Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problemsDNS over HTTPS (DoH) encrypts DNS queries so your ISP, Wi‑Fi operator, and other middleboxes can’t read the hostnames you’re looking up. On Windows 11, you can enable DoH per network adapter so Windows itself resolves names using an HTTPS-based DNS provider.
This guide walks you through turning on DoH in Windows 11 (including exact UI labels and ready-to-paste endpoints), then covers browser-level DoH options, verification, and troubleshooting when Windows doesn’t apply your setting.
As an Amazon Associate I earn from qualifying purchases.
What DNS over HTTPS (DoH) Does in Windows 11
Normally, DNS uses plaintext (typically over port 53), which means DNS requests can be observed or tampered with. With DoH, Windows sends DNS queries to a provider’s HTTPS endpoint (usually over TCP/443), so the DNS content is encrypted in transit.
Free tools Windows power users keep installed
One-click scans. No signup required.
Practically, DoH mainly improves privacy and can reduce some on-path DNS interference. It doesn’t replace DNS security features like DNSSEC, and it won’t magically fix a broken upstream connection.
#1 Best Overall
- 14" diagonal, 1366x768 resolution, HD BrightView LED, Glossy NON-TOUCH Display
Prerequisites and What You Should Know First
- Windows 11 build: The built-in DoH setting is available on modern Windows 11 versions. If you don’t see the DoH toggle, ensure your PC is updated (for example, Windows 11 22H2/23H2 and later commonly include the relevant UI).
- Admin rights: You usually don’t need admin rights to change your own network settings, but some corporate/managed devices may restrict changes.
- Provider endpoint: DoH needs an HTTPS URL (commonly a
/dns-querypath). Use the exact format below or Windows may ignore it. - Adapter-specific behavior: Windows settings apply to the currently edited adapter/network profile. Wi‑Fi and Ethernet can behave differently.
Method 1: Turn On DoH Using Windows 11 Settings (Built-In)
Windows 11 includes an option to use DNS over HTTPS for the network you’re connected to. The goal is to set a DoH server for the adapter, not just custom DNS IPs.
Step-by-step for Wi‑Fi
- Open Settings (press Win + I).
- Go to Network & internet > Wi‑Fi.
- Select your connected network under Wi‑Fi (it often appears as the SSID name).
- Open Hardware properties.
- Find DNS server assignment. Click Edit.
- Choose Manual and switch to IPv4 (and then repeat for IPv6 if you want it for both).
- Enter the DNS server name or IP fields if prompted (some builds require DNS server entries even when DoH is enabled).
- Toggle on Use DNS over HTTPS.
- Paste the DoH provider URL into DNS over HTTPS server (or similarly labeled field).
- Click Save.
- Toggle Wi‑Fi off/on or run
ipconfig /flushdnsto speed up adoption of the new resolver.
Step-by-step for Ethernet
- Open Settings > Network & internet > Ethernet.
- Click the connected adapter entry (the interface name).
- Open Hardware properties.
- Under DNS server assignment, click Edit.
- Set Manual, then enable Use DNS over HTTPS.
- Paste your DoH URL into the DNS over HTTPS server field.
- Repeat for IPv6 if offered and desired.
- Click Save, then renew connectivity (briefly disable/re-enable Ethernet or run
ipconfig /flushdns).
Choose a DoH provider (endpoints you can copy)
Windows expects an HTTPS endpoint, typically one of these examples. Pick one and paste the full URL exactly (including https:// and /dns-query).
- Cloudflare:
https://cloudflare-dns.com/dns-query - Google:
https://dns.google/dns-query - Quad9:
https://dns.quad9.net/dns-query - CleanBrowsing:
https://doh.cleanbrowsing.org/doh/family-filtered
How to handle IPv6 vs IPv4
Some networks (or providers) behave differently depending on whether Windows uses IPv6 resolvers. If your LAN has IPv6 enabled, configuring DoH for both IPv4 and IPv6 may prevent resolution failures for certain domains.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →If you only configure IPv4, Windows will still use DoH for IPv4 DNS lookups; IPv6 queries may fall back to your IPv6 DNS settings (or system defaults). For the cleanest experience, configure DoH for both where Windows asks.
Method 2: Enable DoH in Your Browser (Works Without Windows DoH)
If Windows doesn’t show the DoH option (or you want to control DNS per browser), most major browsers can use DoH on their own. This won’t change system-wide DNS for apps, but it’s effective for browsing.
