Every time you open your web browser and type a domain name like google.com or pztsecurity.uk, your device relies on the Domain Name System (DNS) to translate that human-readable address into a numerical IP address. By default, your home router and Windows 11 computer use the DNS servers provided by your Internet Service Provider (ISP). Unfortunately, ISP-provided DNS servers are frequently sluggish, prone to tracking your browsing habits, and often lack robust phishing protection.
Switching to an independent, secure public DNS resolver like Cloudflare (1.1.1.1), Google Public DNS (8.8.8.8), or Quad9 (9.9.9.9) is one of the most effective zero-cost upgrades you can make for your connection. In this comprehensive guide, we demonstrate how to change your DNS server on Windows 11 and directly inside your Wi-Fi router for whole-network protection.
Best Public DNS Resolvers Compared
Before updating your network adapter settings, choose the resolver that best matches your speed, security, and privacy priorities:
| Provider | Primary IPv4 | Secondary IPv4 | Key Benefit |
|---|---|---|---|
| Cloudflare | 1.1.1.1 |
1.0.0.1 |
Fastest global query resolution, strict 24-hour log purge policy. |
| Google Public DNS | 8.8.8.8 |
8.8.4.4 |
High redundancy, rapid worldwide routing, exceptional uptime. |
| Quad9 | 9.9.9.9 |
149.112.112.112 |
Non-profit Swiss privacy focus; blocks known malicious/phishing domains automatically. |
Method 1: Change DNS in Windows 11 Settings (Recommended)
Windows 11 makes configuring custom DNS and enabling modern encrypted DNS (DNS-over-HTTPS / DoH) effortless:
- Press Win + I to open the Settings app.
- Navigate to Network & internet in the left sidebar.
- Click on either Wi-Fi (or Ethernet if connected via a physical cable).
- Click on your active connection properties (e.g., your network SSID name).
- Scroll down to the DNS server assignment row and click Edit.
- Switch the dropdown from Automatic (DHCP) to Manual.
- Toggle the IPv4 switch to On.
- Enter your preferred DNS addresses:
- Preferred DNS:
1.1.1.1(or9.9.9.9) - Alternate DNS:
1.0.0.1(or149.112.112.112)
- Preferred DNS:
- Under DNS encryption, select Encrypted only (DNS over HTTPS) to prevent your ISP from intercepting queries.
- Click Save to apply the changes immediately.
Method 2: Change DNS via PowerShell / Command Prompt
If you manage multiple devices or prefer the command line, you can change your DNS in seconds with administrative PowerShell:
# 1. Identify your network adapter alias
Get-NetAdapter | Select-Object Name, Status, InterfaceDescription
# 2. Set Cloudflare DNS on your active Wi-Fi adapter
Set-DnsClientServerAddress -InterfaceAlias "Wi-Fi" -ServerAddresses ("1.1.1.1","1.0.0.1")
# 3. Flush the local resolver cache
Clear-DnsClientCache
Method 3: Configure DNS on Your Home Wi-Fi Router
Configuring DNS on your home router applies secure DNS across all connected gadgets in your house—including smart TVs, IoT cameras, gaming consoles, and mobile phones:
- Open a browser tab and enter your router’s default gateway (typically
192.168.1.1or192.168.0.1). - Log in with your administrator credentials (check the sticker on the back of your router if you have never modified them).
- Look for the WAN, Internet, or DHCP Server configuration tab.
- Locate the DNS Settings fields (often set to “Obtain automatically from ISP”).
- Switch to Manual and enter
1.1.1.1and1.0.0.1(or Quad9:9.9.9.9). - Save and reboot the router.
How to Verify Your New DNS is Working
To confirm that your DNS requests are resolving through your new provider, open Command Prompt (cmd.exe) and type:
nslookup pztsecurity.uk
Check the Server line in the output. It should display one.one.one.one, dns.google, or the specific IP address you configured.
You can also visit Cloudflare’s official verification portal at 1.1.1.1/help to confirm that your DNS queries are securely encrypted with DNS over HTTPS (DoH).