BYTESLIP ← Back
Knowledge Base // Tutorial 09

Set Up Private DNS (DNS-over-TLS) on Android

Difficulty: Medium No apps needed Android 9+

Every time your phone opens a website, it asks a DNS server for the site’s address. Android’s built-in Private DNS setting can send those questions over an encrypted connection (DNS-over-TLS). You can leave it on Automatic, point it at a provider hostname, or turn it off. Follow the steps for your phone below.

Phone showing Private DNS set to a hostname Illustration of an Android phone with Private DNS options and a dns.google hostname, between two lock-shaped network icons. PRIVATE DNS dns.google Off Automatic Hostname
Checklist // Before You Start

What You Need

Heads Up

What Private DNS Does — and Doesn’t

Private DNS helps secure only DNS questions and answers. It can’t protect anything else (such as the rest of your browsing). Google recommends keeping Private DNS turned on (usually Automatic).

Walkthrough // Steps 01–05

Pixel and Most Stock Android Phones

Menu names can vary by phone and Android version.

  1. Step 1: Open Private DNS settings

    Open the Settings app. Tap Network & internet > Private DNS.

    If you can’t find it, use the search box at the top of Settings and type Private DNS.

  2. Step 2: Pick an option

    Choose one:

    • Off — your phone uses the DNS servers from your Wi‑Fi or mobile network (not encrypted by Private DNS).
    • Automatic — Android uses Private DNS when the network supports it. Google recommends this as the usual setting.
    • Private DNS provider hostname — you type a hostname for a DNS-over-TLS provider.

  3. Step 3: Enter a hostname (optional)

    If you chose Private DNS provider hostname, type a hostname only (not an IP address). Publicly documented examples include:

    • dns.google (Google Public DNS)
    • one.one.one.one (Cloudflare)
    • dns.adguard-dns.com (AdGuard DNS)

    These are examples of working hostnames, not a recommendation of any one provider.

  4. Step 4: Save

    Tap Save.

  5. Step 5: Check that it works

    Open a few websites in your browser. If pages load as usual, you’re set.

    If nothing loads, or Settings won’t save the hostname, the name may be typed wrong or the provider may be unreachable. Go back to Private DNS and choose Automatic or Off, then tap Save.

Walkthrough // Steps 01–03

Samsung Galaxy

On Galaxy phones, Private DNS sits under More connection settings.

  1. Step 1: Open More connection settings

    Go to Settings > Connections > More connection settings > Private DNS.

    Or search Settings for Private DNS.

  2. Step 2: Choose and save

    Select Off, Automatic, or Private DNS provider hostname. If you pick a hostname, enter one (for example dns.google, one.one.one.one, or dns.adguard-dns.com), then tap Save.

  3. Step 3: If sites break

    Return to Private DNS, switch to Automatic or Off, and tap Save.

Undo // Back To Normal

If Sites Break

  1. Open Private DNS again (search Settings for it if you need to).
  2. Choose Automatic or Off.
  3. Tap Save.

Some home networks need local device names to resolve. If printers, NAS boxes or other local names stop working, try Off while you’re on that network.

Pro Tip

Hostname, Not IP

← All Tutorials Byteslip Apps