Android Private DNS Setup

Configure DNS-over-TLS (Private DNS) on your Android 9+ device.

🤖 Android devices use Private DNS (DoT) — no profile needed.   → Switch to Apple profile generator

How to Configure Private DNS

Android 9+ supports DNS-over-TLS natively — no app required.

1
Open Settings
Open the Settings app on your Android device.
2
Go to Network & Internet
Tap Network & internet (on some devices: Connections or Wi-Fi & Network).
3
Open Private DNS
Tap Advanced, then tap Private DNS. On Samsung One UI it may be under More connection settings → Private DNS.
4
Select "Private DNS provider hostname"
Choose Private DNS provider hostname (also called Strict mode). This ensures your device always uses the encrypted resolver and never falls back to unencrypted DNS.
5
Enter the hostname and save
Type the DoT hostname from the list below (e.g. mydns.fanmart.org) and tap Save. Your device will verify the connection — a checkmark means it's working.
Strict mode vs. Opportunistic mode In Strict mode (hostname entered), Android refuses to fall back if the DoT server is unreachable — protecting you from DNS leaks. In Opportunistic mode (Automatic), it falls back to unencrypted DNS silently. Strict mode is recommended.

DNS Provider Hostnames

Copy one of these DoT hostnames into the Private DNS field.

FANMART DNS
🏠 Self-hosted
Hidden by default. Enter the FANMART installation password to reveal the hostname for this self-hosted server.
Mullvad DNS
🇸🇪 No-log · Audited
Sweden-based, RAM-only servers, independently audited no-log policy.
DoT Hostname
dns.mullvad.net
9
Quad9
🇨🇭 Swiss Non-profit
Swiss non-profit, malware-blocking, DNSSEC validation.
DoT Hostname
dns.quad9.net
AdGuard DNS
🇨🇾 No-log · Audited
Cyprus-based, ad & tracker blocking, independently audited.
DoT Hostname
dns.adguard-dns.com