Outcome: You’ll turn on encrypted DNS on Android so your ISP can’t easily read your domain lookups.

Who this is for: Android users (Android 9+) who want a quick privacy upgrade without installing extra apps.

Time required: 2 minutes.

Quick Answer

Go to Settings > Network & Internet > Private DNS, choose Private DNS provider hostname, enter dns.google or one.one.one.one, save, then confirm at dnsleaktest.com.

Here’s one small Android setting that gives a real privacy win: Private DNS. It encrypts DNS queries so your network provider can’t trivially inspect plain DNS requests.

Prerequisites

  • Android 9 (Pie) or later
  • Internet connection for setup and testing
  • A valid provider hostname

Step-by-step: Enable Private DNS on Android

  1. Open the Private DNS screen.
    On most phones: Settings > Network & Internet > Private DNS. You can also use Settings search and type “Private DNS.”
    Expected: You see options like Off, Automatic, and Private DNS provider hostname.
  2. Set a trusted provider hostname.
    Select Private DNS provider hostname, then enter one provider:
    – dns.google (Google Public DNS)
    – one.one.one.one (Cloudflare)
    Tap Save.
    Expected: Connection resumes normally after saving.
  3. Verify it’s active.
    Visit dnsleaktest.com and run Extended Test.
    Expected: Resolver results should match your chosen DNS provider instead of your ISP default DNS.

Expected result checks

  • Web browsing still works after enabling the hostname
  • DNS leak test no longer shows ISP DNS servers
  • Setting remains system-wide on your Android device

Common mistakes

  • Entering a full URL (like https://dns.google) instead of hostname only
  • Typos in hostname, causing internet to fail
  • Forgetting to test, so you don’t know if it actually switched
  • Assuming this replaces a VPN entirely (it doesn’t)

Quick troubleshooting

  • No internet after saving: Reopen Private DNS and fix hostname spelling, or switch to Automatic.
  • Still showing ISP DNS: Toggle Airplane mode, reconnect Wi-Fi/cellular, then run test again.
  • Work/school Wi-Fi issues: Some managed networks block strict private DNS; use Automatic while on that network.
  • Feels slower: Switch between Google and Cloudflare and retest.

Reference links

Related posts

Next step CTA: After this, enable your phone’s private/randomized Wi-Fi MAC address and review app network permissions for stronger everyday privacy.