Every time you open a website, your device quietly asks a question — “what is the address for this name?” — and for years it asked out loud, where anyone on the network could listen. DNS-over-HTTPS changes that by sealing the question in an envelope. Our GetMyPassword team explains what DNS-over-HTTPS is, what it protects, and what it does not.
First, what DNS does
DNS is the internet’s phone book. You type a name like example.com, and DNS looks up the numeric IP address your device actually connects to. It happens dozens of times as a single page loads. The catch: traditionally these lookups travel unencrypted, so your internet provider, a network owner, or anyone snooping on public Wi-Fi can see every domain you ask for — and could even tamper with the answer.
What DNS-over-HTTPS adds
DNS-over-HTTPS (DoH) wraps those lookups in the same encryption that protects websites. The question and answer travel inside HTTPS, so a snoop on the network can no longer read which domains you are visiting or quietly swap in a fake address. Instead of shouting the name across the room, your device whispers it through a sealed channel to a DNS resolver that answers privately.
What it does not do
- It is not a VPN — it hides your DNS questions, not all your traffic or your IP address.
- The site still knows you visited — DoH protects the lookup, not your connection to the destination.
- You shift trust from your provider to the DoH resolver you choose, so pick a reputable one.
- It does not replace a strong password — it protects the path, not your accounts.
DNS-over-HTTPS hides which doors you ask about, not the fact that you walked through one. It is a privacy upgrade for your browsing, not an invisibility cloak — and not a substitute for securing your accounts.
How to turn it on
Most modern browsers have a “Secure DNS” or DoH toggle in their privacy settings, and some let you choose the resolver. You can also set a privacy-focused DNS provider system-wide on your phone or computer. It is a worthwhile layer on untrusted networks — but pair it with the basics that actually guard your accounts: a unique password from our password generator on each one and two-factor authentication.
Frequently asked questions
What is DNS-over-HTTPS?
It is a way to encrypt the lookups that turn website names into IP addresses. By wrapping DNS inside HTTPS, it stops others on the network from seeing which domains you visit or tampering with the answers.
Is DNS-over-HTTPS the same as a VPN?
No. DoH only encrypts your DNS questions, while a VPN routes and encrypts your wider traffic and hides your IP address. DoH is a focused privacy improvement, not a full replacement for a VPN.
How do I enable DNS-over-HTTPS?
Most modern browsers have a “Secure DNS” or DoH setting in their privacy options, and you can pick a reputable resolver. You can also configure a privacy-focused DNS provider system-wide on your device.