How to Change DNS Settings on Windows 11 (2026)

Learning how to change dns settings on windows 11 takes about two minutes and gives you faster browsing, better privacy, and access to DNS-level features like ad blocking — all without touching your router. Windows 11 even supports encrypted DNS natively, so your lookups can be scrambled end-to-end with a single toggle.

This guide covers the exact click-paths: changing DNS through the Settings app (the modern way), through Control Panel (the classic way), enabling DNS-over-HTTPS encryption, doing it via Command Prompt or PowerShell, and verifying the change worked. Pick whichever method you like — they all end in the same place.

Method 1: Change DNS Settings on Windows 11 via the Settings App (Easiest)

This is the method Microsoft intends you to use, and it is the only one that lets you enable encrypted DNS with a toggle.

• Open Settings. Press Windows + I, then click “Network & internet” in the left sidebar.
• Select your connection. Click “Wi-Fi” (then your network name) or “Ethernet,” depending on how you are connected.
• Find DNS server assignment. Scroll to the network properties and look for “DNS server assignment.” It probably says “Automatic (DHCP)” — click the “Edit” button next to it.
• Switch to Manual. In the dialog that appears, change the dropdown from Automatic to Manual, then turn on the IPv4 toggle.
• Enter your DNS addresses. Type your preferred DNS in the “Preferred DNS” field and the alternate in “Alternate DNS.” For Cloudflare, that is 1.1.1.1 and 1.0.0.1; for Quad9, 9.9.9.9 and 149.112.112.112; for Google, 8.8.8.8 and 8.8.4.4.
• Turn on DNS over HTTPS. Set “DNS over HTTPS” to “On (automatic template)” for both entries — this encrypts your queries so your ISP cannot read them. Click Save.
• Repeat for IPv6 (optional). If your network uses IPv6, turn on the IPv6 toggle and enter the provider’s IPv6 addresses (for Cloudflare: 2606:4700:4700::1111 and 2606:4700:4700::1001).

“The DNS-over-HTTPS toggle is the whole point on Windows 11 — without it you have changed providers, but your queries still travel in plain text.”

Method 2: Change DNS in Control Panel (Classic)

The old Control Panel path still works and some people prefer it — especially for changing DNS on a specific adapter quickly.

• Open Network Connections. Press Windows + R, type ncpa.cpl, and press Enter. This opens the classic adapter list directly.
• Open your adapter’s properties. Right-click your active Wi-Fi or Ethernet adapter and choose Properties. (Click Yes if User Account Control asks.)
• Select IPv4 settings. In the list, click “Internet Protocol Version 4 (TCP/IPv4)” to highlight it, then click Properties.
• Enter the DNS addresses. Select “Use the following DNS server addresses” and type your preferred and alternate DNS. Click OK, then Close.
• Note the limitation. Control Panel cannot enable DNS-over-HTTPS — for encrypted DNS you must use the Settings app method above. If privacy matters to you, prefer Method 1.

Method 3: Change DNS With Command Prompt or PowerShell

Command-line methods are fastest when configuring multiple machines or writing setup scripts:

• Command Prompt. Open an elevated Command Prompt (right-click Start, choose Terminal (Admin)) and run: netsh interface ip set dns name=”Wi-Fi” static 1.1.1.1 — then add the secondary with: netsh interface ip add dns name=”Wi-Fi” 1.0.0.1 index=2. Replace “Wi-Fi” with “Ethernet” for wired connections.
• PowerShell. In an elevated PowerShell, run: Set-DnsClientServerAddress -InterfaceAlias “Wi-Fi” -ServerAddresses “1.1.1.1”,”1.0.0.1″. This sets both addresses in one command.
• Find the interface name first. Run Get-NetAdapter in PowerShell to list your adapters and their exact names — the commands fail if the name does not match.
• Encryption via command line. Enabling DNS-over-HTTPS from the command line requires registry edits or Group Policy — for most people, flipping the toggle in Settings is far simpler.

