Every time you type a website address, your computer asks a DNS server — the internet’s phone book — to translate that name into a number. By default, you use your internet provider’s DNS, which is often slow, sometimes logs your browsing, and occasionally hijacks mistyped addresses to show you ads. Switching to a faster public DNS on Windows 11 takes two minutes, costs nothing, and can shave noticeable milliseconds off every page load while improving privacy. Here is how to do it, which servers to choose, and how to verify it actually helped.
What DNS Does and Why Changing It Helps
DNS resolution happens before anything else when you load a site — your browser cannot even start downloading the page until the name resolves. A slow DNS server adds 50–200 milliseconds to every new domain you visit; across a day of browsing dozens of sites, that adds up to real perceived sluggishness. Your ISP’s DNS is rarely optimized for speed, and some ISPs use DNS to redirect mistyped domains to ad pages or to log browsing for marketing.
Readers can also follow related coverage through London Big News’ capital coverage.
Public DNS providers — Cloudflare (1.1.1.1), Google (8.8.8.8), and Quad9 (9.9.9.9) — run massive anycast networks designed to answer queries in single-digit milliseconds from nearly anywhere. Many also promise no logging (Cloudflare) or add malware-domain blocking (Quad9). Switching is not magic — it will not fix a slow internet plan — but it removes a common hidden bottleneck and a privacy leak in one move.
Step 1: Open Windows 11 Network Settings
Right-click the network icon in the taskbar (bottom-right corner) and select “Network and Internet settings.” Click “Advanced network settings,” then “More network adapter options” — this opens the classic Control Panel network window that Microsoft keeps burying deeper with each Windows release. Right-click your active connection (WiFi or Ethernet — change the one you actually use, or both) and select Properties.
In the list, select “Internet Protocol Version 4 (TCP/IPv4)” and click Properties. This is where the DNS settings live. Note the current setting first — if it is “Obtain DNS server address automatically,” you are on your ISP’s DNS, and you can always revert by reselecting that option.
Step 2: Enter Your New DNS Servers
Select “Use the following DNS server addresses” and enter your chosen servers. The most popular choices: Cloudflare — Preferred 1.1.1.1, Alternate 1.0.0.1 (fastest for most US users, audited no-logging privacy); Google — Preferred 8.8.8.8, Alternate 8.8.4.4 (extremely reliable, but Google’s privacy policy applies); Quad9 — Preferred 9.9.9.9, Alternate 149.112.112.112 (blocks known malicious domains, nonprofit-operated).
Click OK, then Close. The change takes effect immediately for new connections — no restart needed, though you may want to close and reopen your browser to flush its internal DNS cache. If a site suddenly fails to load, you mistyped an address; recheck the numbers. And remember what you changed: if anything ever behaves oddly, switching back to automatic takes ten seconds.
Step 3: Also Set IPv6 DNS (If You Use IPv6)
Many connections now use IPv6 alongside IPv4, and Windows will happily use your ISP’s IPv6 DNS even after you change IPv4 — leaking queries you thought you moved. In the same Properties window, select “Internet Protocol Version 6 (TCP/IPv6),” click Properties, and set its DNS too: Cloudflare 2606:4700:4700::1111 and 2606:4700:4700::1001; Google 2001:4860:4860::8888 and 2001:4860:4860::8844; Quad9 2620:fe::fe and 2620:fe::9.
If your network does not use IPv6 at all, these settings sit idle and harmless. But setting them closes the leak for networks that do — and most US broadband and mobile connections now do. It takes thirty extra seconds and completes the job properly.
Step 4: Verify the Change Worked
Open Command Prompt and type nslookup google.com — the “Server” line should show your new DNS address (1.1.1.1, 8.8.8.8, or 9.9.9.9), not your router or ISP address. For a deeper check, visit a DNS leak test site, which shows which servers handle your queries — after the change, you should see only your chosen provider.
