Our public encrypted DNS service uses DNS over HTTPS (DoH) and DNS over TLS (DoT). This protects your DNS queries from being snooped on by third parties when not connected to our VPN service as your DNS queries are encrypted between your device and our DNS server. This service is primarily meant to be used when you are disconnected from our VPN service, or on devices where it's not possible or desirable to connect to the VPN. When you are already connected to our VPN service the security benefits of using encrypted DNS is negligible and it will always be slower than using the DNS resolver on the VPN server that you are connected to. You can use this privacy-enhancing service even if you are not a Mullvad customer. What this guide covers

Mullvad encrypted DNS service features Specifications How to use this service

Web browsers Mobile device operating systems

Android iOS / iPadOS

Desktop operating systems

Windows 11 macOS Linux

How do I know it’s working? DNS server locations How the content blocking works Notes Known issues

Not working right? See Known issues in the bottom of this guide. Mullvad encrypted DNS service features This service provides encrypted DNS queries with the following features:

Content blocking: We provide basic content blocking options to block ads, trackers, malware, adult content, gambling and social media. QNAME minimization: This enables our DNS servers to resolve your queries while giving it as little information as possible about the queries to other DNS servers involved in the resolving process. Anycasted service: Multiple Mullvad servers in different locations are configured to provide the same DNS service. Your DNS queries are meant to be routed to the geographically closest server, although peering and routing between Internet providers might affect this. Should the server closest to you be completely offline your queries will be routed to the second-closest and so on. Read more about anycast under Known issues.

A limited DNS