Enable DNS-over-HTTPS After Changing DNS Settings on Windows 11

Changing the addresses alone switches providers; encryption is what stops snooping. Windows 11 supports DNS-over-HTTPS natively, but only for providers it recognizes:

• Use the Settings toggle. As described in Method 1, set “DNS over HTTPS” to “On (automatic template)” after entering the addresses. Windows auto-discovers the provider’s encryption template for Cloudflare, Google, and Quad9.
• Verify it says “Encrypted.” Back on the network properties page, the DNS servers line should show “(Encrypted)” next to each address. If it says “(Unencrypted),” the toggle did not apply — double-check the addresses are correct.
• For other providers, add a template manually. Choose “On (manual template)” and paste the provider’s DoH template URL (found in the provider’s documentation — for example, NextDNS gives you a personal one).
• Prefer “On” over “Off.” The “Off” option sends queries in plain text. There is no reason to choose it unless a specific network (some corporate VPNs) requires plain DNS.

Verify Your New DNS Is Working

Never trust a settings screen — confirm the change with these checks:

• Flush the DNS cache. Open Command Prompt and run ipconfig /flushdns. This clears old cached answers so new lookups use your new servers immediately.
• Confirm the servers. Run nslookup example.com in Command Prompt — the first lines show which DNS server answered. It should list your new provider’s address.
• Run a leak test. Visit dnsleaktest.com in your browser and run the standard test. Results should show your chosen provider, not your ISP.
• Confirm encryption. Visit 1.1.1.1/help (Cloudflare’s check page) — it reports whether your connection uses DNS-over-HTTPS. For other providers, the “(Encrypted)” label in Settings is your confirmation.

Troubleshooting Common Problems

DNS changes are low-risk, but these hiccups come up:

• No internet after the change. You likely mistyped an address. Switch DNS server assignment back to Automatic (DHCP) to restore connectivity instantly, then re-enter the addresses carefully.
• Some sites stop loading. A few ISP-specific services expect ISP DNS. If a particular site breaks, it is almost never the DNS provider’s fault — but you can confirm by temporarily reverting to Automatic.
• VPN overrides your settings. Most VPN apps set their own DNS while connected — this is intentional and good (it prevents leaks). Your Windows DNS applies when the VPN is off.
• Settings revert after reboot. This happens when a third-party “optimizer” or VPN client resets them. Check for such software if your manual DNS keeps disappearing.
• Encrypted label will not appear. The provider may not be in Windows’ recognized list, or you used “On (automatic template)” with a provider that needs a manual template. Check the provider’s docs for their DoH URL.

FAQ

Will changing DNS on Windows 11 make my internet faster?

It can make browsing feel snappier because domain lookups resolve faster — especially if your ISP’s DNS is slow. It will not increase download speeds or bandwidth, which are set by your plan.

Do I need to restart my computer after changing DNS?

No. The change applies immediately to new lookups. Run ipconfig /flushdns to clear cached entries so the new servers are used right away.

Should I change DNS on Windows or on my router?

Router-level changes cover every device at once and are the best default for a household. Change it in Windows as well (or instead) if you want encrypted DNS — most routers cannot do DNS-over-HTTPS — or if you take the laptop to other networks.

What DNS addresses should I use?

Cloudflare (1.1.1.1, 1.0.0.1) for speed and privacy, Quad9 (9.9.9.9, 149.112.112.112) for security blocking, or NextDNS for customizable filtering and ad blocking. All support encryption on Windows 11.

Can I set different DNS for Wi-Fi and Ethernet?

Yes — DNS settings in Windows 11 are per-adapter. Configure Wi-Fi and Ethernet independently, which is handy if your wired connection is for work (VPN-managed DNS) and Wi-Fi is personal.

Conclusion

Knowing how to change dns settings on windows 11 is a two-minute skill with lasting payoff: open Settings, go to Network and internet, edit the DNS server assignment to Manual, enter your provider’s addresses, and — critically — flip DNS-over-HTTPS on so the queries are encrypted, not just redirected.

Verify with a flush, an nslookup, and a leak test, and your PC is resolving through a faster, more private provider wherever it connects. Pair it with the same change on your router, and your whole household gets the upgrade.