Why Change DNS at the Router Level
Your router is the gateway between your home network and the internet. Every device that connects to it — phones, laptops, tablets, smart TVs, game consoles, smart speakers, security cameras — sends its DNS queries through the router by default. The router forwards those queries to whatever DNS server your ISP configured.
That default setup has three problems. First, ISP DNS servers are often slow. They are shared across thousands of customers, rarely optimized for low latency, and sometimes geographically distant from where you actually live. Second, many ISP DNS servers log every domain you visit, building a complete picture of your browsing habits. Third, some ISPs use DNS hijacking to redirect failed lookups to ad-filled search pages, which breaks things like ad blockers and VPN configurations.
Changing DNS at the router level solves all three problems at once. Instead of configuring DNS on each device individually — a tedious process that is easy to miss on some gadgets — you set it once at the router and every device on your network inherits the new settings automatically. A smart TV you forgot about, a guest's phone, a kid's tablet, a security camera that does not even have a DNS settings menu — they all start using the new resolver without any extra work.
The process takes about ten minutes, costs nothing, and is completely reversible. If you do not like the results, you can revert the settings in the same menu and your network goes back to the ISP defaults within seconds.
What You Need Before Starting
Gather these three things before you begin. The entire process goes faster when you have everything ready.
1. Your router's admin login
You need the username and password to access the router's web interface. If you never changed the defaults, they are printed on a sticker on the bottom or back of the router. Common defaults:
- TP-Link: admin / admin
- Netgear: admin / password
- ASUS: admin / admin
- Linksys: admin / admin
- Xiaomi: admin / admin (or no password)
If you changed the password and cannot remember it, you may need to reset the router to factory settings. That means pressing and holding the reset button (usually a small pinhole) for 10 seconds. This erases all custom settings — Wi-Fi name, password, port forwards — so only do this as a last resort.
2. Your router's IP address
You need the address you type into a browser to reach the admin panel. On most home networks it is one of these:
192.168.1.1
192.168.0.1
10.0.0.1
If you are not sure, find it on your computer. On Windows, open Command Prompt and run ipconfig. Look for the "Default Gateway" line under your active connection. On Mac, go to System Settings, click Network, select your connection, and look at the router address in the details. The address is also usually printed on the router's label alongside the login credentials.
3. Your preferred DNS addresses
These are the servers you want your network to use instead of your ISP's defaults. If you have not picked one yet, here are the three most popular options:
- Cloudflare — Primary:
1.1.1.1, Secondary: 1.0.0.1. Fastest global resolver, strong privacy policy. Logs purged within 24 hours.
- Google Public DNS — Primary:
8.8.8.8, Secondary: 8.8.4.4. Massive infrastructure, near-100% uptime, widely trusted.
- Quad9 — Primary:
9.9.9.9, Secondary: 149.112.112.112. Built-in security: blocks known malicious domains automatically.
For a more detailed comparison, see our best DNS servers list. To find the fastest option for your specific location, run our DNS speed test first — it tests 17+ providers simultaneously and shows you exactly which one responds fastest from where you are.
General Steps (Any Router)
Every router brand has a slightly different menu layout, but the core process is the same. These steps work as the starting point for any router. Skip ahead to the brand-specific sections if you want exact menu paths.
Step 1: Connect to your network
Make sure your computer is connected to the router you want to configure — either via Wi-Fi or with an Ethernet cable. If you are on a different network, you will not be able to reach the router's admin panel. A wired connection is more reliable during configuration since it will not drop if the router restarts.
Step 2: Find the router IP address
Open a browser and try these addresses in the address bar:
http://192.168.1.1
http://192.168.0.1
http://10.0.0.1
If none of them load, check the router label or run ipconfig (Windows) / check network settings (Mac) to find the default gateway address.
Step 3: Log in
Enter the admin username and password. If you never changed them, check the sticker on the router. The defaults are listed in the What You Need section above.
