Setup Private DNS on Android 9+

Learn how to configure DNS over TLS (Private DNS) on Android 9 and later devices. This method provides encrypted DNS filtering without needing to install any app, and works on both Wi-Fi and cellular connections.

Step 1: Open Settings

Open the Settings application on your Android device. You can do this from the app drawer or by pulling down the notification shade and tapping the gear icon.

Step 2: Navigate to Private DNS

Go to Network & Internet, then tap Advanced (or "More connection settings" on some devices) to reveal additional options.

Tap on Private DNS.

Note: The exact path may vary slightly depending on your device manufacturer and Android version. On Samsung devices, look under Connections > More Connection Settings > Private DNS.

Step 3: Select Private DNS Provider Hostname

You will see three options:

  • Off - Disables Private DNS
  • Automatic - Uses your network's default DNS
  • Private DNS provider hostname - Allows you to specify a custom DNS provider

Select "Private DNS provider hostname".

Step 4: Enter the CleanBrowsing DNS Hostname

Enter the appropriate CleanBrowsing DNS over TLS hostname. For the free Family Filter, use:

family-filter-dns.cleanbrowsing.org

Other free filter options:

  • Family Filter: family-filter-dns.cleanbrowsing.org
  • Adult Filter: adult-filter-dns.cleanbrowsing.org
  • Security Filter: security-filter-dns.cleanbrowsing.org

If you have a paid CleanBrowsing plan, use your custom DoT hostname found in your CleanBrowsing dashboard under account settings. It will be in the format: custom[code].dot.cleanbrowsing.org

Step 5: Save and Verify

Tap Save to apply the Private DNS configuration.

Open your browser and visit cleanbrowsing.org/check to verify that CleanBrowsing is active on your device.

Private DNS applies to all connections (both Wi-Fi and cellular data), so your device will be filtered regardless of what network you are connected to.

Note: If the Private DNS setting shows "Couldn't connect", verify that you entered the hostname correctly. Some corporate or school networks may block DNS over TLS connections on port 853.

Related Guides

Android Setup

Configure CleanBrowsing on Android using the app.

View Guide
Android (Older than 9)

Configure CleanBrowsing on older Android versions.

View Guide
Lock Mobile Settings

Prevent users from changing DNS settings on mobile devices.

View Guide