Notes 
Based in United States. Supports: DNS-over-TLS (DoT) and DNS-over-HTTPS (DoH).
Reviewed by Gabriel Bachmann
Cloudflare
one.one.one.one 3.8 (5)
Threat level
Covered
A covered pick. Anyone can use it as a private drop-in, with no setup or know-how. Enough for most people. Threat levels
Our take
Fast and trivially easy to set up, with DoT and DoH support and a long history of strong uptime, which is why so many devices ship pointing at it. The unavoidable tension is concentration: handing one large US company a big share of the world’s DNS is a real privacy and centralization concern regardless of their policies. Fine if you value speed and simplicity; reach for a smaller resolver or your own if reducing reliance on big infrastructure matters.
Website at a glance
one.one.one.one
B+ score 80
Solid website security headers
Graded by Mozilla HTTP Observatory, tested 3d ago
Inspect this site yourself
Measures the security configuration of the tool's own website, not the privacy of the product itself. A strong tool can still score low here.
Cloudflare alternatives
NextDNS The major advantage of NextDNS over AdGuard DNS is to be able to configure the service to your needs via parental controls, website restrictions or block whole categories of…
AdGuard DNS Easy to setup within minutes. Comes with setup guides for all systems. You only need to enter two IP adresses.
Quad9 Based in Switzerland. Supports: DNS-over-TLS (DoT), DNS-over-HTTPS (DoH) and DNSCrypt.
Nebulo (Android) Non-root, small-sized DNS changer utilizing DNS-over-HTTPS and DNS-over-TLS.
DNSCloak (iOS) Allows for the use for dnscrypt-proxy on an iPhone or iPad, which gives users the ability to encrypt their DNS requests through the use of an on-device VPN profile.
Control D Customizable encrypted DNS resolver supporting DoH, DoT, DoQ, and legacy DNS. Offers a free no-log tier and paid plans with a dashboard, per-device profiles, and content filtering.