Step 4: Find the DNS settings
Look for a section labeled WAN, Internet, Internet Connection, or DHCP Server. The exact name varies by brand. Inside that section, look for DNS server fields. Some routers show them as two text boxes labeled "Primary DNS" and "Secondary DNS." Others have a dropdown that lets you switch from "Get automatically from ISP" to "Use the following DNS server addresses."
Step 5: Enter your DNS addresses
Type your preferred DNS addresses into the primary and secondary fields. If you only have one address, put it in the primary field and leave secondary blank. Most routers accept both IPv4 addresses like 1.1.1.1 and IPv6 addresses like 2606:4700:4700::1111.
Step 6: Save and restart
Click Save, Apply, or OK. Some routers apply the change immediately. Others require a reboot. If you do not see a restart prompt, unplug the router's power cable for 30 seconds, then plug it back in. Wait for the status lights to stabilize — usually about one to two minutes.
Step 7: Flush DNS cache on your devices
After the router restarts, your devices may still hold cached DNS entries from the old resolver. To force them to use the new DNS immediately, flush the DNS cache on each device. On Windows, run ipconfig /flushdns in Command Prompt (as administrator). On Mac, run sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder in Terminal. On phones, toggling airplane mode on and off works. See our complete DNS flush guide for every platform.
How to Change DNS on TP-Link Routers
TP-Link is one of the most popular router brands worldwide. The exact menu structure depends on the firmware version, but the newer interface is the most common.
Newer TP-Link firmware ( Archer series, Deco, most 2020+ models)
- Open a browser and go to
192.168.0.1 or tplinkwifi.net.
- Log in with your admin password. If you never set one, check the router label.
- Click Advanced in the top navigation.
- In the left sidebar, click Network, then click WAN.
- Scroll down to the DNS section.
- If there is a dropdown, change it from Get Dynamically from ISP to Use the following DNS Addresses.
- Enter your primary DNS address (for example
1.1.1.1) in the Primary DNS field.
- Enter your secondary DNS address (for example
1.0.0.1) in the Secondary DNS field.
- Click Save.
Older TP-Link firmware
- Go to
192.168.1.1 in your browser.
- Log in with admin / admin.
- Click DHCP in the left menu.
- Click DHCP Settings.
- Find the Primary DNS and Secondary DNS fields.
- Enter your DNS addresses and click Save.
TP-Link Deco (mesh system)
- Open the Deco app on your phone.
- Tap More (bottom right), then tap Advanced, then IPv4.
- Find the DNS section.
- Switch from Auto to Manual.
- Enter your primary and secondary DNS addresses.
- Tap Save.
The Deco app applies the change to all Deco nodes at once, so every unit in your mesh network starts using the new DNS.
How to Change DNS on Netgear Routers
Netgear routers use the NETGEAR Genie or Nighthawk web interface depending on the model. Both have a similar structure for DNS settings.
Netgear Genie / Nighthawk web interface
- Open a browser and go to
routerlogin.net or 192.168.1.1.
- Enter the admin username and password. The default is admin / password. If you changed it and forgot, you will need to factory reset.
- Click ADVANCED in the top tab.
- In the left sidebar, expand Setup and click Internet Setup.
- Scroll down to the Domain Name Server (DNS) Address section.
- Select Use the following DNS server addresses instead of Get automatically from ISP.
- Enter
1.1.1.1 in the Primary DNS field.
- Enter
1.0.0.1 in the Secondary DNS field.
- Click Apply.
The router saves the settings and may restart the internet connection. Wait about 30 seconds for the connection to re-establish.
Netgear Armor (if enabled)
If you have Netgear Armor (powered by Bitdefender) enabled, it may override your DNS settings to use its own security-focused resolver. Check the Armor settings in the Netgear app or web interface to make sure your custom DNS is not being bypassed.
Using the Nighthawk app
- Open the Nighthawk app on your phone.
- Tap Internet.
- Tap Internet Settings.
- Find the DNS section and switch from automatic to manual.
- Enter your preferred DNS addresses.
- Tap Save.