To measure the speed difference, use a free benchmarking tool like GRC’s DNS Benchmark or namebench: they test dozens of DNS servers from your actual location and rank them by response time. Run one before and after the change if you want proof rather than placebo. Most US users see Cloudflare or their ISP’s own servers win on raw speed — the privacy and reliability benefits of switching apply regardless.
Going Further: DNS Over HTTPS
Standard DNS queries are unencrypted — anyone on your network path can see which sites you look up. Windows 11 supports DNS over HTTPS (DoH), which encrypts those queries. To enable it: Settings, Network and internet, WiFi or Ethernet, click your connection, and under “DNS server assignment” click Edit — if your chosen provider supports DoH (Cloudflare, Google, and Quad9 all do), Windows 11 will offer “Encrypted only (DNS over HTTPS)” as an option.
DoH is the privacy completion of this project: not only are you using a no-logging provider, your ISP cannot even see the queries in transit. The Cloudflare documentation on DNS privacy explains the threat model well. Note that DoH does not hide which sites you visit from your ISP entirely — the subsequent connections still reveal IP addresses — but it closes the easiest snooping channel.
Troubleshooting: When New DNS Breaks Things
Two common issues. First, some corporate VPNs and parental-control software depend on specific DNS — if your work VPN stops resolving internal sites after the change, switch back to automatic while the VPN is connected. Second, a few ISPs intercept all DNS traffic regardless of your settings (DNS hijacking); if nslookup still shows your ISP’s server after the change, your ISP is intercepting, and DNS over HTTPS is the workaround since encrypted queries cannot be intercepted.
Also flush stale caches after changing: in Command Prompt, run ipconfig /flushdns, and in Chrome visit chrome://net-internals/#dns and click “Clear host cache.” Microsoft’s Windows networking support pages document these steps for persistent resolution problems.
Switching DNS on Windows 11 means entering 1.1.1.1/1.0.0.1 (Cloudflare), 8.8.8.8/8.8.4.4 (Google), or 9.9.9.9 (Quad9) in your adapter’s IPv4 and IPv6 properties — two minutes, no restart, verified with nslookup. Add DNS over HTTPS for encrypted queries.
Conclusion
Changing your DNS settings on Windows 11 is one of the highest-value two-minute tweaks in computing: faster name resolution on every page load, no ISP snooping or ad-injection on mistyped domains, and — with DNS over HTTPS — encrypted queries. Pick Cloudflare for speed and privacy, Quad9 for malware blocking, or Google for raw reliability; set both IPv4 and IPv6; verify with nslookup. For more Windows optimization guides, browse our technology section, meet the team, or ask us your networking questions.
Frequently Asked Questions
Will changing DNS make my internet faster?
It makes page loads snappier by speeding up name resolution (often 50–200ms saved per new domain), but it cannot increase your plan’s bandwidth — downloads and streaming speeds stay the same. Think of it as removing a delay, not adding speed.
Which DNS is best: Cloudflare, Google, or Quad9?
Cloudflare (1.1.1.1) is fastest for most US users with strong privacy; Quad9 (9.9.9.9) adds malicious-domain blocking; Google (8.8.8.8) is the most battle-tested for reliability. Run a benchmark from your location — the winner varies by city and ISP.
Is it safe to change my DNS settings?
Yes — it is fully reversible in ten seconds by reselecting “Obtain DNS server address automatically.” The providers listed are operated by major, reputable organizations. Just double-check you typed the addresses correctly.
Should I change DNS on my router instead?
Changing it on the router covers every device in the house at once — phones, TVs, consoles — which is more thorough. But per-device changes let you use different providers per device and avoid touching router settings. Do the router if you are comfortable there; per-device otherwise.
What is DNS over HTTPS and do I need it?
DoH encrypts your DNS queries so networks cannot snoop on which sites you look up. It is a genuine privacy upgrade available in Windows 11 settings. You do not strictly need it for the speed benefits, but enabling it completes the privacy picture.
Leave a Reply