Here’s a quick reference if you know what you’re doing, but we get into these services a lot more later in this article:
What Are DNS Servers?
DNS servers translate the friendly domain name you enter into a browser (like lifewire.com) into the public IP address that’s needed for your device to actually communicate with that site. Your ISP automatically assigns DNS servers when your smartphone or router connects to the internet, but you don’t have to use those. For a lot of reasons, you might want to try alternative ones (we get into many of them in Why Use Different DNS Servers? a bit further down the page) but privacy and speed are two big wins you could see from switching.
Best Free & Public DNS Servers (Valid December 2022)
Below are more details on the best free DNS servers you can use instead of the ones assigned.
Google: 8.8.8.8 & 8.8.4.4
Google Public DNS promises three core benefits: a faster browsing experience, improved security, and accurate results without redirects.
Primary DNS: 8.8.8.8Secondary DNS: 8.8.4.4
There are also IPv6 versions:
Primary DNS: 2001:4860:4860::8888Secondary DNS: 2001:4860:4860::8844
Google can achieve fast speeds with its public DNS servers because they’re hosted in data centers all around the world, meaning that when you attempt to access a web page using the IP addresses above, you’re directed to a server that’s nearest to you. In addition to traditional DNS over UDP/TCP, Google provides DNS over HTTPS (DoH) and TLS (DoT).
Control D: 76.76.2.0 & 76.76.10.0
Control D is unique in that it has several DNS servers to pick from, each categorized by theme. The “Uncensored” resolver proxies the commonly blocked websites in most countries to bypass IP blocking of various news websites. Others can be used to stop malicious websites, block ads and trackers, or block social networks or adult content. The basic option, “Unfiltered,” provides DNS query privacy and security:
Primary DNS: 76.76.2.0Secondary DNS: 76.76.10.0
IPv6 is supported, too:
Primary DNS: 2606:1a40::Secondary DNS: 2606:1a40:1::
There are also custom configurations you can set up if the standard configurations aren’t suitable for you. For example, join trackers and ads, malware, phishing, and government sites to make a custom filter. Premium filters are available for a low cost. Control D also supports DoH and DoT.
Quad9: 9.9.9.9 & 149.112.112.112
Quad9 has free public DNS servers that protect your computer and other devices from cyber threats by immediately and automatically blocking access to unsafe websites, without storing your personal data.
Primary DNS: 9.9.9.9Secondary DNS: 149.112.112.112
There are also Quad 9 IPv6 DNS servers:
Primary DNS: 2620:fe::feSecondary DNS: 2620:fe::9
Quad9 does not filter content—only domains that are phishing or contain malware will be blocked. There’s also has an unsecured IPv4 public DNS (i.e., no malware blocking) at 9.9.9.10 (2620:fe::10 for IPv6). Quad9 supports DoH.
OpenDNS: 208.67.222.222 & 208.67.220.220
OpenDNS claims 100% reliability and up-time, and is used by tens of millions of users around the world. They offer two sets of free public DNS servers, one of which is just for parental controls with dozens of filtering options.
Primary DNS: 208.67.222.222Secondary DNS: 208.67.220.220
IPv6 addresses are also available:
Primary DNS: 2620:119:35::35Secondary DNS: 2620:119:53::53
The servers above are for OpenDNS Home, which you can make a user account to set up custom settings. The company also offers DNS servers that you can set up to block adult content, called OpenDNS FamilyShield: 208.67.222.123 and 208.67.220.123. Those two also support DNS over HTTPS. A premium DNS offering is available, too, called OpenDNS VIP.
Cloudflare: 1.1.1.1 & 1.0.0.1
Cloudflare built 1.1.1.1 to be the “internet’s fastest DNS directory,” and will never log your IP address, never sell your data, and never use your data to target ads.
Primary DNS: 1.1.1.1Secondary DNS: 1.0.0.1
They also have IPv6 public DNS servers:
Primary DNS: 2606:4700:4700::1111Secondary DNS: 2606:4700:4700::1001
There are setup directions for all your devices through the link above. Another way to use it is through the 1.1.1.1 app, which provides quick DNS setup on mobile and desktop devices. It also doubles as a VPN. 1.1.1.1 for Families can block malware (1.1.1.2) or malware and adult content (1.1.1.3). It supports DNS over HTTPS and TLS as well.
