Outcome: You’ll encrypt Android DNS lookups so your ISP can’t easily see which domains you visit.

Who this is for: Android users on Android 9+ who want better privacy without installing a VPN app.

Time required: About 2 minutes.

Quick Answer

Open Settings > Network & Internet > Private DNS, choose Private DNS provider hostname, enter dns.google or one.one.one.one, tap Save, then confirm at dnsleaktest.com.

Want a fast “invisible mode” privacy upgrade on Android? Turn on Private DNS. It’s built in, free, and takes less time than downloading another app.

Prerequisites

  • Android 9 (Pie) or newer
  • A working internet connection
  • A valid DNS provider hostname

Step-by-step: Enable Private DNS on Android

  1. Open the Private DNS setting.
    Go to Settings > Network & Internet > Private DNS. If you don’t see it, search Settings for “Private DNS.”
    Expected result: You should see Off, Automatic, and Private DNS provider hostname.
  2. Enter a private DNS hostname.
    Tap Private DNS provider hostname, then enter one of these:
    – dns.google
    – one.one.one.one
    Tap Save.
    Expected result: Phone reconnects and internet works normally.
  3. Verify the change.
    Open dnsleaktest.com and run the Extended Test.
    Expected result: DNS resolvers shown should match your chosen provider instead of your ISP’s default DNS.

Expected result checks

  • Websites still load normally after saving
  • DNS leak test shows your selected DNS provider
  • No extra app needed; setting applies at system level

Common mistakes

  • Typing a full URL like https://dns.google instead of hostname only
  • Typos in hostname, which can break connectivity
  • Skipping verification and assuming setup worked
  • Thinking Private DNS is the same as full VPN protection

Quick troubleshooting

  • No internet after saving: Recheck hostname spelling or switch to Automatic.
  • Still seeing ISP DNS: Toggle Airplane mode, reconnect, then test again.
  • Issues on office/school Wi-Fi: Some managed networks block strict private DNS; use Automatic on those networks.
  • Slower browsing: Try the other hostname and compare.

Reference links

Related posts

Next-step CTA: After enabling Private DNS, turn on randomized/private Wi-Fi MAC and review app network permissions for an extra privacy layer.