Based in United States. Supports: DNS-over-TLS (DoT) and DNS-over-HTTPS (DoH).
Reviewed by Gabriel Bachmann
Cloudflare
one.one.one.one 2 ratings so far*
Threat level
Covered
A covered pick. Anyone can use it as a private drop-in, with no setup or know-how. Enough for most people. Threat levels
Our take
Fast and trivially easy to set up, with DoT and DoH support and a long history of strong uptime, which is why so many devices ship pointing at it. The unavoidable tension is concentration: handing one large US company a big share of the world’s DNS is a real privacy and centralization concern regardless of their policies. Fine if you value speed and simplicity; reach for a smaller resolver or your own if reducing reliance on big infrastructure matters.
Website at a glance
one.one.one.one
B+ score 80
Solid website security headers
Graded by Mozilla HTTP Observatory, tested 13d ago
Inspect this site yourself
Measures the security configuration of the tool's own website, not the privacy of the product itself. A strong tool can still score low here.
Cloudflare alternatives
NextDNS The major advantage of NextDNS over AdGuard DNS is to be able to configure the service to your needs via parental controls, website restrictions or block whole categories of…
AdGuard DNS Easy to setup within minutes. Comes with setup guides for all systems. You only need to enter two IP adresses.
Mullvad DNS Free public encrypted DNS resolver from Mullvad VPN, supporting DoH and DoT. Available in six filtering variants including ad-blocking, malware, and family-safe options. No account required.
Quad9 Based in Switzerland. Supports: DNS-over-TLS (DoT), DNS-over-HTTPS (DoH) and DNSCrypt.
Nebulo (Android) Non-root, small-sized DNS changer utilizing DNS-over-HTTPS and DNS-over-TLS.
DNSCloak (iOS) Allows for the use for dnscrypt-proxy on an iPhone or iPad, which gives users the ability to encrypt their DNS requests through the use of an on-device VPN profile.
* Average ratings will show on this page once the threshold of 5 ratings is reached.