How to Change DNS Settings in Windows 8/10/11

Recommended DNS Servers

TorGuard DNS (VPN Users)

For maximum privacy when using TorGuard VPN:

Public DNS Servers

Windows 11 (Modern Method)

Via Settings App

1. Press Windows + I to open Settings
2. Navigate to Network & internet
3. Click on Ethernet or Wi-Fi (your active connection)
4. Click Edit next to DNS server assignment
5. Change dropdown to Manual
6. Toggle IPv4 to On
7. Enter your preferred DNS servers:
   • Preferred DNS: 1.1.1.1
   • Alternate DNS: 1.0.0.1
   • DNS over HTTPS: On (automatic)
8. Click Save

Windows 10 Method

Via Settings App (Version 2004+)

1. Open Settings (Windows + I)
2. Go to Network & Internet
3. Click Change adapter options
4. Right-click your network adapter → Properties
5. Select Internet Protocol Version 4 (TCP/IPv4)
6. Click Properties
7. Select Use the following DNS server addresses
8. Enter DNS servers and click OK

Windows 8/8.1 Method

Step 1: Access Desktop

From the Windows 8 Start screen, click or tap the Desktop tile.

Step 2: Open Network and Sharing Center

Right-click the network icon in the system tray and select Open Network and Sharing Center.

Step 3: Select Your Network Connection

Click on your active connection under "Active Networks" (e.g., Ethernet or Wi-Fi).

Step 4: Open Connection Properties

In the connection status window, click Properties.

Step 5: Configure IPv4 Settings

Select Internet Protocol Version 4 (TCP/IPv4) and click Properties.

Step 6: Enter DNS Servers

Select "Use the following DNS server addresses" and enter your chosen servers:

• Preferred DNS server: 1.1.1.1
• Alternate DNS server: 1.0.0.1

PowerShell Method (All Windows Versions)

For advanced users and automation:

View Current DNS Settings

# Run PowerShell as Administrator
Get-DnsClientServerAddress

Set DNS for Specific Adapter

# For Ethernet
Set-DnsClientServerAddress -InterfaceAlias "Ethernet" -ServerAddresses 1.1.1.1, 1.0.0.1

# For Wi-Fi
Set-DnsClientServerAddress -InterfaceAlias "Wi-Fi" -ServerAddresses 1.1.1.1, 1.0.0.1

Set DNS for All Adapters

# Apply to all network adapters
Get-NetAdapter | Set-DnsClientServerAddress -ServerAddresses 1.1.1.1, 1.0.0.1

Reset to DHCP DNS

# Reset to automatic (DHCP)
Set-DnsClientServerAddress -InterfaceAlias "Ethernet" -ResetServerAddresses

Configure IPv6 DNS

For networks with IPv6 support:

1. Follow steps to adapter properties
2. Select Internet Protocol Version 6 (TCP/IPv6)
3. Click Properties
4. Enter IPv6 DNS servers:
   • Preferred: 2606:4700:4700::1111 (Cloudflare)
   • Alternate: 2606:4700:4700::1001

Enable DNS over HTTPS (DoH)

Windows 11 Native DoH

1. When setting DNS servers, enable "DNS over HTTPS"
2. Select encryption preference:
   • Automatic: Use DoH when available
   • On (manual template): Always use DoH

Windows 10 DoH (Build 19628+)

# Enable DoH via Registry
reg add "HKLM\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters" /v EnableAutoDoh /t REG_DWORD /d 2 /f

# Restart DNS service
net stop dnscache && net start dnscache

Flush DNS Cache

After changing DNS settings, clear the cache:

Command Prompt Method

# Run as Administrator
ipconfig /flushdns

# Verify cache is cleared
ipconfig /displaydns

PowerShell Method

Clear-DnsClientCache
# Verify with
Get-DnsClientCache

Clear Browser DNS Cache

• Chrome: Navigate to chrome://net-internals/#dns → Clear host cache
• Firefox: about:networking#dns → Clear DNS Cache
• Edge: edge://net-internals/#dns → Clear host cache

Verify DNS Changes

Check Active DNS Servers

# Command Prompt
nslookup google.com

# PowerShell
Resolve-DnsName google.com

Online DNS Leak Test

1. Visit TorGuard DNS Leak Test
2. Run Standard or Extended test
3. Verify results show your chosen DNS servers

Troubleshooting Common Issues

DNS Changes Not Taking Effect

• Restart network adapter:

  netsh interface set interface "Ethernet" admin=disable
  netsh interface set interface "Ethernet" admin=enable

• Reset Winsock:

  netsh winsock reset

• Restart DNS Client service:

  net stop dnscache && net start dnscache

No Internet After DNS Change

• Verify DNS server IPs are typed correctly
• Try alternate DNS servers (8.8.8.8)
• Check firewall isn't blocking port 53
• Temporarily disable antivirus/firewall

Slow DNS Resolution

• Use DNS benchmark tool to find fastest servers
• Try servers geographically closer to you
• Disable IPv6 if not using IPv6 DNS
• Check for DNS filtering software conflicts

Advanced DNS Configurations

DNS Suffixes

Configure search domains for short names:

1. In adapter properties → Advanced
2. DNS tab → Add domain suffixes
3. Useful for corporate environments

HOSTS File Editing

Override DNS for specific domains:

# Edit C:\Windows\System32\drivers\etc\hosts
# Add entries like:
127.0.0.1 blocked-site.com
192.168.1.100 myserver.local

Per-App DNS (Windows 11)

Some apps support custom DNS:

• Browsers with DoH settings
• VPN clients with DNS options
• Gaming clients with network settings

Security Best Practices

1. Use encrypted DNS: Enable DoH when available
2. Avoid untrusted DNS: Stick to reputable providers
3. Regular testing: Periodically check for DNS leaks
4. VPN integration: Let VPN handle DNS when connected
5. Monitor changes: DNS hijacking is a common malware tactic

DNS for Different Network Types