Changing the DNS server on your iPhone is one of the most effective tweaks you can make to improve browsing speed, boost privacy, and sidestep ISP-level content filtering — and most people never touch it. Your carrier or router assigns a default DNS resolver automatically, and that resolver is often slow, logging your queries, or blocking sites it shouldn't. Swapping it out takes about two minutes, costs nothing, and can make a noticeable difference. This guide covers every method: per-Wi-Fi network, through a configuration profile, and what to do on cellular connections where iOS gives you far less control.

Why the Default DNS on Your iPhone Is Worth Changing

When you type a domain into Safari, your phone asks a DNS resolver to translate that name into an IP address. By default, that request goes to your ISP's resolver (on cellular) or your router's resolver (on Wi-Fi). Both of these come with real drawbacks:

  • Speed: ISP resolvers are frequently overloaded and located far from major authoritative nameservers. Public resolvers like Cloudflare (1.1.1.1) and Google (8.8.8.8) often answer faster.
  • Privacy: Many ISPs log DNS queries and use them for targeted advertising. Cloudflare's 1.1.1.1 has a no-logging policy audited by KPMG.
  • Filtering: Some ISPs and network admins block domains at the DNS level. Switching resolvers bypasses those blocks when they're not enforced at a deeper layer.
  • Reliability: Public resolvers run globally distributed anycast infrastructure with very high uptime — typically better than a regional ISP resolver.
💡 Not sure if a DNS change has propagated or if a domain resolves correctly? Run a quick check with the DNS Propagation Checker to see what resolvers around the world are returning for any domain.

Option 1: Change DNS Per Wi-Fi Network in iOS Settings

This is the most straightforward method and works on any iPhone running iOS 8 or later. The catch: you have to set it separately for each Wi-Fi network you join, and it does not affect cellular data.

  1. Open Settings and tap Wi-Fi.
  2. Tap the blue info icon (i) next to the network you're connected to.
  3. Scroll down to the DNS section. You'll see the current servers listed — usually your router's IP address like 192.168.1.1.
  4. Tap Configure DNS.
  5. Switch from Automatic to Manual.
  6. Tap the red minus button next to any existing servers to remove them.
  7. Tap Add Server and enter your preferred DNS IP. Repeat for a secondary server.
  8. Tap Save in the top-right corner.

Which DNS Servers Should You Use?

Here are the most widely trusted public resolvers and what they offer:

  • Cloudflare (1.1.1.1 / 1.0.0.1): Fastest average response time globally, strong privacy policy, no query logging.
  • Google Public DNS (8.8.8.8 / 8.8.4.4): Extremely reliable, excellent uptime, good speed, but Google does retain some query data.
  • Quad9 (9.9.9.9 / 149.112.112.112): Blocks known malicious domains automatically — good for families or security-conscious users.
  • OpenDNS (208.67.222.222 / 208.67.220.220): Owned by Cisco, offers optional content filtering categories, good for parental controls.
  • Cloudflare for Families (1.1.1.3 / 1.0.0.3): Blocks malware and adult content at the DNS level, no app required.

For most users who just want speed and privacy, use 1.1.1.1 as primary and 1.0.0.1 as secondary. Enter both — iOS will fall back to the secondary if the primary is unreachable.

Option 2: Use a DNS-over-HTTPS or DNS-over-TLS Profile

Standard DNS changes in iOS Settings send queries in plain text. Anyone on the same network — including your router — can see what domains you're looking up. Encrypted DNS (DoH or DoT) fixes this, but iOS only supports it through a configuration profile or through specific VPN/app setups.

Cloudflare provides a free configuration profile that sets up encrypted DNS system-wide on your iPhone, including over cellular. Here is how to install it:

  1. On your iPhone, open Safari and navigate to https://1.1.1.1/dns/ — Cloudflare's official setup page.
  2. Tap iOS under the DNS app section, or download the 1.1.1.1 app from the App Store directly (app ID: com.cloudflare.1dot1dot1dot1).
  3. Install the app and toggle the switch to Connected. This installs a VPN configuration profile that routes DNS queries through Cloudflare's encrypted resolvers.
  4. To verify, go to Settings > General > VPN & Device Management and confirm the profile is installed and trusted.

Alternatively, on iOS 14 and later, Apple added native support for encrypted DNS profiles. You can install a .mobileconfig file to set DoH or DoT system-wide without a VPN. Several DNS providers publish these files:

  • Cloudflare: https://encrypted-dns.party/cloudflare.mobileconfig
  • Quad9: https://quad9.net/news/blog/ios-14-quad9-setup/

Open the link in Safari on your iPhone, download the profile, then go to Settings > General > VPN & Device Management > Downloaded Profile and tap Install. Enter your passcode when prompted. Once installed, your iPhone uses encrypted DNS for all connections, including cellular.

Option 3: Change DNS on Cellular (the Hard Truth)

iOS does not expose a manual DNS setting for cellular connections in the standard Settings app. When you're on LTE or 5G, your carrier's DNS is used and there is no native toggle to override it. Your options are:

  • Encrypted DNS profile (recommended): As described above, a DoH/DoT configuration profile applies system-wide, including cellular.
  • A DNS-based VPN app: Apps like 1.1.1.1, NextDNS, or AdGuard DNS create a local VPN configuration that intercepts DNS queries on all interfaces.
  • A full VPN: Any VPN will push its own DNS servers, effectively replacing your carrier's resolver.

