Learn how to configure DNS over TLS (Private DNS) on Android 9 and later devices. This method provides encrypted DNS filtering without needing to install any app, and works on both Wi-Fi and cellular connections.
Open the Settings application on your Android device. You can do this from the app drawer or by pulling down the notification shade and tapping the gear icon.
Go to Network & Internet, then tap Advanced (or "More connection settings" on some devices) to reveal additional options.
Tap on Private DNS.
Note: The exact path may vary slightly depending on your device manufacturer and Android version. On Samsung devices, look under Connections > More Connection Settings > Private DNS.
You will see three options:
Select "Private DNS provider hostname".
Enter the appropriate CleanBrowsing DNS over TLS hostname. For the free Family Filter, use:
family-filter-dns.cleanbrowsing.org
Other free filter options:
family-filter-dns.cleanbrowsing.orgadult-filter-dns.cleanbrowsing.orgsecurity-filter-dns.cleanbrowsing.orgIf you have a paid CleanBrowsing plan, use your custom DoT hostname found in your CleanBrowsing dashboard under account settings. It will be in the format: custom[code].dot.cleanbrowsing.org
Tap Save to apply the Private DNS configuration.
Open your browser and visit cleanbrowsing.org/check to verify that CleanBrowsing is active on your device.
Private DNS applies to all connections (both Wi-Fi and cellular data), so your device will be filtered regardless of what network you are connected to.
Note: If the Private DNS setting shows "Couldn't connect", verify that you entered the hostname correctly. Some corporate or school networks may block DNS over TLS connections on port 853.