Change DNS Nameserver via the command line

Changing your DNS Nameserver can be easily done via the command line interface. Learn how to do it on Windows, Mac and Linux.


Changing Nameservers via the command line


Changing nameservers can be a pain on some devices and require multiple clicks through a user interface. On Windows 10, for example, we counted more than 10 different clicks and screens just to do a simple change. However, this process can be a lot faster and easier via the command line interface (called terminal on Linux and Macs) or the command prompt on Windows.

In this guide we will show you how to change the nameservers with one simple command that you can copy/paste into the terminal. We will be using the CleanBrowsing DNS IP address on our examples (, which we recommend for children devices, schools or any device where you may need to restrict access to adult content.

However, if you are doing the change on a device where you do not need any filtering, you can just replace the IP address for the DNS server of your choice ( for Google DNS is a common one).


Macs come with the networksetup command line tool that allows you to configure the network settings. It can also be used to change the nameservers by using it with the -setdnsservers flag. Open your terminal by going to the spotlight and typing “terminal” and run:

  sudo networksetup -setdnsservers Wi-Fi

That will force the Wi-Fi to go through CleanBrowsing ( If it works, you won’t get any warning or error in the terminal and you are all set. As a bonus point, you can run the chflags command to block anyone from changing the nameserver via the graphical user interface:

  sudo chflags schg /Library/Preferences/SystemConfiguration/preferences.plist


Linux keeps your Nameserver configuration at the file /etc/resolv.conf. That makes it very easy to modify by editing that file. A simple way to make a change is by running the command echo to clear the file and add your new entry in there:

  sudo echo 'nameserver' > /etc/resolv.conf

That will force all your interfaces to go through CleanBrowsing ( If it works, you won’t get any warning or error in the terminal.

As a bonus point, you can run the chattr command to set that file as immutable, so it can’t be modified any anyone else:

  sudo chattr +i /etc/resolv.conf


Windows Vista, 7, 8, 10, 2008, 2012 and 2016 come with the netsh command line tool. It does a lot of things, including changing your DNS nameserver. To get access to it, your first need to open the command prompt by going to the sidebar and starting it choosing the command prompt and “Run as Administrator”


Once you are in the command prompt, just paste this command in there:

  netsh interface ipv4 set dns "Wi-Fi" static primary

That will force Wi-Fi to go through CleanBrowsing ( If it works, you won’t get any warning or error in the command prompt. If you get a big output of errors, it means you do not have the “Wi-fi” interface set. It could also be called: “Wireless Network Connection”, so try with it in case the previous command failed:

  netsh interface ipv4 set dns "Wireless Network Connection" static primary

If both failed, try running the command “netsh interface ip show config” to get your list of interfaces.

Was this article helpful?

Related Articles

Verify Connection & Troubleshooting

After configuring your device or router you can verify your configuration by visiting DNS Leak Test and running the standard test.

We provide a more in depth guide on Verifying and Debugging Connections.

Need Support?

Can't find the answer you're looking for?
Contact Support