- Messages
- 560
- Likes
- 44
- Points
- 980
Important:
Every time you enter a website address in your browser, your computer sends a request to a special server called a DNS. By default, this server belongs to your ISP. What does this mean? It means your ISP keeps a "log" of all your visits: which resources you access, when, and how often.
In 2026, this data stream has become even more valuable, and companies are happy to analyze it to create a digital profile of you. But there is a way to "encrypt" these requests so that your ISP only sees encrypted noise, not your preferences.
Banner ads, trackers, and surveillance scripts will be blocked before they reach your device. This not only improves privacy, but also significantly speeds up page loading times, as the browser stops loading heavy advertising junk.
Many people think changing DNS is for the paranoid. But let's face it: your internet service provider isn't a librarian who simply lends you books. They're a commercial entity that often monetizes your browsing history.
I believe DNS encryption is a minimum level of protection that should be enabled by default for everyone. It's like putting tape over your laptop's camera: it doesn't provide 100% protection from all the hackers in the world, but it blocks 99% of intrusive marketing "spying."
Every time you enter a website address in your browser, your computer sends a request to a special server called a DNS. By default, this server belongs to your ISP. What does this mean? It means your ISP keeps a "log" of all your visits: which resources you access, when, and how often.
In 2026, this data stream has become even more valuable, and companies are happy to analyze it to create a digital profile of you. But there is a way to "encrypt" these requests so that your ISP only sees encrypted noise, not your preferences.
- Time: 5–10 minutes.
- Difficulty: Easy.
- Result: Privacy of your browsing history, protection against website substitution (DNS spoofing), and automatic blocking of advertising domains.
- Setting up in Windows 11 (via Settings):
- Go to Settings → Network & Internet → Ethernet (or Wi-Fi).
- Find the "DNS Server Assignment" item and click "Edit".
- Select Manual, enable IPv4 , and enter the addresses of trusted DoH-enabled servers (e.g. Cloudflare: 1.1.1.1 and 1.0.0.1).
- In the "Preferred DNS over HTTPS" field, select "Enabled ." Now all your requests will be encrypted.
- Setting up in the browser (Firefox/Chrome):
- In your browser settings, search for "DNS" or "Secure DNS."
- Select "Use secure DNS" and specify a provider (for example, Cloudflare or AdGuard ).
- Secret: Browser settings take precedence over system settings, so they're guaranteed to hide your requests from the prying eyes of your ISP.
- For advanced users: setting up a router:
- If you want to protect your entire home network (including smart TVs and phones), go to your router settings.
- Find the DNS section and enter the addresses 94.140.14.14 and 94.140.15.15 (these are AdGuard servers with ad blocking).
Banner ads, trackers, and surveillance scripts will be blocked before they reach your device. This not only improves privacy, but also significantly speeds up page loading times, as the browser stops loading heavy advertising junk.
Many people think changing DNS is for the paranoid. But let's face it: your internet service provider isn't a librarian who simply lends you books. They're a commercial entity that often monetizes your browsing history.
I believe DNS encryption is a minimum level of protection that should be enabled by default for everyone. It's like putting tape over your laptop's camera: it doesn't provide 100% protection from all the hackers in the world, but it blocks 99% of intrusive marketing "spying."