We deeply admire the work of the folks at Mullvad. They now offer a free, public DNS resolver which supports DNS over HTTPS (DoH) and DNS over TLS (DoT).
This service encrypts every DNS query between your device and Mullvad’s servers, preventing ISPs, Wi‑Fi operators, or other intermediaries from seeing or tampering with the sites you look up when you are not on the VPN.
Six hostnames let you add ad‑, tracker‑, malware‑, adult‑, gambling‑ and social‑media‑blocking; requests are steered by anycast to the nearest node and QNAME minimization hides full domain names from upstream resolvers.
The service is open to everyone (no account needed) and has step‑by‑step setup guides for major browsers plus Android, iOS/iPadOS, Windows 11, macOS and Linux.
Benefits: stronger privacy, optional lightweight content filtering, reduced DNS‑leak and censorship risk, and a secure fallback for devices or situations where running a full VPN is impractical.
URLs for DoH / DoT
- https://dns.mullvad.net/dns-query
- https://adblock.dns.mullvad.net/dns-query
- https://base.dns.mullvad.net/dns-query
- https://extended.dns.mullvad.net/dns-query
- https://family.dns.mullvad.net/dns-query
- https://all.dns.mullvad.net/dns-query
ChromeOS setup
Source: https://mullvad.net/en/help/dns-over-https-and-dns-over-tls