Android 9+ has a built-in Private DNS mode (DNS-over-TLS). No app, no root, no VPN config needed.

Steps

  1. Open SettingsConnectionsMore connection settingsPrivate DNS
  2. Select Private DNS provider hostname
  3. Enter:
dns.quad9.net
  1. Tap Save

Verification

Open a browser and visit https://dnsleaktest.com — it should show Quad9 (9.9.9.9) as your resolver, not your ISP.

Why Quad9

That’s it. One field, 10 seconds, encrypted DNS on all Wi-Fi and mobile data from your phone.


Tested on Android 14 / One UI 6.1. Works on stock Android 9+ and all OEM skins.