Short answer: To change the DNS server in Windows 11, open Settings, Network & internet, then Wi-Fi or Ethernet. Click Edit next to DNS server assignment and choose Manual. Turn on IPv4 and enter two servers, such as 1.1.1.1 and 1.0.0.1. We'd switch on DNS over HTTPS in the same window.
To change the DNS server in Windows 11, open Settings, Network & internet, then your Wi-Fi or Ethernet connection, click Edit next to DNS server assignment and type the new addresses. Pages hang on “Resolving host” and everything else looks fine: a sign to change the DNS server in Windows 11 on this PC. The Wi-Fi is connected. Other devices work. The fix takes about a minute. Settings, your network, one Edit button, two addresses. The new servers work the moment you click Save.
It’s a common suggestion for people working from home and from hotels, too. It’s the first thing we’d try before blaming the router. And it’s fully reversible in seconds.
| Provider | Preferred | Alternate |
|---|---|---|
| Cloudflare | 1.1.1.1 | 1.0.0.1 |
| 8.8.8.8 | 8.8.4.4 | |
| Quad9 | 9.9.9.9 | 149.112.112.112 |
| OpenDNS | 208.67.222.222 | 208.67.220.220 |
What a DNS server does, and why you’d swap it
It turns names like hypestkey.com into the IP addresses computers connect to. By default Windows 11 uses whatever server your router or internet provider hands out through DHCP.
Every page you open starts with a lookup. A slow, overloaded or broken resolver makes browsing feel sluggish, even on a fast line. Here’s what another resolver can change.
- Speed. Large public resolvers typically answer faster than an ISP’s servers. The pause between typing an address and the page starting to load gets shorter. Download speeds don’t change.
- Security. Quad9 refuses to resolve domains on threat intelligence lists. A phishing link may simply fail to open.
- Filtering. OpenDNS and the family variants of Cloudflare can block adult content for the whole PC.
- Privacy. With DNS over HTTPS your lookups travel encrypted. Without it they cross the local network and the provider’s lines in plain text.
- Troubleshooting. A broken resolver looks like “no internet” in the browser. Switching DNS quickly tells the two apart.
One thing it rarely does any more is get you past geo-blocked streaming. Most services check your IP address, not your resolver. So don’t expect miracles there.
Before you change anything
- Note the current setting. Automatic, or two addresses someone entered before.
- Check whether a VPN is running. Many replace DNS with their own.
- Decide which connection you’re changing. Wi-Fi and Ethernet are set separately.
- On a work PC, ask IT first.
How to change the DNS server in Windows 11 Settings
- Press Win + I to open Settings and select Network & internet.
- For wireless, click Wi-Fi, then the properties of the network you’re on. For cable, click Ethernet.
- Next to DNS server assignment, click Edit.
- Change the setting from automatic to Manual.
- Turn on IPv4.
- Type the Preferred DNS, for example
1.1.1.1. Then the Alternate DNS, for example1.0.0.1. - Optionally set DNS over HTTPS to the automatic template. More on that below.
- Click Save.

The change applies to that connection right away. The list under DNS server assignment now shows your servers. With DoH active, the word Encrypted stands next to them.
Each network keeps its own setting. A café Wi-Fi you join next week still uses automatic DNS, until you change it there too.
Edit DNS server assignment, not IP assignment. Older guides send you to IP assignment, which also asks for a fixed IP address, a subnet and a gateway. Get one of those wrong, and the PC drops off the network.
Laptops that move between networks
Wi-Fi settings are saved per network. The Ethernet setting belongs to the adapter. So a laptop needs the change once for the office cable, and once for each Wi-Fi network you care about.
Change the DNS server in Windows 11 from Control Panel
The classic method. It still works.
- Press Win + R, type
ncpa.cpland press Enter. - Right-click your active adapter, Wi-Fi or Ethernet, and choose Properties.
- Select Internet Protocol Version 4, the TCP/IPv4 entry, and click Properties.
- Choose Use the following DNS server addresses.
- Enter the preferred server in the first field and the alternate in the second.
- Click OK. Repeat with the TCP/IPv6 entry if you also want IPv6 DNS.
- Click Close.
There’s a second way to that window. Settings, Network & internet, Advanced network settings, More network adapter options.