How to Change DNS on ASUS Routers
ASUS routers use the ASUSWRT firmware, which is shared across most ASUS and ROG router models. The interface is consistent across models.
Changing WAN DNS
- Open a browser and go to
192.168.1.1 or router.asus.com.
- Log in with your admin credentials. Default is admin / admin.
- In the left sidebar, click WAN.
- Click the Internet Connection tab at the top.
- Scroll down to WAN DNS Settings.
- Uncheck Enable forwarder if it is checked (this forces the router to use ISP DNS).
- In the DNS Server1 field, enter
1.1.1.1.
- In the DNS Server2 field, enter
1.0.0.1.
- Click Apply and wait for the page to confirm the changes.
Changing DHCP DNS (for devices requesting DNS via DHCP)
If your devices are set to get DNS via DHCP (which is the default), you may also want to set the DHCP DNS to match:
- Click LAN in the left sidebar.
- Click the DHCP Server tab.
- Under DNS settings, set the DNS Server1 and DNS Server2 to the same addresses you entered under WAN.
- Click Apply.
ASUS Router app
- Open the ASUS Router app.
- Tap the settings icon, then tap Internet.
- Find the DNS settings and switch from automatic to manual.
- Enter your preferred DNS addresses and save.
ASUS routers are also compatible with custom firmware like Merlin, which adds additional DNS options including DNS-over-HTTPS. If you are running Merlin firmware, the DNS settings are in the same location but with extra options for encrypted DNS.
How to Change DNS on Linksys Routers
Linksys routers have a straightforward interface. The exact labels depend on whether you use the web interface or the Linksys app.
Linksys web interface
- Open a browser and go to
192.168.1.1 or myrouter.local.
- Log in with your admin password. If you never set one, the router may have no password by default on some models.
- Click Connectivity in the left sidebar.
- Click the Internet Settings tab.
- Find the Static DNS section.
- Enter
1.1.1.1 in Static DNS 1.
- Enter
1.0.0.1 in Static DNS 2.
- You can optionally enter a third DNS in Static DNS 3 (leave blank if you do not need one).
- Click Save.
Linksys routers apply the change after a brief reconnection. Wait 15 to 30 seconds for the internet connection to come back up.
Linksys app
- Open the Linksys app.
- Tap Menu (three lines), then tap Internet Settings.
- Tap DNS.
- Switch from automatic to manual entry.
- Enter your DNS addresses and tap Save.
Linksys Velop mesh systems
For Velop mesh systems, the DNS settings apply to all nodes automatically. You do not need to configure each node individually. The primary node (the one connected to your modem) controls the DNS for the entire mesh network.
How to Change DNS on Xiaomi and Redmi Routers
Xiaomi routers (including Redmi and Mi series) use a web interface that is accessible through a browser. The interface is clean and modern, though it differs from Western router brands.
Web interface
- Open a browser and go to
192.168.31.1 or miwifi.com.
- Log in with your admin password. If you never set one, the default is often no password, or it is printed on the router label.
- Click the Settings gear icon in the top-right corner.
- Click Wi-Fi Settings in the sidebar, then click Internet Settings.
- Look for the DNS section. Some Xiaomi firmware versions have a Custom DNS toggle.
- Toggle Custom DNS on (if available).
- Enter your primary and secondary DNS addresses in the fields that appear.
- Click Save.
Alternative path for older firmware
On older Xiaomi router firmware, the DNS settings are under Advanced Settings > DHCP. Enter the DNS addresses in the DHCP DNS fields. This method sets the DNS that the router hands out to devices via DHCP, which achieves the same result.
Xiaomi Mi Wi-Fi app
- Open the Mi Wi-Fi app.
- Tap the router, then tap Settings.
- Look for Wi-Fi Settings or DNS Settings.
- Enter your preferred DNS addresses and save.
Xiaomi routers sold in certain regions may have firmware variations. If you cannot find the DNS setting in the web interface, check if your firmware is up to date under Settings > System Status > Upgrade.
