Devices and operating systems · Operating systems

    How to Set Up FirewallDNS on Android

    By [FILL IN], [FILL IN] · Last updated

    Android 9 and later include Private DNS, which sends every lookup over DNS-over-TLS on Wi-Fi and mobile data. It is the simplest way to filter an Android phone or tablet everywhere.

    Requirements

    • A FirewallDNS account with your public IP address registered in the dashboard
    • Your FirewallDNS addresses, shown under [VERIFY: dashboard menu name where these values are shown]
    • Android 9 or later
    • Your DoT hostname: [VERIFY: your personal DoT hostname from the dashboard]

    No account yet? See pricing.

    Step by step

    1. 1.Open Settings.

      Image placeholder: screenshot of step 1 on Android [VERIFY]
    2. 2.Tap Network & internet (on Samsung: Connections > More connection settings).

      Image placeholder: screenshot of step 2 on Android [VERIFY]
    3. 3.Tap Private DNS.

      Image placeholder: screenshot of step 3 on Android [VERIFY]
    4. 4.Choose Private DNS provider hostname.

      Image placeholder: screenshot of step 4 on Android [VERIFY]
    5. 5.Enter [VERIFY: your personal DoT hostname from the dashboard] exactly, without https:// or a trailing slash.

      Image placeholder: screenshot of step 5 on Android [VERIFY]
    6. 6.Tap Save. Android checks the connection and shows an error if the hostname cannot be reached.

      Image placeholder: screenshot of step 6 on Android [VERIFY]
    7. 7.Turn Wi-Fi off and on again to make sure the setting is applied.

      Image placeholder: screenshot of step 7 on Android [VERIFY]

    How to verify it works

    1. Open a browser and visit a few websites.
    2. Open the query log in your FirewallDNS dashboard and confirm that new lookups from your network appear within a few seconds.
    3. Switch to mobile data and repeat: lookups should continue to appear.

    How to revert

    1. Settings > Network & internet > Private DNS.
    2. Choose Automatic or Off and tap Save.

    Troubleshooting

    "Couldn't connect" after saving
    Check the hostname for typos. Some networks block port 853; try another network.
    Menu names differ
    Manufacturers rename menus. Use the search box in Settings and type "Private DNS".
    Chrome bypasses the setting
    Check Chrome secure DNS settings; see our Chrome guide.

    FAQ

    Does Private DNS work on mobile data?

    Yes. It applies to Wi-Fi and mobile data.

    Can I enter an IP address in Private DNS?

    No. Private DNS requires a hostname.

    What if my device runs Android 8 or older?

    There is no Private DNS. Set DNS on your router instead, or use static IP settings per Wi-Fi network.

    Can a child turn off Private DNS?

    Yes unless restricted. Use Family Link or device management to lock settings.

    Does a VPN override Private DNS?

    Often yes. Many VPN apps use their own DNS while connected.

    Learn more

    Not protected yet?

    FirewallDNS costs $2.90 per device per month.