This dialog shows IPv4 and IPv6 side by side. Its Advanced button takes more than two DNS servers. It has no DNS over HTTPS option, though. That lives only in Settings, PowerShell and Group Policy.
Change the DNS server in Windows 11 with PowerShell or Command Prompt
The command line shines when several PCs need the same settings. Drop the lines into a script, or push them through your management tool. Both need an administrator window.
PowerShell
Right-click Start and choose Terminal as admin. Then:
Get-NetAdapter
Set-DnsClientServerAddress -InterfaceAlias "Wi-Fi" -ServerAddresses "1.1.1.1","1.0.0.1"
Get-DnsClientServerAddress -InterfaceAlias "Wi-Fi"
Set-DnsClientServerAddress -InterfaceAlias "Wi-Fi" -ResetServerAddresses
| Line | What it does |
|---|---|
| 1 | Lists the adapters; note the Name or the ifIndex |
| 2 | Sets the two DNS servers |
| 3 | Shows what’s set now |
| 4 | Goes back to automatic |
Command Prompt with netsh
netsh interface show interface
netsh interface ip set dns name="Wi-Fi" static 1.1.1.1
netsh interface ip add dns name="Wi-Fi" 1.0.0.1 index=2
netsh interface ip set dns name="Wi-Fi" dhcp
| Line | What it does |
|---|---|
| 1 | Shows the adapter names |
| 2 | Sets the primary server |
| 3 | Adds the secondary server |
| 4 | Goes back to automatic |
Replace Wi-Fi with the exact adapter name. Keep the quotes when the name has spaces in it.
Which public resolver to pick
All four are free. Three of them also support DNS over HTTPS in this system with no extra setup.
| Provider | IPv4 | IPv6 | Best known for | Built-in DoH in Windows 11 |
|---|---|---|---|---|
| Cloudflare | 1.1.1.1, 1.0.0.1 |
2606:4700:4700::1111, 2606:4700:4700::1001 |
Speed, privacy commitments | Yes |
| Google Public DNS | 8.8.8.8, 8.8.4.4 |
2001:4860:4860::8888, 2001:4860:4860::8844 |
Reliability, global coverage | Yes |
| Quad9 | 9.9.9.9, 149.112.112.112 |
2620:fe::fe, 2620:fe::fe:9 |
Malware and phishing blocking | Yes |
| OpenDNS (Cisco) | 208.67.222.222, 208.67.220.220 |
2620:119:35::35, 2620:119:53::53 |
Content filtering, parental controls | Add manually |
Which one is fastest depends on where you are and on your provider’s routing. There’s no universal winner. We’d test it: set one, browse a few new sites, then try the next.
Most people won’t feel a difference between Cloudflare and Google. The jump from a struggling ISP resolver to either one is the part you notice.
Filtering variants
Cloudflare runs two filtered versions of its resolver next to the plain one.
| Variant | Preferred | Alternate | Blocks |
|---|---|---|---|
| Malware only | 1.1.1.2 | 1.0.0.2 | Known malicious domains |
| Family | 1.1.1.3 | 1.0.0.3 | Malware and adult content |
OpenDNS is the other common choice for filtering. For a family PC, we’d start with the Cloudflare family pair and see whether it’s enough.
Mixing providers
Mixing providers is fine too. Plenty of people pair Cloudflare as preferred with Quad9 as alternate. Windows may use either one, though. So filtering or encryption is only as strong as the weaker of the two.
Change the DNS server in Windows 11 to Google
The most asked pair. Google Public DNS, same Edit button in Settings, Manual, IPv4 on:
| Field | Google Public DNS |
|---|---|
| Preferred DNS (IPv4) | 8.8.8.8 |
| Alternate DNS (IPv4) | 8.8.4.4 |
| Preferred DNS (IPv6) | 2001:4860:4860::8888 |
| Alternate DNS (IPv6) | 2001:4860:4860::8844 |
From PowerShell, as admin, swap the adapter name if yours isn’t Wi-Fi:
Set-DnsClientServerAddress -InterfaceAlias "Wi-Fi" -ServerAddresses "8.8.8.8","8.8.4.4"
Google’s own check is plain. A site by name. Close the browser, reopen, refresh a few times. Then a site by raw IP address. IP loads, name doesn’t? DNS is the culprit, so roll it back. Their Google Public DNS setup page has the same addresses for older adapters too.
