How to Bypass DNS Blocks Without a VPN
Many website blocks are weaker than they look. Often your internet provider is simply refusing to turn a domain name into an address - a DNS block. Point your device at a different, trusted DNS resolver and the site loads again, no VPN required. Here is how to do it on every device, which encrypted-DNS apps are worth trusting, and where a DNS change stops working.
Blocked site? Do not reach for a VPN yet. Often it is enough to change your DNS - the phonebook your device uses. Fast, free and legal. Here is how, in a couple of taps.
What it is and why it gives way
DNS turns a site name into a server address. A DNS block is your provider simply not answering the lookup for a blocked domain. The site is fine; only your provider's answer is missing. That is why it is the weakest block: change your DNS and it is gone.
Check that it is a DNS block
- The site opens on mobile data but not on home Wi-Fi - different DNS, so probably a DNS block.
- It loads right after you set
1.1.1.1- that confirms a DNS block. - Dead everywhere - it is not only DNS, see the last section.
The fastest way - an app
They set encrypted DNS on every device from one profile. All cross-platform, all with a free tier.
Which addresses to enter
Plain DNS wants numbers, encrypted DNS (Android "Private DNS") wants a hostname. Same server, just different fields.
| Provider | Plain DNS (numbers) | Encrypted (hostname) |
|---|---|---|
| Cloudflare | 1.1.1.1 | one.one.one.one |
| Quad9 | 9.9.9.9 | dns.quad9.net |
8.8.8.8 | dns.google |
Do not paste addresses from forums or ads promising to "unblock everything": a hostile resolver can serve fake banking pages. Use the operators above or the apps only.
Set it up manually
Pick your system - three steps each.
Settings → Network & internet → Private DNS → "Hostname" → enter one.one.one.one. Already encrypted.
Settings → Wi-Fi → the (i) next to your network → Configure DNS → Manual → add 1.1.1.1.
Settings → Network → your connection → DNS server assignment → Edit → Manual. Enter the addresses, turn on "DNS over HTTPS".
System Settings → Network → your connection → Details → DNS → add the addresses with the plus button.
Change the DNS once in your router's panel and every device at home is covered at once: phones, laptops, TVs. Nothing to set up on each one.
When changing DNS is not enough
DNS is the weakest block, so it is the first thing to try. But if a site is blocked by IP address or by deep packet inspection that reads the connection itself, no DNS change reaches it. Then you need a VPN: it moves your whole connection onto another network. See our VPN setup guides or the German case for how such orders are built.