CleanBrowsing: 185.228.168.9 & 185.228.169.9
CleanBrowsing has three free public DNS server options: a security filter, adult filter, and family filter. These are the DNS servers for the security filter, the most basic of the three that updates hourly to block malware and phishing sites:
Primary DNS: 185.228.168.9Secondary DNS: 185.228.169.9
IPv6 is also supported:
Primary DNS: 2a0d:2a00:1::2Secondary DNS: 2a0d:2a00:2::2
The CleanBrowsing adult filter (185.228.168.10) prevents access to adult domains, and the family filter (185.228.168.168) blocks proxies, VPNs, and mixed adult content. For more features, subscribe to a CleanBrowsing’s premium plans. This service supports DoH and DoT as well.
Alternate DNS: 76.76.19.19 & 76.223.122.150
Alternate DNS is a free public DNS service that blocks ads before they reach your network.
Primary DNS: 76.76.19.19Secondary DNS: 76.223.122.150
Alternate DNS has IPv6 DNS servers, too:
Primary DNS: 2602:fcbc::adSecondary DNS: 2602:fcbc:2::ad
You can sign up with Alternate DNS for free. There’s also a Family Premium Alternate DNS option that blocks adult content.
AdGuard DNS: 94.140.14.14 & 94.140.15.15
AdGuard DNS has two sets of DNS servers that block ads in games, videos, apps, and web pages. The basic set is called the “Default” servers, which block ads and trackers:
Primary DNS: 94.140.14.14Secondary DNS: 94.140.15.15
IPv6 is supported, too:
Primary DNS: 2a10:50c0::ad1:ffSecondary DNS: 2a10:50c0::ad2:ff
There are also “Family protection” servers (94.140.14.15 and 2a10:50c0::bad1:ff) that block adult content, plus everything included in the “Default” servers. Non-filtering servers are available if you’re not interested in blocking anything: 94.140.14.140 and 2a10:50c0::1:ff. These servers are also available as DNS over HTTPS, TLS, and QUIC, as well as DNSCrypt.
Why Use Different DNS Servers?
One reason you might want to change the DNS servers assigned by your ISP is if you suspect there’s a problem with the ones you’re using now. An easy way to test for a DNS server issue is by typing a website’s IP address into the browser. If you can reach the website with the IP address, but not the name, then the DNS server is likely having issues. Another reason to change DNS servers is if you’re looking for better performing service. Many people complain that their ISP-maintained DNS servers are sluggish and contribute to a slower overall browsing experience. If, on the other hand, you want to use the DNS servers that your specific ISP, like Verizon, AT&T, Comcast/XFINITY, etc., has determined is best, then don’t manually set DNS server addresses at all—just let them auto assign. Finally, in case there was any confusion, free DNS servers do not give you free internet access. You still need an ISP to connect to for access—DNS servers just translate between IP addresses and domain names so that you can access websites with a human-readable name instead of a difficult-to-remember IP address.
Additional DNS Servers
Here are several more public DNS servers from major providers.
Verizon DNS Servers & Other ISP Specific DNS Servers
Verizon DNS servers are often listed elsewhere as 4.2.2.1, 4.2.2.2, 4.2.2.3, 4.2.2.4, and/or 4.2.2.5, but those are actually alternatives to the CenturyLink/Level 3 DNS server addresses shown in the table above. Verizon, like most ISPs, prefers to balance their DNS server traffic via local, automatic assignments. For example, the primary Verizon DNS server in Atlanta, GA, is 68.238.120.12 and in Chicago, is 68.238.0.12.
How do I change my DNS server? You can specify a DNS server in the settings for your router. Specific instructions will differ depending on the model, but generally, you’ll log in to the hardware by entering http://192.168.1.1 and then entering one of the addresses above into the DNS settings. How do I fix a DNS server that isn’t responding? Your computer may fail to connect to a DNS for several reasons. To fix a faulty DNS connection, check your ISP’s connection status and your antivirus software, and run any network troubleshooting software your computer has. If none of this works, restart or reset your modem and router.
