# Private DNS resolvers

DNS resolvers compared on query logging, DNS over HTTPS and TLS, DNSSEC validation and jurisdiction.

Your DNS resolver sees every site you visit. These resolvers support encrypted DNS and state that queries are not logged, or only in anonymized form.

1. [Unbound](https://privacyratings.com/dns-resolvers/unbound/): B (85/100). Validating, recursive and caching DNS resolver from NLnet Labs for running your own resolver, with DNS over TLS and DNS over HTTPS support.
2. [Cloudflare](https://privacyratings.com/dns-resolvers/cloudflare/): C (72/100). Public DNS resolver from Cloudflare with DNS over HTTPS and TLS, DNSSEC validation, and privacy commitments examined by KPMG.
3. [Digitale Gesellschaft DNS](https://privacyratings.com/dns-resolvers/digitale-gesellschaft-dns/): C (67/100). Public DoH and DoT resolver run by Digitale Gesellschaft, a Swiss non-profit digital rights association. It validates DNSSEC, uses no blocklists and publishes its live configuration.
4. [DNS.SB](https://privacyratings.com/dns-resolvers/dns-sb/): C (65/100). Free public DNS resolver operated by xTom GmbH in Germany on an anycast network. It supports DoH and DoT, validates DNSSEC and does not send EDNS Client Subnet.
5. [LibreDNS](https://privacyratings.com/dns-resolvers/libredns/): C (65/100). Public encrypted DNS resolver run by the volunteer LibreOps collective, with DoH and DoT endpoints and an optional ad-blocking endpoint.
6. [Quad9](https://privacyratings.com/dns-resolvers/quad9/): C (65/100). Public DNS resolver run by the Swiss non-profit Quad9 Foundation that blocks known malicious domains and validates DNSSEC.
7. [AdGuard](https://privacyratings.com/dns-resolvers/adguard/): C (63/100). Public DNS resolver from AdGuard that blocks ads, trackers and malicious domains, with open-source server software and DoH, DoT, DoQ and DNSCrypt support.
8. [Control D](https://privacyratings.com/dns-resolvers/control-d/): C (63/100). DNS resolver service from ControlD Inc. in Canada, founded by the team behind Windscribe. It offers free filtering resolvers and paid plans with custom rules, over legacy DNS, DoH, DoT and DNS over QUIC.
9. [Mullvad DNS](https://privacyratings.com/dns-resolvers/mullvad-dns/): C (63/100). Free encrypted DNS resolver from Mullvad with optional ad, tracker and malware blocking. Mullvad has announced it is shutting the public service down.
10. [NextDNS](https://privacyratings.com/dns-resolvers/nextdns/): C (61/100). Configurable DNS resolver that blocks ads, trackers and malicious domains, with optional parental controls and per-user query logs.
11. [UncensoredDNS](https://privacyratings.com/dns-resolvers/uncensoreddns/): C (61/100). Free public DNS resolver in Denmark, run by an individual, that does not apply censorship filters. It offers anycast and unicast servers over plain DNS, DoT and DoH.
12. [Applied Privacy DNS](https://privacyratings.com/dns-resolvers/applied-privacy-dns/): D (57/100). Public DNS over HTTPS and DNS over TLS resolver run by the Foundation for Applied Privacy, a non-profit association in Vienna. It validates DNSSEC and uses QNAME minimisation.
13. [BlahDNS](https://privacyratings.com/dns-resolvers/blahdns/): D (54/100). Hobby ad-blocking DNS resolver run by one person, with servers in Singapore and Germany and support for DoH, DoT, DoQ and DNSCrypt.
14. [Google Public DNS](https://privacyratings.com/dns-resolvers/google-public-dns/): D (45/100). Free public DNS resolver run by Google at 8.8.8.8 and 8.8.4.4 that validates DNSSEC and supports DNS over HTTPS and DNS over TLS.
15. [Clean Browsing](https://privacyratings.com/dns-resolvers/clean-browsing/): D (43/100). DNS filtering service with free family, adult and security filters and paid custom filtering, supporting DoH, DoT and DNSCrypt.
16. [DNS4EU](https://privacyratings.com/dns-resolvers/dns4eu/): D (41/100). Public DNS resolver co-funded by the European Union and operated by a consortium led by Whalebone in the Czech Republic. It offers protective, child-safe, ad-blocking and unfiltered variants over DoH and DoT.
17. [OpenNIC](https://privacyratings.com/dns-resolvers/opennic/): D (41/100). Volunteer-run alternative DNS root with public resolvers that answer for both ICANN domains and OpenNIC's own top-level domains such as .libre and .oss.

## How do I use a private DNS resolver?

Most systems and browsers support DNS over HTTPS or TLS. On Android, use the Private DNS setting with the resolver's hostname.

Source: https://privacyratings.com/private-dns/