Microsoft Edge
- Open Edge and go to Settings.
- Go to Privacy, search, and services.
- Scroll to Security.
- Find Use secure DNS.
- Select Choose a service provider or On.
- Choose a provider (Cloudflare, Google, etc.) or enter a custom DoH endpoint if the UI allows it.
Edge’s secure DNS is DNS-over-HTTPS based. It affects Edge’s DNS lookups, not necessarily Windows services or other apps.
Google Chrome
- Open Chrome and go to Settings.
- Go to Privacy and security.
- Select Security.
- Under Use secure DNS, switch it On.
- Choose a provider or select Custom if available.
- Paste the DoH server URL or choose a built-in provider, then restart the browser if prompted.
Firefox
Firefox uses DoH via DNS settings and/or a specific preference. Your exact UI labels vary by version, but the workflow is consistent.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
- Open Settings > General.
- Scroll to Network Settings.
- Click Settings… next to Connection settings.
- Check Enable DNS over HTTPS.
- Select the provider or enter a custom DoH endpoint.
- Click OK / Apply and refresh the browser.
Provider Reference: Common DoH Endpoints (Windows and Browsers)
Here are widely used DoH endpoints that match the typical HTTPS DNS query format. Copy exactly, including path segments.
| Provider | DoH endpoint URL | Typical use |
|---|---|---|
| Cloudflare | https://cloudflare-dns.com/dns-query |
General privacy and speed |
| Google Public DNS | https://dns.google/dns-query |
Consistency and broad compatibility |
| Quad9 | https://dns.quad9.net/dns-query |
Security-focused filtering options |
| CleanBrowsing (Family Filtered) | https://doh.cleanbrowsing.org/doh/family-filtered |
Filtering preset endpoint |
If your Windows UI asks for a different format (some builds accept only a base domain), verify the field description. When in doubt, paste the full URL shown above.
Rank #2
- 256 GB SSD of storage.
- Multitasking is easy with 16GB of RAM
- Equipped with a blazing fast Core i5 2.00 GHz processor.
How to Verify DoH Is Actually Working
Turning on DoH doesn’t guarantee you’re using it the way you think. Verify using both behavior and traffic.
Quick checks using the DoH endpoint behavior
- Flush DNS cache: run
ipconfig /flushdns, then try browsing to a few domains. - Re-check adapter settings: return to the same Hardware properties screen and confirm Use DNS over HTTPS remains enabled and the URL is still present.
- Try a test domain: use a few distinct domains (for example, a mix of popular sites and less common hostnames) to force new resolutions.
Network-level verification (advanced)
The most reliable confirmation is to watch connections. DoH runs over HTTPS (usually to the DoH provider on port 443), not to port 53.
- Install a packet capture tool like Wireshark (if you already have it, use your normal workflow).
- Start capture while loading websites.
- Filter for TLS connections to your chosen DoH provider host (for example,
cloudflare-dns.com). - Confirm you see outbound HTTPS traffic to that host on 443 instead of frequent DNS over 53.
Troubleshooting: DoH Not Working or Reverts After Restart
If DoH doesn’t take effect, you’re usually dealing with the wrong adapter, an endpoint formatting issue, or a policy/VPN/security product overriding DNS settings.
Check you’re editing the right adapter
Many failures happen because you changed DNS for Wi‑Fi but you’re actually on a different interface (Ethernet, a hotspot, or a secondary Wi‑Fi adapter). Verify the active connection first, then re-check its Hardware properties.
Confirm the endpoint URL format
Windows is picky. Make sure you paste a full HTTPS URL such as:
https://cloudflare-dns.com/dns-queryhttps://dns.google/dns-query
If you omit https:// or use an incomplete path, Windows may silently fail or revert to defaults.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Deal with enterprise policies and managed DNS
On work-managed PCs, Group Policy or MDM can enforce DNS settings. Symptoms include: the toggle won’t stay enabled, values revert after reboot, or the DoH option is missing entirely.
- Check whether Windows shows any managed indicator under network settings.
- Try to test as a local user (if allowed) to see if policy enforcement is user-scoped.
IPv6-only networks and partial connectivity
Some environments have IPv6 enabled but only partially supported. If DoH is configured only for IPv4 (or the IPv6 path fails), you might see timeouts on certain domains.
