The Problem
DNS turns a name like mytechnician.tech into the IP address your PC actually connects to. By default that lookup goes to whatever server your internet provider hands out — and provider DNS is often slow, occasionally out of date, and can log or filter what you visit.
Switching to a public resolver usually makes pages start loading faster, fixes "site cannot be reached" errors that only affect some websites, and — with encrypted DNS turned on — stops your lookups being readable on the local network.
Getting a specific DNS error? See fix DNS_PROBE_FINISHED_NO_INTERNET or fix "DNS server not responding" first — those cover the failure, this covers the change.
Symptoms
Change your DNS if:
- Some websites fail while others load fine, on a connection that is otherwise working.
- Pages sit on "Looking up…" for a second or two before anything happens.
- You want lookups encrypted so they are not visible on a shared or public network.
- You want family-safe filtering handled at the network level.
Step 1: Choose a Resolver
Note both the IPv4 and IPv6 addresses — set both if your connection uses IPv6.
- Cloudflare — fastest, privacy-focused:
1.1.1.1and1.0.0.1· IPv62606:4700:4700::1111,2606:4700:4700::1001 - Cloudflare with malware blocking:
1.1.1.2and1.0.0.2 - Google Public DNS — very reliable:
8.8.8.8and8.8.4.4· IPv62001:4860:4860::8888,2001:4860:4860::8844 - Quad9 — blocks known malicious domains:
9.9.9.9and149.112.112.112· IPv62620:fe::fe,2620:fe::9
Any of them is a step up from typical provider DNS. Cloudflare and Quad9 both support encrypted DNS over HTTPS, which Windows 11 can use natively — see Step 3.
Step 2: Change DNS in Windows 11 Settings
This is the current method and the one to use.
- Open Settings → Network & internet.
- Click Wi-Fi or Ethernet, depending on how you are connected.
- For Wi-Fi, click the name of your network to open its properties page.
- Find DNS server assignment and click Edit.
- Change the dropdown from Automatic (DHCP) to Manual.
- Switch IPv4 on. Enter your chosen resolver as Preferred DNS and the second address as Alternate DNS.
- If IPv6 is available on your connection, switch it on too and enter the IPv6 pair.
- Click Save, then reload a website to test.
Step 3: Turn On Encrypted DNS (DNS over HTTPS)
Without this, every lookup travels in plain text and anyone on the network can read it.
- On the same Edit DNS settings panel, under the IPv4 addresses, set DNS over HTTPS to On (automatic template).
- Windows recognises Cloudflare, Google, and Quad9 addresses automatically and picks the right template.
- Tick Fallback to plaintext only if some sites stop resolving — leaving it off is stricter and more private.
- Repeat for IPv6 if you configured it.
- Related: disable Windows 11 telemetry and tracking and stay safe on public Wi-Fi.
Step 4: Change It on the Router Instead (Covers Every Device)
Setting DNS once on the router covers phones, TVs, and consoles as well.
- Find the router's address: open Terminal and run
and read Default Gateway — usuallyipconfig192.168.0.1or192.168.1.1. - Open that address in a browser and sign in.
- Look under Internet, WAN, or DHCP settings for DNS servers, and switch from Automatic to Manual.
- Enter the two addresses and save. The router will likely restart.
- On each PC, leave Windows set to Automatic (DHCP) so it inherits the router's setting.
- While you are in there, tighten the rest: secure your home Wi-Fi router.
Step 5: Flush the DNS Cache
Windows caches old lookups, so changes may not take effect until you clear them.
- Open Terminal (Admin) and run:
ipconfig /flushdns - Clear the browser's own cache too — Chrome and Edge keep a separate one. Visit
chrome://net-internals/#dnsand click Clear host cache. - If sites still misbehave, reset the stack fully:
netsh int ip reset
Reboot afterwards. Related: clear browser cache and cookies.netsh winsock reset
Step 6: Verify the New DNS Is Actually in Use
- In Terminal, run:
and read the DNS Servers line for your active adapter. It should list the addresses you entered.ipconfig /all - Test that lookups resolve through it:
nslookup mytechnician.tech 1.1.1.1 - Visit
1.1.1.1/helpin a browser if you use Cloudflare — it confirms whether DNS over HTTPS is active. - Compare page-load feel before and after; DNS affects how quickly a page starts, not the download speed itself.
Step 7: Turn Off Anything That Overrides Your Choice
Several things quietly hijack DNS.
- VPN clients push their own DNS while connected — that is intended. Check it: set up a VPN in Windows 11.
- Browsers have their own secure-DNS setting that bypasses Windows. In Chrome or Edge: Settings → Privacy and security → Security → Use secure DNS. Set it to match, or turn it off to let Windows decide.
- A browser extension or unwanted program may be redirecting DNS — see how to remove a browser hijacker.
- Check the hosts file for stale manual entries: open
C:\Windows\System32\drivers\etc\hostsin Notepad run as administrator.
Step 8: Revert If Something Breaks
- Settings → Network & internet → your connection → DNS server assignment → Edit → set back to Automatic (DHCP) → Save.
- Run
ipconfig /flushdnsagain. - Some captive portals (hotel and airport Wi-Fi) will not work with manual DNS. Switch back to Automatic while you use them.
- Corporate networks resolve internal names on their own servers — never override DNS on a work-managed machine.
What Not to Do
- Don't enter a single DNS server with no alternate. If it goes down, nothing resolves.
- Don't use random "free fast DNS" servers found in forum posts. A hostile resolver can send you to a fake banking site — stick to well-known providers.
- Don't set DNS on both the router and every PC unless you mean to. Two sources of truth make problems hard to trace.
Still Not Working?
If pages still fail after changing DNS, the problem is not DNS. Work through speed up a slow internet connection and fix "no internet, secured" on Wi-Fi.
Related: fix Wi-Fi that keeps disconnecting and how to fix high ping.
Related guides
How to Secure Remote Desktop (RDP) in Windows 11
RDP exposed to the internet is a top ransomware entry point. Lock it down with Network Level Authentication, lockout policy, and a VPN instead of port forwarding.
Set Up UAC and a Standard User Account in Windows 11
Running as administrator gives every program you open full control of the PC. Set UAC to always notify and move daily use to a standard account without losing anything.
Set Up DNS Filtering to Block Malicious Sites
A filtering DNS resolver blocks phishing, malware, and ad domains for every device before they load. Set it up on Windows 11 and on the router, with encrypted DNS.
Set Up a Guest Network to Isolate Smart Home Devices
Cheap smart plugs and cameras sit on the same network as your PC and files. Move them to an isolated guest network or VLAN so one weak device cannot reach anything.
How to Find Your Saved Wi-Fi Password in Windows 11
Forgotten the Wi-Fi password but your PC is still connected? Recover it from Windows 11 settings, from Terminal for any saved network, or from the router itself.