DNS is responsible for translating website names such as google.com into the IP addresses that computers use to connect to websites. Normally, DNS queries can be sent without encryption, which means other parties on the network may potentially see which domains your device is requesting.
Windows 11 includes support for DNS over HTTPS (DoH), a feature that encrypts DNS requests by sending them through HTTPS. This can improve the privacy of DNS traffic and prevent ordinary network observers from easily reading DNS queries.
You do not need to install a third-party application to enable DNS over HTTPS in Windows 11. The feature is available through the Windows Settings app, provided you use a DNS service that supports DoH.
In this guide, you will learn several ways to configure DNS over HTTPS, verify that your DNS settings are correct, and troubleshoot common problems if encrypted DNS does not work as expected.
Method 1: Enable DNS Over HTTPS From Windows Settings
The easiest way to configure DNS over HTTPS is through the Windows 11 Settings app.
- Press Windows + I to open Settings.
- Click Network & internet.
- Select your active connection.
- For a Wi-Fi connection, click Wi-Fi and then select the connected network.
- For an Ethernet connection, select Ethernet.
- Find DNS server assignment.
- Click Edit.
- Change the setting from Automatic (DHCP) to Manual.
- Turn on IPv4.
- Enter a DNS server that supports DNS over HTTPS.
- For example, you can enter a supported public DNS server such as
1.1.1.1or another provider’s compatible address. - Set the preferred DNS encryption option to Encrypted only (DNS over HTTPS) when available.
- Enter the appropriate alternate DNS server if required.
- Save the settings.
Windows will begin using the configured DNS server according to the encryption setting you selected.
If your connection uses IPv6, you can configure IPv6 DNS in the same window as well.
The exact options displayed can vary depending on the Windows 11 version and network configuration.
Method 2: Configure DNS Over HTTPS for Wi-Fi
You can configure DoH specifically for a Wi-Fi connection without changing unrelated network settings.
- Open Settings with Windows + I.
- Click Network & internet.
- Select Wi-Fi.
- Click the Wi-Fi network you are currently connected to.
- Locate DNS server assignment.
- Click Edit.
- Select Manual.
- Turn on IPv4.
- Enter your preferred DNS addresses.
- Select an encrypted DNS option when Windows provides one.
- Save the configuration.
After saving, disconnect from the Wi-Fi network and reconnect if necessary.
You can then test your internet connection by opening several websites.
If websites load normally, the new DNS configuration is functioning at a basic connectivity level.
If certain websites stop loading, return to the same settings and check the DNS addresses and encryption mode.
Method 3: Configure DNS Over HTTPS for Ethernet
If your Windows 11 PC connects to the internet through an Ethernet cable, the process is similar.
- Press Windows + I.
- Go to Network & internet.
- Click Ethernet.
- Find DNS server assignment.
- Click Edit.
- Change the configuration to Manual.
- Enable IPv4.
- Enter a compatible DNS server.
- Select the encrypted DNS option supported by Windows.
- Click Save.
Your Ethernet connection should continue working while Windows uses the new DNS configuration.
If the connection fails immediately after changing the setting, verify that the DNS address was entered correctly.
You can also temporarily switch the DNS configuration back to Automatic (DHCP) to determine whether the problem is related to the custom DNS settings.
Method 4: Use Control Panel to Change the DNS Server
Some users prefer the traditional Windows network configuration interface. You can still access DNS settings through Control Panel.
- Press Windows + R.
- Type:
ncpa.cpl
- Press Enter.
- Find your active network adapter.
- Right-click it.
- Select Properties.
- Select Internet Protocol Version 4 (TCP/IPv4).
- Click Properties.
- Select Use the following DNS server addresses.
- Enter your preferred DNS addresses.
- Click OK.
- Click Close.
This method changes the DNS server addresses, but the older Control Panel interface does not provide the same modern DNS-over-HTTPS controls available through Windows 11 Settings.
Therefore, if your goal is specifically to configure encrypted DNS, use the Settings application whenever the required DoH options are available.
Control Panel remains useful for troubleshooting or configuring basic DNS addresses.
Method 5: Configure IPv6 DNS Settings
If your network uses IPv6, you may also want to configure the DNS servers associated with the IPv6 connection.
- Open Settings.
- Select Network & internet.
- Open your active Wi-Fi or Ethernet connection.
- Go to DNS server assignment.
- Click Edit.
- Select Manual.
- Enable IPv6.
- Enter compatible IPv6 DNS server addresses.
- Select an available encrypted DNS option.
- Save the settings.
