vpnMentor was established in 2014 to review VPN services and cover privacy-related stories. Today, our team of hundreds of cybersecurity researchers, writers, and editors continues to help readers fight for their online freedom in partnership with Kape Technologies PLC, which also owns the following products: Holiday.com, ExpressVPN, CyberGhost, and Private Internet Access which may be ranked and reviewed on this website. The reviews published on vpnMentor are believed to be accurate as of the date of each article, and written according to our strict reviewing standards that prioritize professional and honest examination of the reviewer, taking into account the technical capabilities and qualities of the product together with its commercial value for users. The rankings and reviews we publish may also take into consideration the common ownership mentioned above, and affiliate commissions we earn for purchases through links on our website. We do not review all VPN providers and information is believed to be accurate as of the date of each article.
Our top free DNS picks include popular names like Google Public DNS and Cloudflare, which are undoubtedly the fastest free DNS servers today. I also included step-by-step instructions for installing DNS servers on desktop and mobile devices to help you get started.
We also listed lesser-known but reliable DNS servers, such as Quad9 and CleanBrowsing, which offer granular filtering and malware protection. Each DNS provider has distinct strengths. Whether you want to boost internet speed, access content securely, or create a safer online environment for family and business activities, there’s something for you on this list.
See 5 More Great DNS Servers That Work
A VPN app lets you change your DNS settings with a single click. Just install the app and click Connect. It automatically protects your privacy by routing all your internet traffic through the VPN’s secure servers. No manual settings adjustments or complex configurations are required.
Additionally, by encrypting all your traffic, VPNs protect your DNS queries and your entire internet connection. While some DNS providers offer encrypted DNS options, they don’t hide your IP address or protect other internet traffic, leaving parts of your browsing activity exposed. Most DNS providers also keep logs of the websites you visit, timestamps, and your IP address. A reputable VPN adheres to a strict no-logs policy.
Editor’s Note: Transparency is one of our core values at vpnMentor, so you should know we are in the same ownership group as ExpressVPN. However, this does not affect our review process.
IPv6:
Cloudflare is consistently one of the fastest DNS services available, with a latency of 14.8ms according to DNSperf. It has data centers around the world, so it can provide fast and reliable DNS resolution regardless of your location. While testing it for gaming, our connection was stable, with no lag spikes. It also offers free DDoS mitigation to protect game servers from disruptive attacks.
I also like that it’s more private than other DNS services as it doesn’t log IP addresses, doesn’t use DNS query data for advertising purposes, and provides regular transparency reports. The data it does save gets deleted within 24 hours. Cloudflare also uses DNS-over-HTTPS (DoH) and DNS-over-TLS (DoT), which encrypt DNS queries to protect them from eavesdropping and tampering.
You can easily configure Cloudflare DNS in your device’s network settings. In addition to its primary 1.1.1.2 DNS address, it offers 1.1.1.2 for blocking known malware domains, as well as 1.1.1.3 for blocking both malware and adult content. I was also happy to see Cloudflare has recently added a feature for blocking specific domains, which was missing the last time we tested it.
Its dashboard offers a user-friendly interface for managing DNS settings, security features, and performance optimization. You can configure DNS records, set up SSL/TLS certificates, and protect against threats with Web Application Firewall (WAF) and DDoS protection. The dashboard also provides real-time analytics, performance reports, and customizable caching rules to optimize website speed.
IPv6:
Google Public DNS is one of the most widely used DNS services globally. Thanks to Google’s extensive network infrastructure, it provides low latency and fast resolution times. In tests, we had the best results in regions where Google has data centers. It fully supports IPv4 and IPv6, so you can use it on devices that use either protocol.
Google Public DNS pages include detailed setup instructions for any situation
It supports DNS-over-HTTPS (DoH) and DNS-over-TLS (DoT) for added security, preventing third parties from intercepting or modifying your DNS queries. This is great for regions with high levels of online surveillance, as it enables safer and more private browsing. You also get built-in protection against DNS attacks, including DNS spoofing and cache poisoning.
Query logs are typically kept for 48 hours, after which they are deleted. Google Public DNS does not track user queries for advertising purposes. It does save some long-term data used to improve the overall performance of the service, which I found a bit concerning. Luckily, this data is fully anonymized and can’t be linked back to users.
Its simplicity and commitment to fast and secure DNS resolution make it a solid choice for everyday use. However, unlike some competitors, it doesn’t offer specialized filtering or custom filtering controls, which may be a drawback if you need features like malware blocking or parental controls.
IPv6
Designed for fast DNS resolution, Gcore DNS delivers quick response times. In our tests, websites loaded quickly, with consistent performance even during peak usage times or network disruptions. This is great for enterprises seeking reliable and fast DNS solutions, particularly for e-commerce, streaming, and gaming applications.
Gcore’s built-in security mechanisms protect you against common DNS threats, including DNS spoofing and cache poisoning. It also includes protection against Distributed Denial of Service (DDoS) attacks, which can overwhelm traditional DNS servers. This is crucial for gamers, businesses, and users with high traffic demands.
