Private DNS on Android Pie 9 (DNS over TLS)

CleanBrowsing Editors
CleanBrowsing
Published in
2 min readAug 11, 2018

Android P (Pie) 9 comes with an interesting new feature, called Private DNS.

Private DNS (an implementation of DNS over TLS under the hood) encrypts all your DNS traffic, preventing it from being inspected or modified by third parties. It adds a missing layer of security and privacy to your DNS that was not available before.

CleanBrowsing fully supports DNS over TLS (Private DNS) on all your Anycast DNS public resolvers.

Enabling Private DNS on Android P

To enable private DNS, you have to go to your phone (Android 9 and up) Settings->Network & Internet->Advanced.

In there, you will see the option for Private DNS.

It is Off by default and you can enable it by switching to "Private DNS provider hostname". The available options are:

  • security-filter-dns.cleanbrowsing.org
  • family-filter-dns.cleanbrowsing.org
  • adult-filter-dns.cleanbrowsing.org

Depending on the filtering level you need. That's the break down what each one does:

Security Filter

The security DNS filter blocks access to phishing, malware and malicious domains. Ideal for a security browsing experience, with minimal impact on your day to day. It does not block adult content.

Domain: security-filter-dns.cleanbrowsing.org

Family Filter

The family filter blocks access to all adult, pornographic and explicit sites. It also blocks proxy and VPN domains that are used to bypass the filters. Mixed content sites (like Reddit) are also blocked. Google, Bing and Youtube are set to the Safe Mode. Ideal for kids devices as a parental solution on their Android devices.

Domain: family-filter-dns.cleanbrowsing.org

Adult Filter

The adult filter blocks access to all adult, pornographic and explicit sites. It does not block proxy or VPNs, nor mixed-content sites. Sites like Reddit are allowed. Google and Bing are set to the Safe Mode. Ideal for adults and teens that want to minimize the exposure to adult content.

Domain: adult-filter-dns.cleanbrowsing.org

And that's it. Try Private DNS with CleanBrowsing and let us know what you think.

--

--