Turning on DNS over HTTPS for the DNS server in Windows 11
It encrypts your lookups. The setting sits in the same Edit window as the servers.
- Follow the Settings steps until you see the Preferred and Alternate DNS fields.
- Enter a server that’s known to support DoH. Cloudflare, Google or Quad9.
- Under DNS over HTTPS, choose the option for the automatic template.
- Decide about Fallback to plaintext. Off gives you encrypted-only lookups. On keeps DNS working when encryption fails.
- Repeat for the alternate server, and for IPv6 if you set it.
- Click Save. The servers now show the word Encrypted.
When the option is greyed out
The drop-down stays grey for servers that aren’t on the system’s list of known DoH resolvers. You can see that list in PowerShell. And you can add another resolver to it:
Get-DnsClientDohServerAddress
Add-DnsClientDohServerAddress -ServerAddress '<IP>' -DohTemplate '<URL>' -AllowFallbackToUdp $False -AutoUpgrade $True
Or pick the manual template option in Settings and paste the provider’s template URL. Microsoft documents these cmdlets in its DNS over HTTPS client article.
On a company laptop joined to Active Directory, leave DoH and the DNS servers alone unless IT says otherwise. Domain sign-in, file shares and printers depend on the internal DNS servers. Microsoft itself warns against requiring DoH on domain-joined PCs.
Admins can set DoH centrally with a policy named Configure DNS over HTTPS name resolution. The Group Policy editor has it on Windows 11 Pro and Enterprise.
Change the IPv6 DNS server in Windows 11 too
Yes, if your connection has IPv6. The system prefers IPv6 when it’s available. Change only the IPv4 DNS, and many lookups may still go to the provider’s IPv6 resolver.
So set the IPv6 addresses from the same provider. For Cloudflare these two:
2606:4700:4700::1111
2606:4700:4700::1001
Do you have IPv6 at all? Run ipconfig and look at the addresses. One that starts with 2 or 3 points to a dual-stack connection. An address starting with fe80 alone doesn’t count.
In Settings, turn on the IPv6 switch under DNS server assignment and enter the pair. In Control Panel, use the TCP/IPv6 properties.
Pages slower after adding IPv6 DNS? The IPv6 path of your network may be flaky. Remove the IPv6 DNS entries first. We’d disable IPv6 on the adapter only as a last resort, because some Windows features expect it.
Checking that it works
ipconfig /all
ipconfig /flushdns
nslookup hypestkey.com
Resolve-DnsName hypestkey.com
| Line | What to look for |
|---|---|
| 1 | The DNS Servers line of your adapter lists the new addresses |
| 2 | Clears cached answers from the old server |
| 3 | Server and Address match your new resolver |
| 4 | The PowerShell alternative; it shows the answer and the record type |
A DNS leak test website confirms what the browser really uses. Expect your new provider there, not your ISP.
Browsers can override Windows here. Chrome, Edge and Firefox each have their own secure DNS setting. With it on, they may use another resolver than the one you just configured. If the leak test surprises you, we’d check the browser’s privacy settings first.
When the DNS server change in Windows 11 doesn’t stick
Five reasons cover nearly all of it. The servers are blocked on that network. A VPN replaces your DNS with its own. The browser uses its own secure DNS. A policy or management tool resets the setting. Or you edited another adapter.
Go back to automatic DNS first, to get access back. Then check each cause in turn.
| Symptom | Likely cause | Fix |
|---|---|---|
| No internet right after the change | Typo, or the network blocks outside DNS | Usually a typo: check the addresses; switch back to Automatic (DHCP), then try another provider |
| Setting reverts by itself | Group Policy, MDM or security software | Ask IT; on a personal PC, check VPN and security suites |
| Leak test shows other servers | VPN or browser secure DNS | Set DNS in the VPN app, or in the browser settings |
| Hotel or airport Wi-Fi login page won’t appear | Captive portal needs the network’s DNS | Switch to automatic, sign in, then switch back |
| “Access denied” in PowerShell or netsh | Not elevated | Run Terminal or Command Prompt as administrator |
| Slower after adding IPv6 DNS | Flaky IPv6 path | Remove the IPv6 DNS entries, keep IPv4 |
| Nothing changed at all | Edited the wrong adapter | Check which adapter is connected in Get-NetAdapter |
Internet still dead after reverting? Then the problem isn’t DNS. Our guide to fixing Wi-Fi problems in Windows 11 walks through adapter resets, drivers and a network reset.