You can configure various settings according to your needs, depending on your specific performance and security requirements. Gcore DNS supports Domain Name System Security Extensions (DNSSEC), adding an extra layer of verification for DNS queries and responses and preventing man-in-the-middle attacks.
DNS query logs are anonymized and stored in a Tier IV data center in Luxembourg under EU privacy regulations. However, compared to other DNS providers like Cloudflare, Gcore doesn’t offer as much clarity or detailed information about its data handling policies. Additionally, Gcore is more targeted at enterprises, so its DNS services may lack some user-friendly features that appeal to everyday consumers.
IPv6:
Quad9 is committed to user privacy and doesn’t log personal data or track user queries, so you can browse the internet without worrying about your data being collected or sold. It uses DNSSEC to verify the authenticity of DNS responses and protect against DNS spoofing and man-in-the-middle attacks.
The service also blocks access to known malicious websites to protect from phishing, malware, and other online threats. It uses threat intelligence feeds from multiple sources to maintain an updated database of harmful sites. However, I found its filters a bit too strong, as it occasionally blocked legitimate sites and flagged them for potential threats.
The recommended configuration (9.9.9.9 for IPv4) includes malware blocking and DNSSEC validation for secure browsing. For enhanced precision, you can use a secured version with ECS (9.9.9.11) that supports additional features for optimized routing. Finally, an unsecured option (9.9.9.10) is available without filtering or DNSSEC, meant for advanced users who need a fully unfiltered experience.
In our tests, Quad9 had quick response times, with a latency of only 25.69ms. However, its speed varies by region, and it’s visibly slower in certain areas compared to Cloudflare.
IPv6:
You can use OpenDNS content filtering options to block specific categories of websites. For example, parents can set restrictions based on categories or specific domains for a safer browsing experience for their kids. OpenDNS also provides protection against phishing and malware by blocking access to malicious websites.
OpenDNS provides enterprise-level solutions with advanced security features and network monitoring capabilities. Businesses can use these tools to safeguard their networks and enhance productivity. It also supports DNSSEC to help prevent DNS spoofing and ensure you’re connecting to legitimate websites.
I like how easy it is to configure settings, manage filtering, and access usage statistics in the OpenDNS web dashboard. However, to do this, you need to create an account, which can be a drawback if you don’t want to share personal information. Additionally, the free version of OpenDNS displays ads, which can be annoying, but a good ad-blocker should take care of this.
IPv6:
AdGuard DNS is designed to block ads at the DNS level, preventing advertisements from being loaded on websites and in apps. I noticed that it improves page loading speeds on ad-heavy websites. It also actively blocks tracking scripts and domains, protecting your privacy by preventing advertisers and third parties from collecting data on your behavior across the web.
You can customize filtering settings according to your preferences and choose between different filtering modes, such as blocking ads and trackers or only trackers. It also provides protection against malicious websites and phishing attempts by blocking access to known harmful domains.
The service doesn’t log any personal data or DNS queries, so you can browse the web without worrying about your information being tracked or sold. The only drawback is that it’s very aggressive in blocking ads and trackers, which can sometimes lead to functionality issues on websites that rely on these services to operate correctly.
IPv6:
Family Filter: 2a0d:2a00:1::1 and 2a0d:2a00:2::1
Adult Filter: 2a0d:2a00:1::2 and 2a0d:2a00:2::2
Security Filter: 2a0d:2a00:1::3 and 2a0d:2a00:2::3
CleanBrowsing’s Family Filter blocks adult content and allows safe access to educational and family-friendly websites. If you have teens or older family members, you can use the Adult Filter to only block adult content, but allow access to non-family-friendly content. You can also use the Security Filter to block phishing and malware websites while allowing all content types.
In addition to choosing categories, CleanBrowsing’s dashboard offers features like real-time filtering updates, activity logs, and whitelisting or blocklisting specific domains. The dashboard is easy to use even for non-technical users, and you can access it through CleanBrowsing’s main website.
Like most other DNS services on this list, CleanBrowsing doesn’t log user data or DNS queries, and supports DNSSEC to protect against spoofing attacks. It also had decent speeds in our tests. However, due to its limited server network, you may experience slow DNS resolution if you’re in a region farther from CleanBrowsing servers.
IPv6:
With Control D, you can block specific categories of content, including ads, adult content, gambling, social media, and more. It also includes features to block access to known malicious sites and protect you against phishing and malware attacks.
Control D supports DNS-over-HTTPS, which encrypts DNS queries to prevent eavesdropping and man-in-the-middle attacks. It doesn’t log personal data or DNS queries and provides low-latency DNS resolution — only 19.54ms in our tests.
You can use its web dashboard to manage filtering settings, monitor traffic, and view usage statistics. However, if you’re new to DNS services, you may find Control D’s complex configuration options overwhelming. Additionally, its free version has limited functionality, and you must pay for more advanced filtering and customization options.
