCP to Static, and enter the two addresses as DNS 1 and DNS 2.

A browser setting covers what the browser resolves, not the rest of the device.

1. Click the three dots in the top right corner of Chrome and select Settings.
2. Go to Privacy and security in the left sidebar, then click Security.
3. Scroll to Advanced. Under Use secure DNS, turn the switch on, then under Select DNS provider choose DNS4EU Public Service (Protective).

Chrome 144 or newer is needed for DNS4EU to appear in that list.

Firefox takes the DNS over HTTPS address of the resolver you chose above.

1. Open Settings, then Privacy & Security, and scroll to DNS over HTTPS.
2. Choose Max Protection, then Custom as the provider.
3. Enter the DoH address of your variant, for example https://protective.joindns4.eu/dns-query.

Setting it once on the router covers every device on the network, including the ones with no DNS setting of their own.

1. Open the router's administration page. The address and the sign-in details are usually printed on the device.
2. Find the DNS settings, normally under WAN, Internet or DHCP.
3. Replace the addresses supplied by your provider with the first and second address of your chosen resolver.
4. Save, then restart the router.

DNS over HTTPS and DNS over TLS use a hostname rather than an address. Every variant above lists both of its endpoints. Plain DNS is readable by anything between you and the resolver; encrypted DNS is not.

1. Android: Settings, Network and internet, Private DNS, then the DoT hostname.
2. Firefox: Settings, Privacy and Security, DNS over HTTPS, then Custom and the DoH URL.
3. Chrome and Edge: Settings, Privacy and security, Security, Use secure DNS, then Custom and the DoH URL.
4. Windows 11: the DNS over HTTPS option sits in the same Edit dialog as the manual addresses.

A browser's own secure DNS setting overrides the system resolver. If you have set the addresses on the device or the router, either turn the browser setting off or point it at DNS4EU too.

1. Reconnect to the network, or restart the device. Some systems keep the previous resolver until the connection is renewed.
2. Clear the DNS cache. On Windows, run ipconfig /flushdns. On macOS, run sudo dscacheutil -flushcache.
3. Check the browser. Chrome, Edge and Firefox can each use their own secure DNS, which bypasses whatever the device is set to.
4. Check the router. If it hands out its own DNS over DHCP, a device left on Automatic keeps using it.