Technology newsroom
How to Set Up Encrypted DNS to Conceal Web History from Your Internet Provider
Learn how to prevent your Internet Service Provider (ISP) from tracking your website visit history by configuring Encrypted DNS (DNS-over-HTTPS) on Windows to enhance your web browsing privacy and security.
Many people believe that seeing a padlock icon (HTTPS) on a website means their web browsing is private and secure. However, in reality, your Internet Service Provider (ISP) can still see a list of every website you visit. This article from SyncTech Solution will explain why and guide you through configuring Encrypted DNS on your Windows computer to truly enhance your web browsing privacy.
### Understand Before You Fix
Every time you type a website name, such as `sync-tech.com`, into your browser, your computer sends a request to a server called DNS (Domain Name System) to ask, “What is the IP address for this website?” It's similar to looking up a friend's phone number in a phone book.
The problem is that these standard DNS requests are not encrypted, allowing your Internet Service Provider (ISP) to see and record a list of all websites you attempt to visit. Even if the content you exchange with the destination website is encrypted with HTTPS, the ISP will still know where you went, but not what you discussed.
Encrypted DNS, or DNS-over-HTTPS (DoH), is a technology that addresses this problem. It encapsulates your DNS requests within an encrypted HTTPS channel, preventing your ISP from seeing which websites you are trying to access. This effectively closes a vulnerability and significantly enhances your internet privacy.
### Before You Begin
This configuration carries low risk, but preparation will help you easily revert changes if issues arise.
1. **Note Current Settings**: Most computers are configured to obtain DNS server addresses automatically. This is the setting we will change. There’s no need to write down anything specific, just remember to select this option again if you wish to revert.
2. **Choose an Encrypted DNS Provider**: Several reliable public providers are available. You can choose any of them. Popular examples include:
* **Cloudflare**: `1.1.1.1` and `1.0.0.1` (focus on speed and privacy)
* **Google**: `8.8.8.8` and `8.8.4.4`
* **Quad9**: `9.9.9.9` and `149.112.112.112` (focus on blocking malicious websites)
In this guide, we will use Cloudflare as an example, but you can use addresses from other providers as well.
### How to Proceed Safely
The following steps are for Windows 11, which may have slightly different menu appearances than Windows 10, but the principles are similar.
**Step 1: Open Network Settings Window**
* **WHAT**: Access the Network & Internet settings section.
* **WHERE/HOW**: Click the Start button > Select Settings (gear icon) > From the left-hand menu, select "Network & internet".
* **WHY**: This is the central hub for managing all internet connections on your device, including Wi-Fi and wired LAN.
* **EXPECTED RESULT**: You will see your current connection status, such as the Wi-Fi network name you are connected to, or the status of Ethernet.
**Step 2: Select Your Active Connection**
* **WHAT**: Go to the Properties page for your active connection.
* **WHERE/HOW**: If you are using Wi-Fi, click "Wi-Fi". If using a wired LAN, click "Ethernet". Then, select "Hardware properties" or "Properties" for that specific connection.
* **WHY**: To modify the in-depth settings for this specific connection.
* **EXPECTED RESULT**: The screen will display technical information about the connection, such as its IP address, MAC address, and the DNS settings we intend to modify.
**Step 3: Modify DNS Server Settings**
* **WHAT**: Change the DNS setting mode from automatic to manual.
* **WHERE/HOW**: Look for the "DNS server assignment" section and click the "Edit" button. A new window will appear. Change the setting from "Automatic (DHCP)" to "Manual".
* **WHY**: Selecting Manual allows us to manually enter the desired DNS Server addresses.
* **EXPECTED RESULT**: Input fields for "Preferred DNS" and "Alternate DNS" IP addresses will appear.
**Step 4: Enter DNS Addresses and Enable Encryption**
* **WHAT**: Enter the DNS addresses of your chosen provider and, importantly, enable DNS-over-HTTPS.
* **WHERE/HOW**:
1. Toggle the IPv4 switch to On.
2. In the "Preferred DNS" field, type `1.1.1.1`.
3. In the "Alternate DNS" field, type `1.0.0.1`.
4. In the dropdown menu below (which may be named Preferred DNS encryption), select **"Encrypted only (DNS over HTTPS)"**.
* **WHY**: This step instructs the computer to use Cloudflare's DNS and mandates that all communication must always be encrypted. If encryption fails, data will not be sent, ensuring maximum privacy.
* **EXPECTED RESULT**: Once all information is entered, click the "Save" button to save the settings.
**Step 5: Restart Your Browser**
* **WHAT**: Close and reopen all web browser applications.
* **WHERE/HOW**: Close all open browser windows, then open them again.
* **WHY**: To ensure that the browser clears any old DNS information that might be lingering in its memory (cache) and starts using the new settings we just configured.
* **EXPECTED RESULT**: You should be able to access the internet as usual.
### Verify the Results
After completing the setup, you can easily verify whether your connection is indeed using Encrypted DNS with the following methods:
1. **Visit a Test Website**: Open your browser and go to `https://1.1.1.1/help` (for those using Cloudflare) or a general test website like `https://www.dnsleaktest.com`.
2. **Check the Results**: The website will display your connection information. If the setup is successful, you will see a confirmation message like "Connected to 1.1.1.1" and "Using DNS over HTTPS (DoH)" showing Yes or True.
### If It Doesn't Work
If you cannot access the internet after configuring the settings, try the following:
* **Check for Typos**: Go back to Step 4 and ensure that you have typed every digit of the IP address correctly, without any letters or spaces mixed in.
* **Revert to Original Settings**: Go back to Step 3 and change the setting from "Manual" back to "Automatic (DHCP)". Then click Save. Your internet connection should return to normal.
* **For Corporate Users**: If you are using a company computer, the network may have a policy that requires the use of corporate DNS only. If you encounter issues, you should contact your IT department for advice and should not attempt to modify settings yourself.
### Conclusion
Switching to Encrypted DNS is one of the easiest and most effective fundamental steps to enhance online privacy. It helps prevent your Internet Service Provider from tracking your website browsing habits, which is sensitive information that can be used to build a profile about you. Investing a few minutes in this setup is therefore a worthwhile investment in your privacy.