How to enable DNS over HTTPS in Windows 11 (step by step)

This tutorial will show you step by step how to enable DNS over HTTPS in Windows 11. DoH improves privacy and security by encrypting your DNS requests.

DNS over HTTPS (DoH) is an internet security protocol that improves privacy and security by encrypting your DNS requests. The benefits of DoH are that encrypting DNS requests helps hide your online activities and ensures that attackers cannot forge or alter DNS traffic.

Choose a free DNS service supported by Windows 11

Currently, the Windows 11 DNS over HTTPS feature only works with a few DNS services.

You can see the list by running the netsh dns show encryption command in a Windows Terminal window (right-click on the start menu button > Windows Terminal).

Show list of supported DNS services in Windows 11

The DNS services supported by Windows 11 are Google DNS, Cloudflare DNS, and Quad9 DNS.

Here's the list of supported IPv4 DNS service addresses:

  • Google DNS primary: 8.8.8.8
  • Google DNS secondary: 8.8.4.4
  • Cloudflare DNS primary: 1.1.1.1
  • Cloudflare DNS secondary: 1.0.0.1
  • Quad9 DNS primary: 9.9.9.9
  • Quad9 DNS secondary: 149.112.112.112

Here's the list of supported IPv6 DNS service addresses:

  • Google DNS primary: 2001:4860:4860::8888
  • Google DNS secondary: 2001:4860:4860::8844
  • Cloudflare DNS primary: 2606:4700:4700::1111
  • Cloudflare DNS secondary: 2606:4700:4700::1001
  • Quad9 DNS primary: 2620:fe::fe
  • Quad9 DNS secondary: 2620:fe::9

You'll need to choose two pairs of these DNS servers to enable DNS-over-HTTPS in Windows 11, primary DNS and secondary DNS for IPv4 and IPv6.


Enable DNS over HTTPS in Windows 11

  1. Right-click on the Windows start menu button.
  2. Click on Settings.
    Open Windows 11 settings
  3. Click on Network & Internet in the left menu.
    Open Windows 11 Network and Internet settings
  4. Click on Wi-Fi or Ethernet (Internet (LAN) cable). This depends on how your PC is connected to the internet.
    Open Windows 11 Internet connection settings
  5. Click on Hardware properties.
    Open Windows 11 internet connection hardware properties
  6. Click on Edit next to DNS server assignment.
    Windows 11 DNS server assignment settings
  7. Select Manual.
    Manual DNS settings
  8. Click on the Ipv4 toggle button to turn it to On.
  9. Enter a primary DNS server address in the Preferred DNS field (e.g., 8.8.8.8 or 1.1.1.1).
  10. Select Encrypted only (DNS over HTTPS) at Preferred DNS encryption.
  11. Enter a secondary DNS server address in the Alternative DNS field (e.g., 8.8.4.4 or 1.0.0.1).
  12. Select Encrypted only (DNS over HTTPS) at Preferred DNS encryption.
    IPv4 DNS settings
  13. Click on the Ipv6 toggle button to turn it to On.
  14. Enter a primary DNS server address in the Preferred DNS field (e.g., 2001:4860:4860::8888 or 2606:4700:4700::1111).
  15. Select Encrypted only (DNS over HTTPS) at Preferred DNS encryption.
  16. Enter a secondary DNS server address in the Alternative DNS field (e.g., 2001:4860:4860::8844 or 2606:4700:4700::1001).
  17. Select Encrypted only (DNS over HTTPS) at Preferred DNS encryption.
    IPv6 DNS settings
  18. Click on Save.

Your DNS requests will be private and secure.

Encrypted DNS