If you only care about Wi-Fi and don't need cellular DNS control, the Settings method in Option 1 is perfectly sufficient. If you want consistent DNS across all connections, go with the profile or app approach.

How to Verify the DNS Change Actually Worked

After making the change, do not assume it's working — verify it. There are two quick methods.

Method 1: Use a Browser Test

In Safari, go to https://1.1.1.1/help — Cloudflare's diagnostic page. It will tell you whether you're using Cloudflare DNS and whether encrypted DNS is active. For other resolvers, run a similar test by visiting the resolver provider's diagnostic page.

Method 2: Use a DNS Lookup Tool

Run a query against a known domain and check which servers are responding. The DNS Lookup tool lets you quickly verify what authoritative records are being returned and confirm propagation from multiple vantage points — useful if you changed DNS on a device and want to confirm the new resolver is serving the correct records.

Method 3: Command Line (on a Mac connected to the same network)

If you have a Mac on the same Wi-Fi network, you can verify the resolver behavior with:

dig @1.1.1.1 example.com nslookup example.com 1.1.1.1

This confirms Cloudflare's resolver is reachable and responding correctly from your network before you trust your iPhone's configuration.

Common Problems and How to Fix Them

DNS Settings Keep Reverting to Automatic

This happens when the Wi-Fi network uses a captive portal or when you disconnect and reconnect. iOS sometimes resets per-network DNS overrides after certain network events. The most reliable fix is the encrypted DNS profile method — once installed, it persists across network changes and reboots.

Websites Stop Loading After Changing DNS

If nothing loads after you change the DNS, the new server may be blocked on that network (some corporate and hotel networks block external DNS on port 53). Revert to Automatic in the Wi-Fi DNS settings to restore connectivity. Then try the DoH profile method — encrypted DNS runs over HTTPS (port 443) and is much harder to block.

Split-Horizon DNS Is Breaking Internal Resources

If you're on a corporate network that uses internal domain names (like intranet.company.local), switching to a public resolver will break access to those resources because public resolvers have no knowledge of internal zones. In this case, use the network's assigned DNS for work Wi-Fi and only change DNS on your personal or home networks. You can manage this per-network through the iOS Wi-Fi settings — set Automatic on the work SSID and Manual on your home SSID.

Slow Performance After Switching

Counterintuitively, a public resolver can sometimes feel slower if it's geographically distant from your anycast node or if your ISP's peering with that resolver is poor. Test with multiple resolvers using a tool like DNS Benchmark (available on Windows/Mac) while connected to the same network your iPhone uses. Pick the resolver with the lowest average latency to your region.

Changing DNS at the Router Level Instead

If you want every device on your home network — including your iPhone — to use a different DNS without touching each device individually, change it at the router. This covers all Wi-Fi clients automatically, though it still won't affect your iPhone when it's on cellular.

Common router admin URLs and their DNS settings locations:

  • Most home routers: 192.168.1.1 or 192.168.0.1 — look under LAN Settings or DHCP Server settings for primary/secondary DNS fields.
  • TP-Link routers: tplinkwifi.net or 192.168.0.1 — go to Advanced > Network > DHCP Server.
  • Netgear routers: routerlogin.net or 192.168.1.1 — go to Advanced > Setup > Internet Setup, scroll to DNS Address.
  • ASUS routers: asusrouter.com or 192.168.50.1 — go to WAN > Internet Connection, enter DNS servers in the WAN DNS Setting fields.

Set the primary DNS to 1.1.1.1 and secondary to 1.0.0.1 (or your preferred resolver pair), save, and reboot the router. Your iPhone will automatically receive the new DNS addresses the next time it connects or renews its DHCP lease. You can force a lease renewal on the iPhone by turning Wi-Fi off and back on.

Privacy Considerations When Choosing a Resolver

Every DNS resolver you use can see your query history. Choose one whose privacy policy matches your threat model. Cloudflare's 1.1.1.1 promises not to sell data and has third-party audits. Google's 8.8.8.8 logs some data per its privacy policy. NextDNS allows per-account logging you control and can delete. Quad9 is operated by a nonprofit and focuses on security without monetizing data.

If you need the maximum privacy, use an encrypted DNS resolver (DoH or DoT via profile) combined with a trustworthy provider. Plain DNS on port 53 is visible to your ISP and any middleboxes on the network regardless of which resolver you pick — the transport must be encrypted to protect query content in transit.

Summary: Which Method Is Right for You

  • Home Wi-Fi only, quick change: Settings > Wi-Fi > Info icon > Configure DNS > Manual.
  • All connections including cellular, maximum privacy: Install a DoH/DoT configuration profile from your chosen resolver.
  • Content filtering or parental controls: Use Quad9, OpenDNS, or Cloudflare for Families via profile or app.
  • Every device on your home network: Change DNS on your router's DHCP settings.

Whichever method you choose, take two minutes to verify it's working using the diagnostic steps above. A misconfigured DNS setting that falls back silently to your ISP's resolver defeats the entire purpose of making the change in the first place.