DEV Community

Creto Si
Creto Si

Posted on Originally published at dubydex-blog.wasmer.app

How to Use Android Private DNS to Block Trackers Without Installing an App

#android #privacy #tutorial

By Creto Si · 11 November 2026

Your Android phone quietly sends DNS queries every time you open an app, load a website, or check a notification. Most people never think about where those requests go. DNS is the phonebook lookup that turns names like example.com into IP addresses, and it can also reveal which apps, sites, and services you use.

Private DNS is a built-in Android feature that encrypts those lookups and, with the right provider, blocks trackers before they even load. The best part? You don't need to install any app. It takes about two minutes to set up.

In this guide, I'll show you what Private DNS is, how it blocks trackers, which free providers to use, step-by-step setup for Android 9 and newer, the best settings for maximum privacy, and how to know if it actually works.

What is Private DNS on Android?

Private DNS is Android's name for DNS over TLS (DoT). It's a secure version of DNS that encrypts your DNS queries so your internet provider, public Wi-Fi operators, and local network observers can't easily see the domains you're visiting.

Introduced in Android 9 (Pie) in 2018, it's now standard on all Android phones running Android 9 or newer.

Regular DNS vs. Private DNS

Regular DNS (unencrypted):

  • Your phone asks "where is this site?" in plain text.
  • Any network observer can see and log the domains you visit.
  • Easy to tamper with or spoof.

Private DNS (DNS over TLS):

  • The same question is encrypted.
  • Observers can't read individual domain names.
  • Much harder to spoof or manipulate.

Why does this matter for privacy?

Even when a website uses HTTPS (encrypting the content), regular DNS can expose which sites you're visiting. It's like mailing a letter in a sealed envelope but writing the recipient's address on the outside in clear ink — everyone who handles it can see where it's going. Private DNS puts that address inside the sealed envelope too.

How Private DNS Blocks Trackers Without Installing an App

Here's where it gets interesting: if the DNS provider maintains a blocklist of known tracking, advertising, and malware domains, any request to those domains simply fails to resolve — the tracker never loads.

It works like this:

  1. You open an app or website.
  2. The app tries to contact analytics.tracker-example.com.
  3. Your phone sends an encrypted DNS query to your chosen Private DNS provider.
  4. The provider checks its blocklist. If the domain is a known tracker, it returns no IP address — the connection fails silently.
  5. Result: The tracker is blocked before any data leaves your phone.

What gets blocked

Depending on the provider, Private DNS can block:

  • Advertising networks — banners, pop-ups, and video ads that rely on ad-serving domains
  • Analytics and tracking domains — services that monitor your app usage and browsing
  • Malware and phishing domains — known malicious sites
  • Some social media trackers — embedded trackers on websites and apps

What it can't block

Private DNS is powerful, but not magic. It can't block:

  • Ads served from the same domain as the content (for example, YouTube ads served from googlevideo.com are tricky)
  • Trackers that use hardcoded IP addresses (rare)
  • Tracking built into an app's own first-party domain
  • Everything inside apps that don't use DNS (like direct IP connections)

Think of it as a very effective first layer of defence — not a complete shield.

Best Free Private DNS Providers That Block Trackers (2026)

There are plenty of options, but these are the most reliable free providers that actually block ads and trackers.

1. AdGuard DNS — Best all-round ad and tracker blocking

  • Hostname: dns.adguard-dns.com
  • Free tier: Yes (with fair-use limits; there's also an optional paid tier)
  • Blocks: Ads, trackers, malware, phishing
  • Family protection: family.adguard-dns.com blocks adult content too
  • Why choose it: One of the largest blocklists, excellent uptime, works worldwide, no account needed

2. NextDNS — Most customisable

  • Hostname: Custom per account, e.g. xxxxxx.dns.nextdns.io (note: your unique ID replaces xxxxxx)
  • Free tier: Yes, 300,000 queries/month (enough for most people)
  • Blocks: Fully custom blocklists, analytics, native tracking protection
  • Why choose it: You can customise your blocklists, see analytics, add allowlists, and block by app or category

3. ControlD — Simple and effective

  • Hostname: freedns.controld.com (see ControlD's free DNS page for more options)
  • Free tier: Yes
  • Blocks: Ads, trackers, malware
  • Why choose it: Very simple to set up, good performance

4. Cloudflare (1.1.1.1) — Fast but doesn't block ads

  • Hostname: one.one.one.one
  • Free tier: Yes
  • Blocks: No, it doesn't block ads (only malware if you use security.cloudflare-dns.com)
  • Why choose it: One of the fastest DNS resolvers in the world, great privacy policy, but not for ad blocking

5. Google DNS — Also doesn't block trackers

  • Hostname: dns.google
  • Free tier: Yes
  • Blocks: No ad or tracker blocking
  • Why choose it: Reliable and fast, but not designed for privacy from trackers

My recommendation: Start with AdGuard DNS (dns.adguard-dns.com). It's free, fast, and blocks the most trackers with zero configuration. If you want more control later, try NextDNS.

How to Set Up Private DNS on Android (Step-by-Step)

The steps can vary slightly by brand (Samsung, Pixel, Xiaomi, OnePlus, etc.), but the general path is the same.

Android 9 and newer (most phones)

  1. Open Settings.
  2. Tap Network & Internet / Connections / Wi-Fi & Network (depending on your phone).
  3. Tap Private DNS.
  4. Select Private DNS provider hostname.
  5. Enter the hostname, e.g. dns.adguard-dns.com.
  6. Tap Save.

Done! It should start working immediately — no restart needed.

Samsung phones (One UI)

  1. Open Settings → Connections → More connection settings.
  2. Tap Private DNS.
  3. Select Private DNS provider hostname.
  4. Enter dns.adguard-dns.com and tap Save.

Xiaomi / Redmi / POCO phones (MIUI / HyperOS)

  1. Open Settings → Connection & Sharing.
  2. Tap Private DNS.
  3. Select Private DNS provider hostname.
  4. Enter the hostname and tap the checkmark / Save.

Pixel phones

  1. Open Settings → Network & Internet → Private DNS.
  2. Select Private DNS provider hostname.
  3. Enter dns.adguard-dns.com and tap Save.

How to verify it's working

To confirm that Private DNS is active:

  1. Open your browser and visit https://adguard.com/en/test.html or https://www.dnsleaktest.com/.
  2. Run a test. If the DNS server shows as AdGuard / your chosen provider, it's working.
  3. Quick ad test: Open a site full of ads (like a news site) — you should notice fewer banners.
  4. Check Android status: Go back to Settings → Private DNS. It should say "Connected" (Android doesn't always show a clear status — if it connects with no error, it's working).

Troubleshooting

If your internet stops working or you see "Private DNS server cannot be reached":

  • Check for typos in the hostname (no https://, no trailing /).
  • Try a different network (Wi-Fi vs. mobile data).
  • If you're on a school/work network, Private DNS may be blocked — switch it back to Off or Automatic temporarily.
  • Restart your phone — it often clears a stuck DNS connection.

Private DNS Settings: Automatic vs. Off vs. Provider Hostname

Setting What it does Best for
Off No encryption, regular DNS Not recommended
Automatic Uses your network's DNS-over-TLS if available Default, but no ad blocking
Private DNS provider hostname Uses your chosen provider (e.g. AdGuard) Privacy and ad blocking

Bottom line: "Automatic" is better than "Off" for privacy, but it doesn't block trackers. For tracker blocking, you need to set a custom hostname like AdGuard or NextDNS.

Battery, Speed & Data: Does Private DNS Slow Down Your Phone?

Short answer: No, not noticeably.

  • Battery: No measurable impact. DNS queries use very little power.
  • Speed: A good provider is just as fast as your ISP's DNS (often faster). Cloudflare (1.1.1.1) and AdGuard are both highly optimised.
  • Data use: DNS queries are tiny (a few bytes each). No impact.
  • App updates: Apps will still update normally; Private DNS only blocks known tracker domains.

If anything, blocking ads and trackers can speed up websites because fewer resources need to load.

What to Do If Private DNS Breaks Apps or Websites

Some apps or sites may stop working if they rely on a blocked domain. Here's what to do:

  1. Check if it's Private DNS: Switch Private DNS to Off temporarily. If the app works again, it's a DNS block.
  2. Switch providers: Try a different provider (for example, from AdGuard to NextDNS or one.one.one.one).
  3. Use NextDNS allowlist: With NextDNS, you can allowlist specific domains (like a banking app that needs its analytics domain).
  4. Turn it off for specific networks: Some networks (workplaces, schools) block encrypted DNS.

Private DNS vs. a VPN — What's the Difference?

Feature Private DNS VPN
Encrypts DNS queries Yes Yes
Hides IP from websites No Yes
Blocks trackers and ads Yes (with a blocking provider) Some do, many don't
Costs Free Usually paid
Speed Very fast Some slowdown
Setup 2 minutes App install + account

They complement each other: Private DNS blocks trackers at the DNS level. A VPN hides your IP and encrypts all traffic. If you're privacy-conscious, use both — they're not mutually exclusive.

Frequently Asked Questions (FAQ)

Is Private DNS safe to use?

Yes. It's a built-in Android feature using standard encryption (DNS over TLS). Just use a reputable provider (AdGuard, NextDNS, Cloudflare, ControlD).

Does Private DNS hide my browsing from my ISP?

It encrypts DNS queries so your ISP can't easily see which domains you're visiting. However, your ISP can still see the IP addresses you connect to (unless you use a VPN). For full privacy, use a VPN as well.

Will Private DNS block YouTube ads?

No, not reliably. YouTube ads are served from the same domains as video content, so DNS blocking can't separate them.

Does Private DNS work on mobile data and Wi-Fi?

Yes, it works on both. The setting applies system-wide.

Do I need to install an app?

No — that's the whole point. It's a built-in feature. You only need to type a hostname.

Is Private DNS available on iPhone?

Yes, but it's called "DNS over HTTPS" on iOS 14+ and requires a configuration profile (not a built-in toggle like Android). Android's implementation is more straightforward.

Final Thoughts

Private DNS is one of the easiest and most effective privacy upgrades you can make on Android — and it costs nothing.

You don't need to root your phone, install a VPN app, or pay any subscription. Just pick a provider like AdGuard DNS, set the hostname in Settings, and let it quietly block trackers in the background.

If you haven't set it up yet, take two minutes and do it now — your phone will be a little more private than it was five minutes ago.

Originally published on Dubydex Blog: https://dubydex-blog.wasmer.app/android-private-dns-block-trackers/

Top comments (0)