Comodo Secure DNS includes built-in security features that detect and block harmful domains, protecting you from malware, phishing, and even some types of spyware. By analyzing patterns and traffic behavior, it aims to detect phishing attacks before they reach you and reduce the risk of your personal information or sensitive data falling into the wrong hands.
If you need a general-purpose DNS provider that enhances security without requiring extensive configuration, Comodo is a decent choice. However, if you require more advanced filtering capabilities or parental controls, another DNS provider like AdGuard or CleanBrowsing may be a better option.
CDNetworks provides DNS services as part of its CDN suite, which helps businesses route traffic efficiently and reduce query times. It aligns with international data privacy standards, including GDPR, making it suitable for businesses with strict compliance requirements.
Its web dashboard includes detailed analytics and reporting features that provide insights into website performance and traffic patterns. CDNetworks focuses on speed and reliability, but doesn’t have many customization options for individual users — you can’t turn on a malware filter like with some other options on this list.
Here’s a table to help you quickly compare the speed and available features of the best DNS servers.
Editor’s Note: Transparency is one of our core values at vpnMentor, so you should know we are in the same ownership group as ExpressVPN. However, this does not affect our review process.
If this looks complicated, I recommend using a VPN instead, as you only need to install the app for your device and click Connect to change your DNS address.
If the top 10 free DNS options above don’t meet your needs, here are more alternatives, each with unique benefits:
Editor’s Note: We value our relationship with our readers, and we strive to earn your trust through transparency and integrity. We are in the same ownership group as some of the industry-leading products reviewed on this site: Intego, Cyberghost, ExpressVPN, and Private Internet Access. However, this does not affect our review process, as we adhere to a strict testing methodology.
Free public DNS servers are generally safe. Reputable options like Google DNS or Cloudflare offer privacy protections, DNS-over-HTTPS, and fast response times. However, it’s important to follow the best practices for using public DNS safely, since not all DNS providers have the same level of commitment to privacy and security.
Paid DNS servers typically provide better uptime and advanced features. Additionally, paid DNS services offer enhanced security, including malware filtering, ad blocking, lower latency, and DNS failover for reliability. However, several free public DNS servers are also fast and secure enough for most users.
To check which DNS server you’re currently using, you can use either your device settings or a quick command. You can find the network settings on your device and check the DNS address there. On Windows, you can open the Command Prompt, type ipconfig /all, and look for “DNS Servers” in the output. Alternatively, you can visit online tools like “dnsleaktest.com” or “whoismydns.com,” which automatically identify your DNS server.
For Free Fire, use a DNS server optimized for gaming, like Cloudflare (1.1.1.1) or Google DNS (8.8.8.8). Cloudflare often provides lower latency, reducing in-game lag. Compare DNS servers to help you determine the best one for your specific configuration and location.
Yes, you can set different DNS servers on each device by adjusting device-specific DNS settings. Some routers also allow setting a default DNS for all devices, but device-level settings can override this if needed. Here’s how to change your DNS on any device.
It’s recommended to check for updates every few months or whenever you notice issues like slow browsing or security concerns. If your provider announces an important update or change to their service, consider updating immediately to benefit from the latest enhancements. The best DNS providers often update their systems with security patches, new features, and performance improvements.
Public DNS servers can often be faster and more private than ISP DNS servers. ISP DNS servers may be slower due to higher traffic or filtering, and they might collect data for marketing purposes. A trusted public DNS can improve speed and privacy.
To find the location of a DNS server, you can use tools like DNSlookup or IP Location to check your DNS location after changing the DNS settings on your device. Another option is using a traceroute command on your computer to track the path to the DNS server, which can provide hints about its physical location. Services like GeoIP databases can also give you information on the IP’s registered location.
The best DNS service ultimately depends on your specific requirements — whether you want to minimize lag for gaming, access content securely, or establish safe browsing boundaries for family members. I recommend experimenting with a few options to find the optimal balance between speed, security, and user control.
Your data is exposed to the websites you visit!
Your IP Address:
Your Location:
Your Internet Provider:
The information above can be used to track you, target you for ads, and monitor what you do online.
VPNs can help you hide this information from websites so that you are protected at all times. We recommend ExpressVPN — the #1 VPN out of over 350 providers we’ve tested. It has military-grade encryption and privacy features that will ensure your digital security, plus — it’s currently offering 61% off.
Visit ExpressVPN
Andjela is a technology and cybersecurity writer for vpnMentor, dedicated to helping readers protect their privacy online with detailed VPN reviews, testing all features, and providing the facts.
Please, comment on how to improve this article. Your feedback matters!
Sorry, links are not allowed in this field!
Name should contain at least 3 letters
The field content should not exceed 80 letters
Sorry, links are not allowed in this field!
Please enter a valid email address
We check all comments within 48 hours to ensure they’re real and not offensive. Feel free to share this article in the meantime.
Share it with your friends:
About The Author
More Stories
Local Infrastructure, Lower Costs: How Peering Is Moving the Needle on Internet Affordability
On Global Accessibility Awareness Day, An Internet for Everyone Must Include Everyone
An Open Fiber Data Standard to Make the Internet for Everyone