Best Public DNS Servers 2026: Speed & Privacy Compared

Why Your Default DNS Server Matters

Your DNS resolver has a significant impact on your browsing experience and privacy. Every time you visit a new website, a DNS query is sent to resolve the domain name. The speed of that resolution directly affects page load time — a slow DNS server adds latency to every single web request.

Beyond performance, your DNS provider can see every domain you visit. Most ISP DNS servers log this data and may sell it to third parties, hand it over to government requests, or inject ads into DNS error pages. Switching to a privacy-respecting public DNS server is one of the easiest privacy improvements you can make.

After changing your DNS server, use our DNS leak test to verify the change took effect and your queries are being handled by your chosen provider. You can also check your IP address to confirm your network configuration.

Cloudflare DNS (1.1.1.1) — Fastest & Privacy-Focused

Primary: 1.1.1.1   Secondary: 1.0.0.1
IPv6: 2606:4700:4700::1111 / 2606:4700:4700::1001
DoH: https://cloudflare-dns.com/dns-query

Cloudflare launched 1.1.1.1 in 2018 as a privacy-first DNS resolver and it has consistently topped performance benchmarks ever since. Independent tests from DNSPerf regularly show Cloudflare as the fastest public resolver globally, with average query times under 15ms for most users.

Privacy policy: Cloudflare does not log user IP addresses, and this is independently audited by KPMG annually. Cloudflare deletes query logs within 24 hours and the data is never used for advertising. Their 1.1.1.1 for Families variants (1.1.1.2 for malware blocking, 1.1.1.3 for malware + adult content) offer added filtering.

Best for: Users who want maximum speed and strong privacy guarantees. The top recommendation for most users.

Google Public DNS (8.8.8.8) — Reliable but Data-Collecting

Primary: 8.8.8.8   Secondary: 8.8.4.4
IPv6: 2001:4860:4860::8888 / 2001:4860:4860::8844
DoH: https://dns.google/dns-query

Google Public DNS has been the most widely used alternative DNS since its launch in 2009. It's extremely reliable with high uptime, fast performance (though typically behind Cloudflare in benchmarks), and excellent global infrastructure.

Privacy policy: Google does collect and retain some DNS query data for up to 48 hours for diagnostic purposes, and indefinitely in a non-personally-identifiable form for research. If you're trying to move away from ISP DNS but don't mind Google's data practices, this is a solid choice.

Best for: Users who prioritize reliability above privacy, or anyone already using Google services extensively.

Quad9 (9.9.9.9) — Security-Focused with Malware Blocking

Primary: 9.9.9.9   Secondary: 149.112.112.112
IPv6: 2620:fe::fe / 2620:fe::9
DoH: https://dns.quad9.net/dns-query

Quad9 is operated by the Quad9 Foundation, a non-profit organization. It blocks known malicious domains using threat intelligence from over 20 security firms, preventing connections to malware, phishing, and command-and-control servers automatically.

Privacy policy: Quad9 does not store user IP addresses or sell data. It's operated in Switzerland under strong privacy laws. The non-profit structure eliminates commercial incentives to monetize your data.

Best for: Home users who want passive malware protection without additional security software. Particularly good for households with less tech-savvy users.

OpenDNS (208.67.222.222 / 208.67.220.220): Owned by Cisco, OpenDNS offers free tiers with phishing protection and paid tiers with customizable filtering. The FamilyShield variant (208.67.222.123) blocks adult content. Logging practices are less privacy-friendly than Cloudflare or Quad9.

How to Choose and Set Up a DNS Server

Choosing the right DNS server depends on your priorities:

• Speed: Cloudflare 1.1.1.1 is typically fastest. Run your own benchmarks using tools like namebench or dns-benchmark as performance varies by geographic location.
• Privacy: Cloudflare 1.1.1.1 and Quad9 both have strong audited no-log policies. Avoid ISP DNS if privacy matters.
• Security/malware blocking: Quad9 and Cloudflare 1.1.1.2 automatically block malicious domains.
• Custom filtering: NextDNS or OpenDNS for granular control over what can be accessed.

Setting up on your router (recommended for whole-home coverage):

1. Log in to your router admin panel (usually 192.168.1.1 or 192.168.0.1).
2. Find DNS settings (often under WAN or Internet settings).
3. Replace your ISP's DNS addresses with your chosen ones.
4. Save and restart the router.

For device-level setup on individual computers, see our guide on how to change your DNS server on all major platforms. After changing, always run our DNS leak test to verify.

Frequently Asked Questions