DHCP DNS vs. Per-Device DNS
When you change DNS at the router level, there are actually two different places where DNS can be set, and understanding the difference helps avoid confusion.
WAN DNS (the DNS your router itself uses)
This is the DNS server that the router forwards queries to when it needs to resolve a domain. It is usually found under WAN or Internet Connection settings. Changing this tells the router which upstream resolver to use. However, this setting alone does not always determine what DNS your devices get.
DHCP DNS (the DNS your router hands out to devices)
This is the DNS server that the router assigns to your devices through DHCP — the protocol that automatically configures network settings on connected devices. It is usually found under LAN or DHCP Server settings. If you change WAN DNS but leave DHCP DNS on "automatic," your devices may still receive the ISP's DNS addresses from the router's DHCP responses.
Which one should you change?
Both. The safest approach is to change both WAN DNS and DHCP DNS to your preferred addresses. This ensures that:
- The router itself uses the new DNS for its own lookups.
- Every device that connects to the network gets the new DNS via DHCP.
- There is no conflict between what the router uses and what it assigns.
If your router only shows one DNS setting (some simpler models only have one), change that one. It will typically affect both the router's own resolution and what gets assigned to devices.
What about devices with static DNS?
If you previously set DNS manually on a specific device (like your laptop or phone), that device will use its manual setting instead of the router's DHCP DNS. Device-level settings always take priority over DHCP. If you want the router's DNS to apply, remove any manual DNS configuration on individual devices and let them get DNS automatically.
For a deeper explanation of how DNS assignment works across platforms, see our complete guide to changing DNS on any device.
What If Your ISP Locks DNS Settings
Some internet service providers configure their equipment to prevent you from changing DNS. You may find that the DNS fields are grayed out, that the settings revert to automatic after you save, or that the router admin panel does not have DNS options at all. This is common with ISP-provided router-modem combo units.
When this happens, you have several options.
Option 1: Set DNS on individual devices
If you cannot change DNS at the router, configure it on each device separately. This is more tedious, but it works. See our device-specific DNS guide for step-by-step instructions on Windows, Mac, iPhone, and Android. The downside is that any new device — a guest's phone, a smart TV, an IoT gadget — will still use the ISP DNS until you configure it manually.
Option 2: Use your own router
Buy your own router and connect it to the ISP modem. Put the ISP modem in bridge mode (or DMZ mode) so it passes the internet connection through without interfering. Your router then handles all DNS, Wi-Fi, and network management. This is the cleanest solution if you are comfortable with basic networking.
Option 3: Custom firmware
If your router supports it, flashing custom firmware like DD-WRT, OpenWrt, or Tomato unlocks full control over DNS settings. Custom firmware bypasses ISP restrictions and often adds features like DNS-over-HTTPS and DNS-over-TLS. However, this is an advanced option — flashing the wrong firmware or interrupting the process can brick your router.
Option 4: Pi-hole or local DNS resolver
Running a local DNS resolver like Pi-hole on a Raspberry Pi gives you complete control over DNS regardless of what the router allows. Your devices point to the Pi-hole's IP address, and the Pi-hole forwards queries to your chosen upstream resolver. This also adds network-wide ad blocking as a bonus.
How to Verify It Worked
After changing the DNS on your router and rebooting it, you want to confirm the new settings are active. There are two things to verify: that the change took effect, and that performance actually improved.
Check DNS on your computer
On Windows, open Command Prompt and run:
ipconfig /all
Look for the DNS Servers line under your active connection. It should show the addresses you entered (like 1.1.1.1 and 1.0.0.1), not your ISP's addresses.
On Mac, open Terminal and run:
scutil --dns
Look at the "nameserver" entries. They should match your new DNS addresses.
On Linux, run:
resolvectl status
Or check /etc/resolv.conf directly.
