sodcalculator

10 Tech How-To

How to Enable DNS Over HTTPS on Windows 11

Guide 10-30650 · Updated · Step by step

DNS over HTTPS (DoH) encrypts your DNS queries, preventing your internet service provider or anyone on your network from seeing which websites you visit. This guide walks you through enabling DoH for both Wi‑Fi and Ethernet connections on Windows 11, so your browsing stays private and more secure.

What You’ll Need

  • A Windows 11 PC with administrator access
  • An active internet connection (Wi‑Fi or Ethernet)
  • Access to your network adapter settings (built into Windows)

Step-by-Step

  1. Open the Settings app by pressing Win + I on your keyboard.
  2. Go to Network & Internet in the left sidebar.
  3. Choose your connection type: Wi‑Fi or Ethernet.
  4. Click on the connected network (for Wi‑Fi, click the network name; for Ethernet, click the network icon).
  5. Scroll down and click the Edit button next to “DNS server assignment”.
  6. In the dropdown, change it from Automatic (DHCP) to Manual.
  7. Toggle the IPv4 switch to On.
  8. Enter the preferred and alternate DNS server addresses. For example, for Cloudflare use 1.1.1.1 and 1.0.0.1; for Google use 8.8.8.8 and 8.8.4.4.
  9. Under “DNS over HTTPS”, select On (automatic template) from the dropdown. This tells Windows to use the DoH template that matches the selected DNS provider.
  10. Click Save.
  11. Repeat steps 7–10 for IPv6 if your network uses it. You can usually leave IPv6 DNS as automatic if you’re not sure.

Common Mistakes

  • Forgetting to toggle DoH on – Simply entering a DNS server address does not enable DoH; you must also select “On (automatic template)” in the DoH dropdown.
  • Using an unsupported DNS provider – Windows only supports DoH for a list of known providers. If you enter a custom DNS server that doesn’t have a built‑in template, the DoH option may be greyed out.
  • Not saving after changes – If you close Settings without clicking Save, your changes are discarded.
  • Assuming it works for all apps – Some older applications might still use plain DNS, but Windows will use DoH for most system‑level queries.

Tips

  • Choose a DNS provider you trust. Cloudflare (1.1.1.1) and Google (8.8.8.8) are popular and support DoH.
  • If you have both IPv4 and IPv6, set DoH for both to ensure all traffic is encrypted.
  • After enabling DoH, restart your browser or even your PC to make sure the new settings take effect.
  • You can verify DoH is working by visiting a site like 1.1.1.1/help (for Cloudflare) or using the browser’s developer tools to check the DNS query type.

Troubleshooting

DoH option is greyed out – This usually means the DNS server you entered is not in Windows’ built‑in list. Try using a known provider like Cloudflare or Google. Alternatively, you can select “On (manual template)” and enter the DoH URL manually (e.g., https://cloudflare-dns.com/dns-query).

Internet stops working after enabling DoH – Double‑check the DNS server addresses you entered. A typo can break name resolution. If it still fails, switch back to Automatic (DHCP) and then re‑enter the correct addresses.

DoH appears on but doesn’t seem to work – Some networks (like public Wi‑Fi) may block DoH traffic. Also, certain apps or browsers have their own DNS settings that bypass Windows. Test with a fresh browser session or use nslookup in Command Prompt to see which DNS server is being used.

Can’t find the DNS over HTTPS dropdown – Make sure you’ve toggled the IPv4 or IPv6 switch to On. The dropdown only appears after you enable manual DNS.

Frequently Asked Questions

Does DNS over HTTPS slow down my internet?

Usually not. The encryption overhead is minimal, and many DoH providers are very fast. You might even see a slight speed improvement if your ISP’s DNS is slow.

Can I use DoH with any DNS provider?

Windows 11 supports DoH for a list of known providers, but you can also manually enter the DoH URL for any provider that offers it.

Will DoH work on a VPN?

If your VPN routes all traffic through its own DNS, DoH may be handled by the VPN’s servers. In general, DoH works alongside VPNs, but the VPN’s DNS settings may override yours.

Do I need to enable DoH on both IPv4 and IPv6?

It’s recommended if you use IPv6, but not strictly necessary. If you only set IPv4, IPv6 queries may still go unencrypted.

How do I check if DoH is actually working?

You can visit a test page like 1.1.1.1/help (if using Cloudflare) or use browser developer tools to inspect DNS queries. Alternatively, use ipconfig /all in Command Prompt to see the configured DNS servers.

Will DoH hide my browsing history from my ISP?

DoH encrypts your DNS queries, so your ISP cannot see which domain names you resolve. However, they can still see the IP addresses you connect to, so it’s not a complete privacy solution.

Related

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →