Ad-Blocking DNS: Best Options and How to Set It Up

An ad-blocking DNS is a DNS server that stops ads, tracking and malicious content from loading on your device by leaving DNS queries for known ad, tracking and malicious domains unanswered. All you need to do is change the DNS address on your phone, computer or router; no app is required and the protection applies to every app on that device.

In this article we explain how ad-blocking DNS works, the popular options, how to set it up on your devices and its limitations.

How Does Ad-Blocking DNS Work?

When a website or app opens, your device asks the DNS server for the IP addresses of all the domains it needs, including ad servers. An ad-blocking DNS compares the requested domain with its block list:

• If the domain isn’t on the list, it answers normally.
• If it is (e.g. an ad network), it returns an empty or invalid answer, and the ad content is never downloaded.

Popular Ad-Blocking DNS Options

Service	Address	Key feature
AdGuard DNS	94.140.14.14 / 94.140.15.15 Private DNS: dns.adguard-dns.com	Free, no account needed; blocks ads and trackers
Control D (free ad-blocking profile)	76.76.2.2	Ready-made profiles; customisation in the paid version
Mullvad DNS	Private DNS: adblock.dns.mullvad.net	Privacy-focused, encrypted DNS (DoH/DoT)
NextDNS	Account-specific address	List and rule customisation, statistics dashboard; free usage quota
Pi-hole / AdGuard Home	Your own server	You host your own DNS on your home network or a server

Addresses can change over time; check the service’s official site before setting it up. For a detailed AdGuard DNS setup, see our article What is AdGuard DNS.

How to Set Up Ad-Blocking DNS on Your Devices

Android (Private DNS)

1. Go to Settings → Network & internet → Private DNS (the menu name may vary by manufacturer).
2. Choose Private DNS provider hostname and type the service’s hostname (e.g. dns.adguard-dns.com).
3. Save. This setting works on both Wi-Fi and mobile data.

iPhone

On iOS, system-wide encrypted DNS is set up with the configuration profile or app offered by the service. For Wi-Fi only, you can also enter an IP address under Settings → Wi-Fi → (i) → Configure DNS → Manual.

Windows

1. In Settings → Network & Internet, select your connection.
2. Click Edit next to DNS server assignment and choose Manual.
3. Enter the preferred and alternate DNS addresses for IPv4; on Windows 11 you can also turn on encrypted DNS (DoH).

Router

If you enter the addresses in the DNS fields of the DHCP or WAN settings in your router’s interface, every device at home is protected. Some ISP routers may not allow DNS changes.

Limitations of Ad-Blocking DNS

• Ads from the same domain can’t be blocked: on platforms such as YouTube that serve ads from the same domain as the content, DNS blocking usually doesn’t work.
• Some sites may break: if a blocked domain is also needed for a site to work, menus, checkout or login pages may not work properly. In that case, allowlist the domain or change the DNS temporarily.
• Browser DNS settings: some browsers use their own secure DNS setting and may override the system setting; check your browser settings too.
• VPN effect: with a VPN on, DNS queries usually go through the VPN provider’s DNS.

Frequently Asked Questions

Is ad-blocking DNS free?

Many services, such as AdGuard DNS, have a free public version. Advanced customisation and statistics are usually in paid plans.

Does it affect my internet speed?

If you choose a service with a server geographically close to you, the difference is usually unnoticeable. Pages may even open faster because ads aren’t loaded.

Does it also block in-app ads?

Often yes, for apps that load ads from a separate ad network domain. Not for apps that serve ads from their own servers.

Can I set up my own ad-blocking DNS server?

Yes. You can install Pi-hole or AdGuard Home on a device on your home network or on a virtual server and manage your own block lists.