Setup DNS Filtering on Windows

Step 1: Open Command Prompt as Administrator

Press the Windows key, type Command Prompt, right-click it, and select Run as Administrator.

You need administrator privileges to change DNS settings.

Step 2: Identify Your Network Interface

Run the following command to list your network interfaces:

netsh interface ip show config

Look for the name of your active connection. Common names include Wi-Fi, Ethernet, or Wireless Network Connection. Note the exact name for the next steps.

Step 3: Set the Primary DNS Server

Run the following command, replacing Wi-Fi with your actual interface name:

netsh interface ipv4 set dns "Wi-Fi" static 185.228.168.168 primary

This sets CleanBrowsing as your primary DNS server.

Step 4: Set the Secondary DNS Server

Add the secondary DNS server for redundancy:

netsh interface ipv4 add dns "Wi-Fi" 185.228.169.168 index=2

Step 5: Set IPv6 DNS Servers (Optional)

If your network uses IPv6, also configure the IPv6 DNS addresses:

netsh interface ipv6 set dns "Wi-Fi" static 2a0d:2a00:1:: primary

netsh interface ipv6 add dns "Wi-Fi" 2a0d:2a00:2:: index=2

Note: If you skip this step and your network supports IPv6, DNS queries may bypass CleanBrowsing filtering.

Step 6: Flush the DNS Cache

Clear the existing DNS cache so Windows starts using the new settings immediately:

ipconfig /flushdns

You should see: "Successfully flushed the DNS Resolver Cache."

Step 7: Verify Your Configuration

Confirm the DNS servers are set correctly by running:

netsh interface ip show config

Your CleanBrowsing IPs should appear under Statically Configured DNS Servers.

You can also verify by visiting our DNS Leak Test and running the test. The results should show CleanBrowsing.

Note: Changes may take 10-15 minutes to fully propagate. You can disable and re-enable your network adapter to speed this up.