On an older PC the same ideas apply in another layout. See changing DNS servers in Windows 10.
Going back to automatic
In Settings, open DNS server assignment, click Edit and choose the automatic option, the one labeled DHCP. The system uses your router’s servers again.
From the command line, the last line of either block above does the same. It takes seconds, and nothing else on the PC changes.
With a VPN running
Most VPN apps bring their own DNS and switch to it the moment the tunnel comes up. Your manual servers wait in the background until you disconnect. That’s by design. If you want a particular resolver inside the tunnel, we’d look for the DNS option in the VPN app itself.
On the router instead
At home that’s usually the better option. Set the DNS servers in the router’s DHCP or WAN settings. Every device on the network picks them up, phones and TVs included.
You can still override it per PC with the steps above. Some routers supplied by providers lock this field. Then the per-PC method is the only way.
Is it safe, and does it make things faster
Safe, yes. A DNS change only affects how names get looked up. It can be undone at any time.
Faster, sometimes. Pages can start loading sooner, because the lookup is quicker. Download speed stays the same. The gain shows mainly when your provider’s DNS servers are slow or unreliable.
The one place we’d leave it alone is a work PC joined to a domain. Internal resources depend on the company’s DNS servers.
Typical DNS problems and fixes
Hotel Wi-Fi login page doesn’t show with manual DNS
A laptop with manual DNS joins the hotel Wi-Fi, and nothing loads. The captive portal needs the network’s own DNS. Back to automatic, sign in, then the manual servers again.
DNS servers keep switching back to the old ones
The servers get changed, and an hour later they’re the old ones. A security suite with its own web protection was resetting them. The DNS choice had to be made inside that program.
A DNS leak test shows a different provider
Settings show Cloudflare, and the leak test shows someone else. The browser had secure DNS switched on with its own provider. One setting in the browser, and both agree.
Windows 11 versions and adapters this guide covers
| Item | Covered |
|---|---|
| Editions | Windows 11 Home and Pro |
| Versions | 23H2, 24H2, 25H2 and 26H2 |
| Adapters | Wi-Fi and Ethernet |
| DoH policy | Windows 11 Pro, Enterprise and Education |
The DNS over HTTPS settings need Windows 11. Windows 10 has no DoH option in Settings.
Try a provider and keep it if browsing feels snappier or safer. Move on if it doesn’t. It’s one of the few network tweaks you can undo in seconds.
Related guides
FAQ
How do I change the DNS server in Windows 11?
Open Settings, Network & internet, then Wi-Fi or Ethernet. Next to DNS server assignment, click Edit and choose Manual. Turn on IPv4, enter the preferred and alternate servers and click Save. The change works immediately.
What is the best DNS server for Windows 11?
There's no single winner. Cloudflare and Google are popular for speed. Quad9 blocks known malicious domains, and OpenDNS is used for family filtering. We'd try one, browse for a day and keep it if it feels quicker.
Is it safe to change DNS on Windows 11?
Yes. It only affects how names are looked up, and it's fully reversible. Set DNS server assignment back to automatic. On a work PC joined to a domain we'd leave it to IT, because internal resources depend on the company DNS servers.
Why is the DNS over HTTPS option greyed out?
Windows 11 only enables it for resolvers on its list of known DoH servers. Cloudflare, Google and Quad9 are on it. Enter one of those addresses. We'd add another resolver in PowerShell, or use the manual template.
How do I reset DNS to automatic in Windows 11?
In Settings, open DNS server assignment, click Edit and choose the automatic option. The reset lines in the command sections do the same. Both need an administrator window.
Does changing DNS make my internet faster?
It can make pages start loading sooner, because the name lookup is quicker. It doesn't raise download speed. We'd expect a gain mainly with a slow or unreliable provider DNS.
Do I need to flush DNS after changing servers?
Yes, we'd do it. Flush the cache, so Windows drops cached answers from the old server. Then test with nslookup to confirm the new resolver answers.
