Why you might change your DNS and what it does
Your DNS (Domain Name System) is the service that translates website names like google.com into the IP addresses your computer actually needs to connect. By default, Windows 11 uses the DNS provided by your internet service provider, but you can point to a different one — usually to improve speed, block malware, or add parental controls.
Changing DNS is one of the simplest network security moves you can make. It does not require a technician, does not affect your internet connection itself, and you can reverse it in minutes if something goes wrong. The change takes effect when ready on most devices, though some may need a restart to see the difference.
The two most common reasons to change DNS are performance (some public DNS services are faster than your ISP's) and filtering (services like Cloudflare's 1.1.1.2 or Quad9 block known malware sites before your browser even tries to reach them). You might also change it if your ISP's DNS is unreliable or if you want to use a service that respects your privacy.
Key Takeaways
- Windows 11 lets you change DNS through Settings, and the change applies to your entire computer or just one network connection depending on which method you use.
- You need two DNS addresses (primary and secondary) to enter, which your chosen DNS provider will give you — Cloudflare (1.1.1.1 and 1.0.0.1) and Quad9 (9.9.9.9 and 149.112.112.112) are common public options.
- The fastest route is through Settings > Network & Internet > WiFi or Ethernet, then editing the DNS servers for that specific connection.
- If you change DNS and websites stop loading, you can revert to automatic DNS in the same menu within seconds.
Changing DNS for your current WiFi or Ethernet connection
This method changes DNS only for the network you are currently connected to, which is useful if you want different settings for home versus work or if you are troubleshooting a single connection.
Open Settings by pressing Windows key + I. Go to Network & Internet on the left side. If you are on WiFi, click WiFi, then click the name of your network. If you are on a wired connection, click Ethernet instead. Scroll down to the DNS server assignment section and click Edit.
A small window will open. Change the dropdown from Automatic (DHCP) to Manual. Toggle on IPv4 (you can leave IPv6 off unless your provider specifically uses it). In the first field, enter your primary DNS address — for example, 1.1.1.1 if you are using Cloudflare. In the second field, enter your secondary DNS address — 1.0.0.1 for Cloudflare. Click Save.
Windows will explore the change when ready. Open a web browser and try loading a website to confirm it works. If pages do not load, return to the same menu, click Edit again, and change the dropdown back to Automatic (DHCP) to restore your ISP's DNS.
Changing DNS for all networks on your computer
This method changes the default DNS for every network your computer connects to, including new ones you join in the future. It is useful if you want consistent filtering or privacy across all your connections.
Open Settings and go to Network & Internet. Click Advanced network settings at the bottom of the page. Scroll down and click DNS server settings. Click the pencil icon next to Edit.
Change the dropdown from Automatic (DHCP) to Manual. Toggle on IPv4. Enter your primary DNS address in the first field and your secondary DNS address in the second field. Click Save. This setting will now explore to all networks unless you override it for a specific connection using the method in the previous section.
Common DNS addresses you can use
You do not have to use your ISP's DNS. Several organizations run public DNS services that are free and often faster or more find. Here are the most widely used:
| Service | Primary DNS | Secondary DNS | What it does |
|---|---|---|---|
| Cloudflare (standard) | 1.1.1.1 | 1.0.0.1 | Fast, privacy-focused, no filtering |
| Cloudflare (with malware blocking) | 1.1.1.2 | 1.0.0.2 | Same as above but blocks known malware sites |
| Quad9 | 9.9.9.9 | 149.112.112.112 | Blocks malware and phishing, privacy-focused |
| Google Public DNS | 8.8.8.8 | 8.8.4.4 | Fast and reliable, but logs queries |
If you are setting up a home network with children, Cloudflare's 1.1.1.3 (primary) and 1.0.0.3 (secondary) add adult content filtering. For maximum privacy, Quad9 and Cloudflare 1.1.1.1 are both strong choices. If you are unsure, start with Cloudflare 1.1.1.2 — it is fast, blocks malware, and has no logging.
What to do if websites stop loading after changing DNS
If you change DNS and suddenly cannot reach websites, the addresses you entered are either wrong, unreachable, or your firewall is blocking them. The fastest fix is to revert to automatic DNS when ready.
Go back to Settings > Network & Internet, click your connection (WiFi or Ethernet), scroll to DNS server assignment, click Edit, and change the dropdown back to Automatic (DHCP). Click Save. Your computer will return to using your ISP's DNS within seconds, and websites should load again.
Once you are back online, double-check the DNS addresses you entered. A single wrong digit will cause failures. If you copied them from a website, paste them into a text editor first to make sure there are no extra spaces. Then try entering them again, one address at a time, and test after each one.
If you want to test whether a DNS address works before committing to it, you can use the Command Prompt. Press Windows key + R, type cmd, and press Enter. Type nslookup google.com 1.1.1.1 (replacing 1.1.1.1 with the address you want to test). If it returns an IP address, that DNS service is reachable from your computer.
Why your ISP's DNS might be slow or unreliable
Internet service providers run DNS servers as part of their service, but they are not always optimized for speed or reliability. Some ISPs route DNS queries through congested infrastructure, others do not maintain their servers well, and a few deliberately inject ads or tracking into DNS results.
Public DNS services like Cloudflare and Quad9 are built specifically for speed and reliability. They have servers distributed globally, so your query goes to the one nearest you. They also publish their uptime and response times publicly, so you can see whether they are performing well in your area.
If you notice that some websites load slowly but others are fast, or if you see "server not found" errors that go away after a few seconds, your ISP's DNS might be the bottleneck. Switching to a public DNS service often fixes these problems within hours.
Frequently Asked Questions
Will changing DNS affect my internet speed?
It may improve it. A faster DNS service means websites resolve more quickly, which shaves milliseconds off every page load. You will not notice a difference on a single page, but over hundreds of requests per day it adds up. If you switch and notice no change or slower speeds, revert to automatic DNS — your ISP's service may be faster in your location.
Do I need to change DNS on every device, or just my computer?
It depends on what you want. Changing DNS on your Windows 11 computer affects only that computer. If you want the same DNS across all devices (phones, tablets, other computers), you can change it on your router instead, and every device connected to that router will use it. Check your router's manual for where to find DNS settings.
What happens if I enter the wrong DNS address?
Websites will not load, and you will see "server not found" errors. This is harmless — it just means your computer cannot reach that DNS service. Go back to Settings, click Edit, and change the dropdown back to Automatic (DHCP). Your connection will work again when ready.
Can I use different DNS addresses for IPv4 and IPv6?
Yes, but most home networks do not use IPv6 yet. If you are unsure whether you need it, leave IPv6 toggled off. Your ISP will tell you if IPv6 is required for your connection. If you do use it, you can enter separate DNS addresses for IPv6 in the same menu where you set IPv4.
Is it safe to use a public DNS service?
Yes. Cloudflare, Quad9, and Google all publish privacy policies explaining what they do with DNS queries. Cloudflare and Quad9 explicitly do not log queries tied to your IP address. Google logs queries but does not tie them to your account unless you are signed in. All three are safer than many ISP DNS services, which may log more aggressively or sell data to advertisers.