Which DNS Server Should You Use? Cloudflare, Google, Quad9 and Others Compared

Illustration: several servers connected to a globe
Contents
  1. What a DNS Server Does
  2. Is Your Provider’s DNS Good Enough?
  3. Public DNS Servers Compared
  4. Which One to Choose
  5. How to Test Which Is Fastest for You
  6. Router or Device: Where to Set It
  7. Frequently asked questions

Every time you open a website, your device first asks a DNS server for the site’s IP address. That lookup takes a few milliseconds and you never see it — until the DNS server is slow, down, or blocks something it should not. Choosing a DNS server is a small setting with three real effects: how fast pages start loading, who sees which sites you look up, and whether known malicious or adult sites get blocked before they load.

What a DNS Server Does

DNS translates names like example.com into the numeric addresses computers use. By default, your devices ask your router, and the router asks your internet provider’s DNS servers. You can replace the provider’s servers with a public DNS service, either on the router for every device or on a single device.

A DNS server does not change your download speed. It changes how quickly each new site starts loading, and it can filter what loads at all.

Is Your Provider’s DNS Good Enough?

Often, yes. Provider DNS servers are usually close to you, which makes them fast. Reasons to switch anyway:

  • Pages hesitate before loading, or sites sometimes fail to resolve while the connection works; see DNS server not responding.
  • You want malware or adult-content filtering for the whole home without installing software.
  • You prefer a DNS service with a clear privacy policy and encrypted DNS support.
  • Your provider redirects mistyped addresses to its own search or ad pages.

Public DNS Servers Compared

ServiceAddresses (IPv4)FilteringNotes
Cloudflare1.1.1.1, 1.0.0.1NoneFocus on speed and privacy; family variants below
Cloudflare for Families1.1.1.2, 1.0.0.2 (malware) · 1.1.1.3, 1.0.0.3 (malware and adult content)Built inSame network, filtering by address
Google Public DNS8.8.8.8, 8.8.4.4NoneLarge global network
Quad99.9.9.9, 149.112.112.112Blocks known malicious domainsRun by a non-profit foundation
OpenDNS (Cisco)208.67.222.222, 208.67.220.220Optional with a free accountFamilyShield: 208.67.222.123, 208.67.220.123 blocks adult content
AdGuard DNS94.140.14.14, 94.140.15.15Blocks ads and trackersCan break some sites that rely on ad domains

All of them also offer IPv6 addresses and encrypted DNS (DNS over HTTPS or over TLS); their setup pages list the exact values.

Which One to Choose

For general use and speed: Cloudflare or Google. Both are fast in most places; which one wins depends on your location, so test both.

For extra protection against malware and phishing: Quad9, or Cloudflare’s 1.1.1.2. They refuse to resolve domains known to be malicious, which stops some attacks before a page even loads.

For a family network: Cloudflare 1.1.1.3 or OpenDNS FamilyShield blocks adult content for every device that uses the router. It is a simple first layer; it cannot block individual pages, and children can bypass it with their own DNS, a VPN or mobile data. See how to block websites on your router for the full picture.

For fewer ads: AdGuard DNS removes many ads in apps and browsers alike, at the cost of occasionally breaking a login or a video player.

For gaming: DNS does not affect ping in a game; it only affects how quickly the game finds its servers at startup. Choose the fastest server for you and spend effort on Wi-Fi or a cable instead.

How to Test Which Is Fastest for You

Published rankings measure from data centers, not from your home. To compare on your own connection:

  1. Open Command Prompt (Windows) or Terminal (Mac).
  2. Run nslookup example.com 1.1.1.1, then the same with 8.8.8.8, 9.9.9.9 and your current setup. Repeat a few times with different site names.
  3. On a Mac or Linux, dig example.com @1.1.1.1 shows the query time directly in milliseconds.

Differences of a few milliseconds do not matter. Look for a server that is consistently slow or sometimes fails, and avoid it.

Router or Device: Where to Set It

On the router to cover every device in the home, including TVs and consoles that have no DNS setting. Log in to the router — see what is my router IP — and find DNS under Internet, WAN or DHCP settings. Enter the two addresses of the service you chose and save. Some provider gateways do not allow changing DNS; then set it on devices or use your own router.

On a device to test, or to use a different service on one device. The steps for Windows, Mac, iPhone and Android are in DNS server not responding. On Android, Private DNS with a hostname such as dns.google or one.one.one.one also encrypts the lookups.

Frequently asked questions

Is 1.1.1.1 faster than 8.8.8.8?

It depends on where you are. Both are fast networks; test both with nslookup or dig from your own connection and keep the one that answers more consistently.

Does changing DNS improve internet speed?

It can make sites start loading slightly faster if your provider’s DNS is slow, but it does not change download speed or ping in games.

Which DNS server blocks malware?

Quad9 (9.9.9.9) and Cloudflare 1.1.1.2 block domains known to be malicious. OpenDNS and AdGuard offer filtering too.

Is it safe to use a public DNS server?

Yes, the big public DNS services are reliable. They see which domains you look up, just like your provider’s DNS, so pick the one whose privacy policy you trust.

Should I set DNS on the router or on my computer?

On the router for the whole home, on a single device to test or when the router does not allow changes.

Sources