How to Set Up FirewallDNS on Windows 11
By [FILL IN], [FILL IN] · Last updated
Windows 11 lets you set DNS servers per network adapter and, for supported servers, encrypt lookups with DNS-over-HTTPS. This guide changes DNS on one PC. To protect every device on the network, change DNS on your router instead.
Requirements
- A FirewallDNS account with your public IP address registered in the dashboard
- Your FirewallDNS addresses, shown under [VERIFY: dashboard menu name where these values are shown]
- A Windows 11 account with administrator rights
- Optional: your DoH URL for encrypted DNS
No account yet? See pricing.
Step by step
1.Open Settings (Windows key + I) and select Network & internet.
Image placeholder: screenshot of step 1 on Windows 11 [VERIFY] 2.Select Wi-Fi or Ethernet, depending on how the PC is connected, then select the connected network or Hardware properties.
Image placeholder: screenshot of step 2 on Windows 11 [VERIFY] 3.Next to DNS server assignment, select Edit.
Image placeholder: screenshot of step 3 on Windows 11 [VERIFY] 4.Change the drop-down from Automatic (DHCP) to Manual.
Image placeholder: screenshot of step 4 on Windows 11 [VERIFY] 5.Turn on IPv4. Enter [VERIFY: FirewallDNS primary DNS address] as Preferred DNS and [VERIFY: FirewallDNS secondary DNS address] as Alternate DNS.
Image placeholder: screenshot of step 5 on Windows 11 [VERIFY] 6.If DNS encryption is offered and supported, choose On (manual template) and enter [VERIFY: your personal DoH URL from the dashboard]. Otherwise leave it Off (unencrypted).
Image placeholder: screenshot of step 6 on Windows 11 [VERIFY] 7.If your network uses IPv6, turn on IPv6 and enter [VERIFY: FirewallDNS IPv6 DNS addresses], or turn IPv6 DNS off so lookups cannot bypass the filter.
Image placeholder: screenshot of step 7 on Windows 11 [VERIFY] 8.Select Save, then open Command Prompt and run ipconfig /flushdns.
Image placeholder: screenshot of step 8 on Windows 11 [VERIFY]
How to verify it works
- Open Command Prompt and run nslookup example.com. The "Server" line should show a FirewallDNS address.
- Run ipconfig /all and check the DNS Servers lines for the adapter you changed.
- Open the query log in your FirewallDNS dashboard and confirm that new lookups from your network appear within a few seconds.
How to revert
- Open Settings > Network & internet > your adapter > DNS server assignment > Edit.
- Choose Automatic (DHCP) and select Save.
- Run ipconfig /flushdns.
Troubleshooting
- Nothing appears in the query log
- Check that the public IP shown on a "what is my IP" site matches the IP registered in your dashboard.
- Some lookups still use the old server
- A VPN client or security software may override DNS. Check its settings, and disable IPv6 DNS if you have not set FirewallDNS for IPv6.
- Websites stop loading entirely
- Check for typos in the addresses, or revert to Automatic (DHCP) and try again.
FAQ
Do I need to change DNS on every Windows PC?
Only if you cannot change it on the router. Router-level DNS covers every device automatically.
Does Windows 11 support DNS-over-HTTPS?
Yes, for DNS servers Windows recognises or when a manual DoH template is entered. Availability of a FirewallDNS DoH URL must be verified in your dashboard.
Will a corporate VPN override this?
Often yes. Many VPN clients push their own DNS servers while connected, which is normal for work devices.
Can I use PowerShell instead?
Yes. Set-DnsClientServerAddress -InterfaceAlias "Wi-Fi" -ServerAddresses primary,secondary sets the addresses for one adapter.
Should I set IPv6 DNS too?
Yes if your network has IPv6, otherwise IPv6 lookups may bypass FirewallDNS.