For iPhone, iPad and Mac

Encrypted DNS for every app on your device

DNS Security turns on DNS over HTTPS or DNS over TLS system-wide in one tap. Your DNS lookups stay private and tamper-proof, and the rest of your traffic never goes through a VPN server.

  • No VPN, no traffic routing
  • No data collection
  • Built on Apple's encrypted DNS
DNS Security app with encrypted DNS enabled

Everything you need for private DNS

Pick a trusted resolver, switch it on, and every app on your device resolves names over an encrypted connection.

One-tap encrypted DNS

Turn on DNS over HTTPS or DNS over TLS from the Connect tab, then confirm the DNS profile in Settings.

Trusted DNS providers

Ready-made profiles for Cloudflare, Google Public DNS, AdGuard DNS, Quad9 and more, including malware and family filters.

Custom DNS profiles Pro

Add your own DoH or DoT server with built-in validation for server addresses and server names.

Wi-Fi SSID rules Pro

Decide which Wi-Fi networks use encrypted DNS, for example off at home and on everywhere else.

DNS status check

See the active DNS profile, protocol, proxy state and network status at a glance.

Shortcuts support Pro

Switch DNS profiles from Shortcuts or other apps with the custom URL scheme and automate your setup.

A closer look

A clean, native interface designed for iOS, iPadOS and macOS.

DNS Security Connect screen showing encrypted DNS enabled with the AdGuard DNS over TLS profile
Secure DNS in one tap
Screen for adding a custom DNS over HTTPS or DNS over TLS profile
Custom DoH and DoT profiles
DNS Security Status screen with the active DNS profile, protocol and network status
Verify your DNS status
DNS Security Pro screen showing all Pro features included
DNS Security Pro, everything included
DNS Security Lite screen offering Pro features as an in-app purchase
Lite with optional Pro upgrade
DNS Security Lite showing custom DNS profiles as a Pro feature
Advanced tools for Pro

How DNS Security protects you

Every time you open a website or an app connects to a server, your device first asks a DNS resolver for its address. Normal DNS sends these questions in plain text, so anyone on the network, including public Wi-Fi operators and internet providers, can read or change them.

DNS Security configures Apple's system encrypted DNS so these lookups are sent over DNS over HTTPS or DNS over TLS to the provider you choose. Only DNS is affected, so your speed and your other traffic stay exactly as they were.

  1. Choose a DNS profilePick a built-in provider in the Config tab or add your own.
  2. Turn it onEnable the switch in the Connect tab.
  3. Confirm in SettingsGo to General › VPN & Network › DNS and select DNS Security.

Choose your version

Both apps use the same encrypted DNS engine. Pick the one that fits you.

DNS Security Lite app icon

DNS Security Lite

Free, with optional Pro upgrade

  • One-tap DNS over HTTPS and DNS over TLS
  • Built-in trusted DNS providers
  • DNS status check
  • Unlock Pro features with an in-app purchase
Download Lite on the App Store

Frequently asked questions

Is DNS Security a VPN?

No. DNS Security uses Apple's built-in encrypted DNS settings, so only DNS lookups are sent to the resolver you choose. The rest of your traffic goes directly to the internet as usual and is never routed through an app server.

What is the difference between DNS over HTTPS and DNS over TLS?

Both encrypt DNS queries between your device and the DNS resolver. DNS over HTTPS (DoH) sends queries inside regular HTTPS traffic on port 443, while DNS over TLS (DoT) uses a dedicated TLS connection on port 853.

Which DNS providers are built in?

DNS Security includes profiles for Cloudflare (including its malware and family filters), Google Public DNS, AdGuard DNS, Quad9, Chunghwa Telecom HiNet, TWNIC and Pi-DNS. Pro users can also add their own DoH or DoT servers.

What is the difference between DNS Security Lite and DNS Security Pro?

DNS Security Lite is free and includes the core encrypted DNS workflow; Pro features can be unlocked with an in-app purchase. DNS Security Pro is a separate paid app with every Pro feature included, such as custom DNS profiles, Wi-Fi SSID rules and switching profiles from Shortcuts.

Why is DNS not active after I turn it on?

iOS asks you to confirm the DNS profile. Open Settings, go to General, VPN & Network, DNS and select DNS Security. On Mac, enable DNS Security in System Settings, Network, VPN & Filters, Filters & Proxies.

Does DNS Security collect my data?

No. DNS Security does not collect any device or user information, and it does not see or log your browsing. Your DNS queries go only to the DNS provider you select.

Make your DNS private today

Set up encrypted DNS on your iPhone, iPad or Mac in under a minute.