Do not enter IPv4 addresses into the IPv6 DNS fields.
If you do not know whether your network requires IPv6 DNS configuration, you can leave IPv6 on its existing configuration and configure IPv4 first.
Changing one protocol at a time also makes troubleshooting easier.
Method 6: Verify the DNS Configuration
After enabling DNS over HTTPS, it is useful to confirm that Windows is using the DNS server you selected.
You can check the configuration from Command Prompt.
- Press the Windows key.
- Type Command Prompt.
- Right-click Command Prompt.
- Select Run as administrator.
- Enter:
ipconfig /all
- Press Enter.
Look for the network adapter that is currently connected to the internet.
Under that adapter, locate the DNS Servers entry.
You should see the DNS addresses you configured.
You can also use:
nslookup example.com
Replace example.com with a domain you want to test.
Keep in mind that nslookup confirms which DNS resolver is being used, but it does not by itself prove that every DNS query is being transported through HTTPS. The Windows DNS configuration and encryption setting are what determine whether DoH is enabled.
Method 7: Troubleshoot DNS Over HTTPS Problems
If enabling DoH causes connection problems, check the configuration before changing multiple network settings.
First, verify the DNS server address.
A single typing mistake can prevent DNS resolution.
Next, check whether the selected DNS provider supports DNS over HTTPS and whether Windows recognizes it as a compatible encrypted DNS service.
You can also try temporarily changing the encryption setting.
For example:
- Open Settings.
- Go to your active network connection.
- Open DNS server assignment.
- Edit the DNS configuration.
- Check the selected DNS server.
- Review the available encryption options.
- Save the correct configuration.
If websites still fail to load, switch back to Automatic (DHCP) temporarily.
If internet access immediately returns, the custom DNS configuration is likely responsible for the problem.
You can then try another compatible DNS provider.
It is also worth restarting the network connection after changing DNS settings.
Method 8: Reset the DNS Configuration if Necessary
If you experimented with several DNS configurations and your connection is now behaving unexpectedly, return the network adapter to its original configuration.
- Open Settings.
- Click Network & internet.
- Select your active Wi-Fi or Ethernet connection.
- Find DNS server assignment.
- Click Edit.
- Change the configuration back to Automatic (DHCP).
- Save the change.
Windows should then obtain DNS server information from your router or network’s DHCP service.
If DNS problems continue, you can restart the computer and router.
You can also clear the local DNS cache from an elevated Command Prompt:
ipconfig /flushdns
Then test the connection again.
Resetting the configuration is particularly useful when you are troubleshooting whether DoH itself is causing the problem.
Conclusion
DNS over HTTPS provides Windows 11 with a way to encrypt DNS requests between the computer and a compatible DNS resolver. This can improve the privacy of DNS traffic, especially on networks where unencrypted DNS requests could otherwise be observed.
Windows 11 makes configuration relatively straightforward through Settings > Network & internet. You can select a supported DNS server and, where available, choose an encrypted DNS option.
If you experience problems after enabling DoH, verify the DNS addresses first and make sure the selected provider supports the required encryption method. You can also return to Automatic DNS configuration to restore the previous setup.
DNS over HTTPS is only one part of online privacy. It does not make all internet traffic anonymous or encrypted; HTTPS, VPNs, browser privacy settings, and other security measures serve different purposes.
FAQs
1. What is DNS over HTTPS in Windows 11?
DNS over HTTPS, or DoH, encrypts DNS requests by sending them through the HTTPS protocol to a compatible DNS resolver. This makes DNS traffic harder for ordinary network observers to read.
2. Does DNS over HTTPS make my internet connection faster?
Not necessarily. DNS over HTTPS is primarily a privacy and security feature. Performance depends on your internet connection, DNS provider, network conditions, and the distance to the DNS resolver.
3. Can I use any DNS server with DNS over HTTPS?
No. The DNS service must support DNS over HTTPS, and Windows must be able to use the appropriate encrypted DNS configuration. A normal DNS server address alone does not automatically provide DoH.
4. Can I turn off DNS over HTTPS later?
Yes. You can return to your network connection’s DNS server assignment settings and change the DNS configuration or encryption option. You can also return to Automatic (DHCP) if you want your router or network to provide the DNS settings automatically.
Quick Summary
- DNS over HTTPS encrypts DNS requests between Windows and a compatible DNS resolver.
- Open Settings > Network & internet to configure DNS and available encryption options.
- Use a DNS provider that supports DNS over HTTPS.
- Verify the configuration with
ipconfig /alland troubleshoot by checking the DNS settings.