Fix: configure DoH for both IPv4 and IPv6 (if Windows offers that split), then test with ipconfig /flushdns and reload a few sites.
Rank #3
- WINDOWS 11 | STABLE PERFORMANCE: Powered by Intel Celeron N4020 processor and Windows 11 system, this laptop delivers stable performance for everyday computing tasks. It supports web browsing, online learning, document editing, email communication, and basic office work with optimized power efficiency, providing a practical and reliable experience for essential daily use for daily use.
- 15.6” FHD IPS DISPLAY: Features a 15.6-inch Full HD IPS display with narrow bezels, offering wider viewing angles and clearer image details compared to standard panels. The improved screen-to-body ratio enhances visual experience for study, reading, document work, and video playback, making it suitable for both productivity and entertainment use.
- 4GB DDR4 + 128GB eMMC STORAGE: Equipped with 4GB DDR4 memory and 128GB eMMC storage for everyday basics such as browsing, documents, email, and online learning platforms. The built-in TF card slot supports storage expansion up to 1TB, giving you more flexibility for files, photos, videos, and daily documents. TF card not included.
- CONNECTIVITY & PORTS: Includes 1× TF card slot, 2× USB 3.2 Gen1 ports, and 2× full-featured Type-C ports (USB 3.2 Gen1). The Type-C ports support data transfer, charging, and video output, enabling flexible connection with external devices such as monitors, storage, and peripherals for daily work and study use.
- LIGHTWEIGHT DESIGN | ONLINE COMMUNICATION: Designed with a slim, portable profile, this laptop is easy to carry for school, commuting, and travel. A built-in 1MP front camera supports online classes, video meetings, remote communication, and everyday conferencing. The 3300mAh battery works with the low-power system design to support practical daily use, while thermal optimization helps maintain quieter operation during extended tasks.
Conflicts with VPNs, security suites, and filtering tools
DNS security tools sometimes intercept DNS calls or enforce their own resolver. When DoH is blocked, you may notice requests still going to port 53, or name resolution failing intermittently.
- Temporarily disable VPN DNS features (if configurable) and re-test.
- For security suites, look for settings labeled DNS protection, web filtering DNS, or secure DNS.
Common Mistakes to Avoid
- Enabling only in the browser and assuming the whole PC uses DoH. System apps keep using Windows DNS unless you enable DoH in Windows.
- Copying a provider domain instead of the full DoH URL. Windows typically needs the complete endpoint, not just the hostname.
- Forgetting IPv6. On IPv6-capable networks, leaving IPv6 misconfigured can cause “works sometimes” behavior.
- Not flushing DNS cache. Windows apps may keep using cached results, making it look like DoH never changed.
FAQs: DNS over HTTPS on Windows 11
Does enabling DoH slow down DNS on Windows 11?
Often, the difference is small. DoH uses HTTPS, which has a connection/setup cost, but modern clients reuse connections and keep latency low. If you notice slow navigation, try a different provider endpoint (Cloudflare vs Google vs Quad9) and retest.
Will DoH bypass my company’s DNS filtering?
Not reliably. Many enterprise networks enforce DNS at the network edge or through policy. Some devices also block or redirect DoH traffic. If you’re on a managed PC, your admin may restrict DoH.
What if I don’t see the Use DNS over HTTPS toggle in Windows 11?
Common causes: you’re on an older Windows build, the UI labels differ, or a policy removed the option. Update Windows if possible, then confirm you’re editing the adapter under Hardware properties. If policies apply, you may need admin help.
Is browser secure DNS the same as Windows DoH?
They’re similar in concept but separate in scope. Browser secure DNS affects only the browser traffic. Windows DoH affects the system resolver used by apps that rely on Windows DNS settings.
How can I confirm my DNS queries are encrypted?
Use a packet capture tool (Wireshark) and confirm you see HTTPS connections to your DoH provider on port 443. You typically won’t see readable DNS question content because it’s inside encrypted TLS/HTTPS.
Bottom Line
Turning on DNS over HTTPS (DoH) in Windows 11 is a straightforward way to make DNS lookups more private by using an HTTPS-based resolver. Use the built-in Windows toggle for system-wide behavior, and consider browser DoH if you need per-app control.
If it doesn’t work, focus your troubleshooting on the adapter you edited, exact endpoint URL formatting, and whether a VPN/security tool or enterprise policy is overriding your DNS settings.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
