The best DNS server for you depends on what you want blocked. A plain resolver just answers lookups, a security resolver blocks known malware and phishing sites, and a family resolver also blocks adult content, and the address you type in decides which one you get. Ten public resolvers follow, in no particular order, with their addresses.
Every time you type a web address, your device asks a DNS server to turn the name into a number. Your internet provider chooses that server for you unless you change it, and changing it takes a couple of minutes on a router, a phone or a computer.
This list covers public resolvers, the servers you point your own devices at. DNS hosting for a domain you own is a different job with different providers. The ten below are alphabetical and in no particular order, described from each resolver's own page as of Nov 2026, and the table gives the addresses each page lists.
Ten public DNS resolvers and their addresses
| Tool | Type | Good for |
|---|---|---|
| AdGuard DNS | Blocks ads, trackers and malware | 94.140.14.14 and 94.140.15.15 (default filtering) |
| CleanBrowsing | Content filtering for families and schools | Network-level filtering for homes, schools and public Wi-Fi |
| Cloudflare 1.1.1.1 | Plain resolver with filtered tiers | 1.1.1.1 plain; 1.1.1.2 malware; 1.1.1.3 adds adult content |
| Control D | DNS filtering with device apps | One filtering policy across Mac, Windows, Linux, iOS and Android |
| DNS4EU | EU protective resolver | 86.54.11.1 blocks malware and phishing |
| Google Public DNS | Global public resolver | 8.8.8.8 and 8.8.4.4 |
| Mullvad DNS | Encrypted DNS with blocklist variants | 194.242.2.2 plain; 194.242.2.3 ad blocking; 194.242.2.6 family |
| NextDNS | Cloud DNS firewall | Blocking threats, ads and trackers on every network |
| OpenDNS | Resolver with a family filtering set | 208.67.222.222 and 208.67.220.220 (standard) |
| Quad9 | Malware-blocking resolver | 9.9.9.9 and 149.112.112.112 block malware |
What each public resolver filters by default
AdGuard DNS
Best for: Anyone who'd like ads and trackers blocked network-wide, with a non-filtering set (94.140.14.140) and a family set (94.140.14.15) that adds Safe Search.
CleanBrowsing
Best for: Families, schools, businesses and public Wi-Fi operators who want malware and adult content blocked at network level, before it reaches any device.
Cloudflare 1.1.1.1
Best for: People who want one provider with three tiers: no filtering, malware blocking (secondary 1.0.0.2), or malware and adult content (1.0.0.3), plus a free app.
Control D
Best for: Households or teams who want encrypted DNS filtering with native clients on every system under one policy; the page offers a free start.
DNS4EU
Best for: Individuals in Europe who'd like protective DNS built and hosted in the EU, free with no account and nothing to install.
Google Public DNS
Best for: Anyone wanting a free, global alternative to their internet provider's DNS, which is how its own page describes the service.
Mullvad DNS
Best for: Privacy-minded users who want DNS over HTTPS or TLS, with separate hostnames for plain, ad blocking, base, extended, family and all-in variants.
NextDNS
Best for: Parents and power users who want a DNS firewall on all devices and networks, with a supervised mode for kids; the page quotes 132 server locations.
OpenDNS
Best for: Households that want filtering chosen by address, since the setup guide lists a separate FamilyShield pair, 208.67.222.123 and 208.67.220.123.
Quad9
Best for: Security-minded users who want malicious domains blocked with DNSSEC validation, with an unblocked set (9.9.9.10 and 149.112.112.10) kept for experts.
Same provider, different address, different filtering
Here's what the 'fastest DNS' lists miss: with several resolvers, the filtering depends on which address you type, not which company you choose. Quad9's own service page lists 9.9.9.9 and 149.112.112.112 for malware blocking, and a separate unsecured set, 9.9.9.10 and 149.112.112.10, with no blocking at all.
Cloudflare's docs list 1.1.1.1 for plain resolution, 1.1.1.2 for malware blocking and 1.1.1.3 for malware plus adult content. AdGuard's page lists a non-filtering set, 94.140.14.140, beside its default filtering servers. Copy an address from a speed test or a forum post without checking its tier and you could be switching filtering on, or off, by accident.
Want AI doing the heavy lifting in your marketing?
I build the systems that handle the boring 80 percent, so you get your week back. Done properly, with the human kept in.
The addresses here are the ones each resolver's own page lists, as of Nov 2026. When you set one up, copy it from the provider's page rather than from here or anywhere else, in case it changes.
What a resolver change does and doesn't hide
Switching resolver changes who sees your DNS lookups and what gets blocked. It doesn't hide your IP address: the websites you visit still see it. If hiding your IP is the goal, that's a VPN's job, and my look at whether NordVPN is safe is a good place to start.
Encrypted DNS, which some resolvers here offer over HTTPS or TLS, stops other people on the same network reading your lookups as they travel. It's worth switching on where your phone, browser or router supports it.
How to switch DNS server in four steps
- Decide what you want blocked: nothing, malware, or malware plus adult content.
- Open the resolver's own setup page and copy the matching primary and secondary addresses.
- Enter them in your router's DNS settings to cover every device at home, or in one phone or computer's network settings to change only that device.
- Visit a site that should now be blocked, or the resolver's own test page if it has one, to confirm the change has taken.
A family address is a quick first layer for a home with children, but it won't do what an app built for the job does. My guide to the best parental control app covers screen time, schedules and age settings.
Do you make a public DNS resolver? Tool makers can ask to be considered for a featured place on this list.
My plain advice on picking a DNS server
Decide on filtering first and the company second. If you only want lookups answered, use a plain address. If you'd like malware blocked for the whole house, put a security address in your router. If there are children at home, a family address is a quick win, though it's no substitute for talking to them. And don't trust any list that crowns one resolver the fastest for everyone: what's quick depends on where you are and which servers are near you, so try one for a week and see how it feels.
Want your tool on this list? Featured spots and reviews here are paid partnerships. Here's how to partner with me.
Frequently asked questions
What is a public DNS server?
It's a service that turns web addresses into the numbers computers use, run by a company or non-profit rather than your internet provider. You point your router or device at it by typing in its addresses.
Is it safe to change my DNS server?
Yes, it's a settings change you can undo at any time by switching back to automatic. Copy the addresses from the resolver's own page so you know you're using the right ones.
Will a different DNS server make my internet faster?
Sometimes lookups are quicker, but DNS is only the first step in loading a page, so don't expect a big change. Choose on filtering and privacy, then try it and see.
Does changing DNS hide my IP address?
No. It changes who sees your DNS lookups and what gets blocked, but websites still see your IP address. A VPN is the tool for that.
What's the difference between primary and secondary DNS?
The primary is the first address your device asks. The secondary is a backup it uses if the first doesn't answer, so enter both.
Can I block adult content with DNS?
Yes. Several resolvers here list a family address that blocks adult content as well as malware. Set it on your router to cover every device on your home network.
