DNS over HTTPS stops café Wi‑Fi from casually logging which hostnames you resolve. Windows 11 can prefer DoH for well-known resolvers.
Enable DoH
- Settings → Network & internet → Ethernet/Wi‑Fi → your network → DNS server assignment Edit.
- Set Preferred DNS manually to a provider that supports DoH.
- Choose On (automatic template) for DNS over HTTPS.
- Flush with ipconfig /flushdns in an admin terminal if sites stick to old IPs.
If something fails
Some networks break with DoH. If intranet sites fail, switch back to Off or Automatic.
FAQ
Same as VPN?
No. DoH encrypts DNS only; a VPN tunnels more traffic.
Which resolver?
Pick one you trust; Cloudflare, Google, and others publish DoH endpoints.
Updated for?
Written for current Windows 11 / recent Android; menus move—search the setting name if your build differs.
Related guides on VpnWP
Photo: Unsplash. Steps checked against current Windows 11 / Android settings menus; UI labels can shift slightly after OS updates.