Your DNS resolver is the first thing your device contacts every time you open a browser, launch an app, or check email. If that resolver is slow, unresponsive, or far away, every connection you make pays a latency tax before a single byte of real content arrives. Most people are still using the DNS server automatically assigned by their ISP — and in 2026, that is almost always the wrong choice. Public DNS servers from Cloudflare, Google, Quad9, NextDNS, and a handful of others consistently outperform ISP resolvers on speed, reliability, privacy, and security filtering. This guide breaks down exactly which servers are fastest, how to measure them yourself, and how to switch on every major platform.
Why Your ISP DNS Slows You Down
ISP-provided DNS resolvers are not built for performance — they are built to intercept queries, inject ads into NXDOMAIN responses, and collect browsing data for analytics. Their caches are often undersized, their anycast footprints are limited, and they are frequently the first service to fall over during network incidents. Independent benchmarking tools like DNSPerf and dnsperf.com consistently show ISP resolvers adding 20–80 ms of latency compared to top-tier public alternatives, and that gap compounds across every DNS lookup your device makes.
Modern web pages trigger dozens of DNS lookups per page load — analytics scripts, CDN assets, fonts, ad trackers, API endpoints. Shaving 30 ms off each lookup adds up to measurable improvements in page load time and general snappiness. Switching your DNS resolver costs nothing and takes under five minutes.
The Top Public DNS Servers in 2026
Cloudflare 1.1.1.1
Cloudflare runs the most consistently fast public DNS resolver on the planet. Their anycast network spans over 300 cities, meaning a resolver node is almost always within a short network hop of your connection. In global median latency benchmarks, 1.1.1.1 sits between 10 and 20 ms for most regions.
- Primary IPv4: 1.1.1.1
- Secondary IPv4: 1.0.0.1
- Primary IPv6: 2606:4700:4700::1111
- Secondary IPv6: 2606:4700:4700::1001
- DNS over HTTPS: https://cloudflare-dns.com/dns-query
- DNS over TLS hostname: one.one.one.one
Cloudflare also offers 1.1.1.2 (malware blocking) and 1.1.1.3 (malware plus adult content filtering) for households that want basic protection without a full filtering platform.
Google Public DNS 8.8.8.8
Google's resolver is the most widely deployed public DNS service in the world, which means its cache hit rate is exceptionally high. For popular domains, Google frequently returns cached answers in single-digit milliseconds. Its global anycast footprint rivals Cloudflare's, and its uptime record over the past decade is essentially flawless.
- Primary IPv4: 8.8.8.8
- Secondary IPv4: 8.8.4.4
- Primary IPv6: 2001:4860:4860::8888
- Secondary IPv6: 2001:4860:4860::8844
- DNS over HTTPS: https://dns.google/dns-query
- DNS over TLS hostname: dns.google
The privacy trade-off with Google is well-documented — query logs are retained for 24 to 48 hours and linked to Google's broader infrastructure. If that concerns you, Cloudflare or Quad9 are better choices.
Quad9 9.9.9.9
Quad9 is operated by a Swiss nonprofit and blocks known malicious domains by default using threat intelligence from over 25 cybersecurity partners including IBM X-Force and Proofpoint. It does not log IP addresses, which makes it genuinely privacy-respecting. Latency is slightly higher than Cloudflare and Google in North America and Europe, but the automatic malware blocking makes it an excellent default for home networks and small businesses.
- Primary IPv4 (secured): 9.9.9.9
- Secondary IPv4 (secured): 149.112.112.112
- Primary IPv4 (unsecured, no filtering): 9.9.9.10
- DNS over HTTPS: https://dns.quad9.net/dns-query
- DNS over TLS hostname: dns.quad9.net
NextDNS
NextDNS is the most configurable public DNS service available in 2026. It functions as a cloud-based filtering platform with a free tier (300,000 queries per month) and paid tiers for unlimited use. You get a personalized resolver endpoint, blocklists from dozens of sources, per-device profiles, query logs with analytics, and parental controls. For technically inclined users and families, it is the clear winner on features.
- Setup: Create an account at nextdns.io, get your unique resolver ID, and configure the provided IPs or DoH/DoT endpoints.
- DNS over HTTPS: https://dns.nextdns.io/[your-id]
- Free tier limit: 300,000 queries/month, then falls back to unfiltered mode
OpenDNS (Cisco)
OpenDNS has been around since 2006 and remains a solid choice, particularly for businesses using the Umbrella platform. The free home tier offers phishing and malware blocking plus optional content filtering. Latency is competitive but generally a step behind Cloudflare and Google in most regions.
- Primary IPv4: 208.67.222.222
- Secondary IPv4: 208.67.220.220
AdGuard DNS
AdGuard DNS provides ad blocking and tracker blocking at the DNS level, similar to running a Pi-hole but without any hardware. The default endpoints block ads and trackers; family protection adds adult content filtering on top. Response times are competitive in Europe and North America.
