What Is DNS and Why Does It Matter?
When you type "google.com" your device asks a DNS server to translate it to an IP address like 142.250.80.46. By default, your ISP handles this — and logs every single lookup. Changing DNS is one of the most overlooked improvements available: it's free, takes 2 minutes, and applies to every device on your network.
Better DNS Servers — Free Upgrades
| DNS Provider | Addresses | Speed | Privacy | Best For |
|---|---|---|---|---|
| Cloudflare | 1.1.1.1 / 1.0.0.1 | Fastest globally ✓ | Strong ✓ | Speed + privacy |
| 8.8.8.8 / 8.8.4.4 | Very fast ✓ | Limited | Reliability | |
| Quad9 | 9.9.9.9 | Fast | Strong ✓ | Malware blocking |
| OpenDNS Family | 208.67.222.123 | Good | Moderate | Parental controls |
Change these in your router's settings under WAN or Internet → DNS. Setting it on the router applies to every device automatically.
Pi-hole — Block Ads Across Your Entire Home Network
Pi-hole is a free, open-source DNS server you run on a Raspberry Pi (~$35). It intercepts DNS queries and blocks known ad and tracking domains — ads disappear on every TV, phone, computer, and tablet on your network simultaneously.
Get a Raspberry Pi Zero 2W or Pi 4
The Pi Zero 2W (~$15) is plenty for most homes. Add a microSD card and power supply.
Install Pi-hole with the one-line installer
Connect to your router via ethernet. Run curl -sSL https://install.pi-hole.net | bash. The installer walks through configuration.
Point your router's DNS to the Pi
In your router admin panel, set the primary DNS to your Pi-hole's IP address. All DNS queries now go through Pi-hole first.
Pi-hole typically blocks 20–30% of all DNS queries in a typical household — ads, trackers, and telemetry silently phoning home from every device.
DNS over HTTPS (DoH) — Stop ISP DNS Tracking
Standard DNS queries are unencrypted — your ISP can read every one. DNS over HTTPS encrypts DNS traffic so it looks like normal web traffic. Enable it in Firefox (Settings → Privacy → DNS over HTTPS), Chrome (Settings → Privacy → Use secure DNS), or on your router if it supports it.