How to Set Up FirewallDNS on iPhone and iPad
By [FILL IN], [FILL IN] · Last updated
iOS and iPadOS allow manual DNS per Wi-Fi network, and encrypted DNS for all networks through a configuration profile. Manual Wi-Fi DNS does not apply on mobile data, so a profile is the better option for devices that leave home.
Requirements
- A FirewallDNS account with your public IP address registered in the dashboard
- Your FirewallDNS addresses, shown under [VERIFY: dashboard menu name where these values are shown]
- iOS or iPadOS 14 or later for encrypted DNS profiles
- Optional: the FirewallDNS configuration profile
No account yet? See pricing.
Step by step
1.Open Settings and tap Wi-Fi.
Image placeholder: screenshot of step 1 on iPhone and iPad [VERIFY] 2.Tap the information (i) button next to the connected network.
Image placeholder: screenshot of step 2 on iPhone and iPad [VERIFY] 3.Scroll down and tap Configure DNS.
Image placeholder: screenshot of step 3 on iPhone and iPad [VERIFY] 4.Choose Manual and remove existing servers by tapping the red minus button and Delete.
Image placeholder: screenshot of step 4 on iPhone and iPad [VERIFY] 5.Tap Add Server and enter [VERIFY: FirewallDNS primary DNS address], then add [VERIFY: FirewallDNS secondary DNS address]. Tap Save.
Image placeholder: screenshot of step 5 on iPhone and iPad [VERIFY] 6.Optional, for all networks including mobile data: open [VERIFY: configuration profile download link] in Safari and tap Allow to download the profile.
Image placeholder: screenshot of step 6 on iPhone and iPad [VERIFY] 7.Open Settings, tap Profile Downloaded near the top, tap Install and enter your passcode.
Image placeholder: screenshot of step 7 on iPhone and iPad [VERIFY] 8.Go to Settings > General > VPN & Device Management > DNS and make sure the FirewallDNS entry is selected.
Image placeholder: screenshot of step 8 on iPhone and iPad [VERIFY]
How to verify it works
- Open Safari and visit a few websites.
- Open the query log in your FirewallDNS dashboard and confirm that new lookups from your network appear within a few seconds.
- If using the profile, switch to mobile data and check that lookups still appear.
How to revert
- Settings > Wi-Fi > (i) > Configure DNS > Automatic.
- To remove a profile: Settings > General > VPN & Device Management, tap the profile and tap Remove Profile.
Troubleshooting
- No lookups on mobile data
- Manual DNS only applies to that Wi-Fi network. Install the profile for mobile data.
- Lookups appear from a different IP
- On mobile data your public IP changes. Encrypted DNS with a personal address identifies the device regardless of IP. [VERIFY: per-device identification]
- Safari behaves differently
- iCloud Private Relay can handle DNS for Safari. Test with it turned off.
FAQ
Do I need to set DNS for every Wi-Fi network?
Yes with manual DNS. A profile applies to all networks.
Does this work on mobile data?
Only with an encrypted DNS profile.
Can children remove the profile?
Anyone with the passcode can. Use Screen Time restrictions or device management to prevent removal.
Is the profile safe?
Install profiles only from sources you trust. The FirewallDNS profile should only set DNS settings. [VERIFY: profile contents]
Will apps bypass it?
Apps with their own VPN or DNS can. Most apps use the system resolver.