Securing Your Windows 11 Network with DNS over HTTPS (DoH) via Cloudflare

DNS over HTTPS (DoH) is a privacy-enhancing protocol that encrypts your DNS queries, preventing your internet service provider (ISP) and other potential eavesdroppers from seeing which websites you visit. Cloudflare offers a robust and widely trusted DoH service, making it an excellent choice for Windows 11 users looking to improve their online security and privacy.

Why Use DNS over HTTPS?

Enhanced Privacy: DoH encrypts your DNS queries, shielding them from prying eyes. This prevents your ISP from tracking your browsing activity and building a profile of your online behavior.
Improved Security: DoH protects against DNS spoofing and cache poisoning attacks, which can redirect you to malicious websites.
Faster Resolution (Potentially): Cloudflare's global network of servers often provides faster DNS resolution times compared to your ISP's DNS servers.
Censorship Resistance: In regions with internet censorship, DoH can help bypass restrictions by encrypting your DNS requests.

Configuring DoH on Windows 11 with Cloudflare

There are several ways to configure DoH on Windows 11 using Cloudflare. Here are two common methods:

Method 1: Using the Network Settings (Recommended)

This is the simplest and recommended method. Starting with Windows 11 version 22H2, Microsoft directly supports DoH through its network settings.

Open Settings (Win + I).
Click on Network & internet.
Click on Advanced network settings.
Under More options, click on DNS.
Choose DNS over HTTPS (DoH).
Select Cloudflare (1.1.1.1) from the dropdown menu or manually enter https://1dot1dot1dot1.cloudflare-dns.com/dns-query as the custom DoH server address.
Optional: Enable Always use DNS over HTTPS for consistent DoH usage even if you switch networks.

After completing these steps, your Windows 11 system will now use Cloudflare's DoH service.

Method 2: Modifying DNS Settings Directly

For more advanced users or if the above method isn't available, you can directly change your DNS server settings. This is less convenient and generally not needed with modern Windows versions.

Open Control Panel.
Go to Network and Sharing Center.
Click on Change adapter settings.
Right-click on your active network connection (e.g., Wi-Fi or Ethernet) and select Properties.
Select Internet Protocol Version 4 (TCP/IPv4) or Internet Protocol Version 6 (TCP/IPv6), depending on your network.
Click Properties.
Select Use the following DNS server addresses.
For IPv4, enter 1.1.1.1 as the Preferred DNS server and 1.0.0.1 as the Alternate DNS server.
For IPv6, enter 2606:4700:4700::1111 as the Preferred DNS server and 2606:4700:4700::1001 as the Alternate DNS server.
Click OK on all open windows.

This method configures your system to use Cloudflare's DNS servers directly without DoH encryption. While functional, it is less secure than using the built-in DoH setting.

Verifying DoH is Working

After configuring DoH, you can verify it's working by using online tools that detect DoH usage. Several websites provide this functionality. A simple search for "DNS over HTTPS checker" will provide multiple options.

Troubleshooting

If you encounter issues, ensure your network adapter is correctly configured and that your firewall isn't blocking DNS queries over HTTPS on port 443.

Conclusion

Implementing DNS over HTTPS with Cloudflare on your Windows 11 machine significantly enhances your online privacy and security. By following the steps outlined above, you can easily enjoy the benefits of encrypted DNS queries and a more secure browsing experience. Remember to choose the built-in DoH settings within Windows for the best and most secure experience.