- Primary IPv4 (default, ad blocking): 94.140.14.14
- Secondary IPv4: 94.140.15.15
- DNS over HTTPS: https://dns.adguard-dns.com/dns-query
How to Benchmark DNS Servers From Your Own Location
Global averages are useful context, but the fastest resolver for you is the one with the lowest latency from your specific location. Run these commands before and after switching to verify real-world improvement.
On Windows (PowerShell or CMD):
For a more scientific comparison on Windows, use the open-source tool namebench or DNS Benchmark from Gibson Research Corporation (grc.com/dns). DNS Benchmark tests over 70 resolvers from your machine and ranks them by actual response time.
On macOS or Linux:
Run each command three or four times and average the query times. The resolver with the lowest consistent average wins for your network.
How to Switch DNS Servers on Every Platform
Windows 11
- Open Settings and go to Network and Internet.
- Click your active connection (Wi-Fi or Ethernet), then click Hardware properties.
- Next to DNS server assignment, click Edit.
- Switch the dropdown from Automatic (DHCP) to Manual.
- Toggle IPv4 on. Enter your preferred DNS in the first field and alternate DNS in the second.
- Optionally set DNS over HTTPS to On (automatic template) if your chosen resolver supports DoH.
- Click Save and flush the cache: ipconfig /flushdns
macOS Ventura and Later
- Open System Settings and go to Network.
- Select your active interface (Wi-Fi or Ethernet) and click Details.
- Click the DNS tab.
- Click the + button and add your preferred DNS servers.
- Click OK then Apply.
- Flush the DNS cache: sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder
Android
Modern Android versions support Private DNS (DNS over TLS) natively, which is the cleanest way to switch.
- Go to Settings and search for Private DNS.
- Select Private DNS provider hostname.
- Enter the DoT hostname of your chosen resolver (e.g., one.one.one.one for Cloudflare or dns.quad9.net for Quad9).
- Tap Save. Android will encrypt all DNS queries to this resolver automatically.
iPhone and iPad (iOS 17+)
iOS supports encrypted DNS profiles. The easiest method is to download a configuration profile:
- Cloudflare provides profiles at 1.1.1.1/ (their iOS app installs one automatically).
- Quad9 and NextDNS also publish signed profiles on their respective sites.
- Alternatively, for per-network manual DNS, go to Settings then Wi-Fi, tap the info icon next to your network, scroll to Configure DNS, and switch to Manual.
Home Router (Applies to All Devices on Your Network)
Changing DNS at the router level is the most efficient approach — every device on your network benefits without individual configuration. The admin interface varies by brand:
- Netgear: routerlogin.net — go to Advanced, Setup, Internet Setup, and update the DNS fields
- TP-Link: tplinkwifi.net or 192.168.0.1 — go to Advanced, Network, Internet, and set Primary/Secondary DNS
- ASUS: asusrouter.com or 192.168.1.1 — go to WAN, Internet Connection, and scroll to WAN DNS Setting
- Linksys: 192.168.1.1 — go to Connectivity, Internet Settings, and enter DNS manually
- D-Link: 192.168.0.1 — go to Setup, Internet, and update Static DNS fields
After saving router settings, restart the router and then clear the DNS cache on any already-connected devices to ensure they pick up the new resolver immediately.
Verifying Your DNS Change Worked
Do not assume the change took effect — verify it. Use our DNS Lookup tool to query a domain and check which nameservers are responding. From the command line, the fastest verification is:
On Windows, you can also run ipconfig /all and look for the DNS Servers line under your active adapter to confirm the addresses are set correctly.
Privacy Considerations When Choosing a Resolver
Speed is not the only variable. Consider what each provider does with your query data:
- Cloudflare 1.1.1.1: Logs are wiped within 24 hours; no query data sold; audited annually by KPMG
- Google 8.8.8.8: Query logs retained 24–48 hours; linked to Google account data on signed-in devices
- Quad9: No IP address logging; operated by a nonprofit under Swiss privacy law
- NextDNS: Logs available to you in your dashboard; you control retention period; data not sold
- AdGuard DNS: No personally identifiable query logs on default endpoints
If you are on a corporate network or subject to compliance requirements, verify your chosen resolver's data processing agreement before deploying it organization-wide.
Which DNS Server Should You Actually Use
For most home users who want the fastest possible response time with no configuration overhead, start with 1.1.1.1 and 1.0.0.1. Cloudflare's combination of global anycast, excellent cache hit rates, and strong privacy practices makes it the default recommendation in 2026.
For home networks with children or mixed-trust devices, Quad9 9.9.9.9 adds automatic malware blocking with no logging — a meaningful security upgrade over bare 1.1.1.1 at minimal latency cost.
For power users who want blocklists, per-device rules, analytics dashboards, and parental controls, NextDNS is the right choice. The 300,000 query free tier is enough for a single user; households will want a paid subscription.
For environments where the highest possible cache hit rate on popular domains is the priority — such as a busy office network where latency on productivity SaaS matters — Google 8.8.8.8 remains competitive and its reliability record is hard to argue with.
Whatever you choose, any of the resolvers listed here will outperform a typical ISP DNS server. Make the switch, benchmark your results, and stop paying a latency tax on every connection your device makes.