Visit your DNS provider's verification page
Most DNS providers have a web page that confirms you are using their resolver:
- Cloudflare: visit https://1.1.1.1 — it confirms Cloudflare DNS is active
- Google: visit https://dns.google — it shows your current DNS provider
- Quad9: visit https://quad9.net — it confirms Quad9 is active
If the verification page says you are still using your ISP's DNS, the router change may not have taken effect. Double-check that you saved the settings and rebooted the router. Also verify that you changed both WAN DNS and DHCP DNS if your router has separate fields for each.
Run a DNS speed test
Once you confirm the new DNS is active, measure the difference. Run our DNS speed test to see response times from your new resolver and compare them to your old ISP DNS. Run the test two or three times at different times of day for consistent numbers. For most people, switching from an ISP DNS to Cloudflare or Google cuts resolution time by 30 to 80 percent.
Check all devices
If you changed DNS at the router level, every device on your network should be using the new resolver. Pick a phone, a tablet, and a laptop and verify each one. If any device is still showing the old DNS, it may have a manual DNS configuration that overrides DHCP. Remove the manual DNS setting on that device and let it reconnect to the network.
Frequently Asked Questions
Will changing DNS on my router affect every device?
Yes. Every device that connects to the router — phones, laptops, tablets, smart TVs, game consoles, smart home devices, security cameras — will automatically use the new DNS. This is the main advantage of changing DNS at the router level instead of on each device individually.
Do I need to restart my router after changing DNS?
It depends on the router. Some apply changes immediately, others need a restart. If you are not sure, restart it anyway. Unplug the power for 30 seconds, plug it back in, and wait for the status lights to stabilize. This also clears the router's DNS cache.
Will changing DNS on my router increase my internet speed?
It does not increase your download or upload bandwidth. What it improves is how quickly domain names are resolved. Faster DNS resolution means websites start loading sooner. The difference is small on individual lookups (20 to 100 milliseconds) but adds up on modern pages that trigger 30 to 50 DNS lookups each.
Is it safe to change DNS on my router?
Yes. Changing DNS only affects how domain names are translated to IP addresses. It does not affect your files, programs, or any other aspect of your network. Public DNS servers from Cloudflare, Google, and Quad9 are used by millions of people worldwide. The change is completely reversible.
What DNS should I use for my router?
It depends on your priorities. For raw speed, Cloudflare 1.1.1.1 is the fastest global resolver. For built-in security, Quad9 9.9.9.9 blocks known malicious domains automatically. For reliability, Google 8.8.8.8 has near-perfect uptime. For family filtering, OpenDNS FamilyShield (208.67.222.234 / 208.67.220.234) blocks adult content. Run our DNS speed test to see which one is fastest from your location.
Can I use different DNS on the router and on individual devices?
Yes. Device-level DNS settings always override the router's DHCP settings. If you set DNS manually on your laptop, it will use that instead of the router's DNS. If you set DNS on the router and want it to apply everywhere, make sure individual devices are set to get DNS automatically.
Will changing DNS on my router break anything?
It is very unlikely. If the new DNS server is unreachable or misconfigured, your devices will simply fail to resolve domain names and websites will not load. In that case, revert the router settings to automatic and your network will use the ISP DNS again. There is no risk of permanent damage.
How do I undo DNS changes on my router?
Log in to the router admin panel, go to the same DNS settings section where you made the change, and switch it back to "Get automatically from ISP" or "Obtain DNS server address automatically." Save the settings and restart the router. All devices will revert to the ISP DNS within minutes.
Does DNS over HTTPS or DNS over TLS work at the router level?
Not on most consumer routers. Standard DNS from your router to the resolver is unencrypted (plain UDP or TCP). However, individual devices can use encrypted DNS (DoH or DoT) independently of the router. Some custom firmware like OpenWrt and Merlin support DNS-over-HTTPS at the router level. If privacy is a priority, enable DoH or DoT on your devices in addition to changing the router DNS.
Should I change DNS on my router if I already changed it on my computer?
If you only use one computer and it already has custom DNS configured, changing the router DNS is redundant for that device. But the router change benefits every other device on your network that does not have custom DNS configured. For most households, changing DNS at the router level is the most efficient approach.