Every time you visit a website, your device sends a DNS query to translate the domain name into a numeric IP address. Good DNS Servers handle this process quickly and securely. Bad or default ones can slow you down, log your activity, and leave you exposed to malicious sites.
Good DNS Servers do more than resolve domain names quickly. The best ones also filter known malicious domains, respect your privacy by not logging queries, and provide more reliable uptime than many default ISP servers.
Most users never change their DNS settings, leaving their traffic routed through their internet provider’s servers by default. ISP-provided DNS is often slower, may log your browsing activity, and typically offers no security filtering. Switching takes less than five minutes and delivers immediate benefits.
What Are DNS Servers and Why Do They Matter?
The Domain Name System is often described as the internet’s phone book. When you type a URL into your browser, your device asks a DNS server for the corresponding IP address. The speed and reliability of this lookup affects every single connection you make online.
Poor DNS servers introduce latency even before data starts loading. Insecure DNS servers can be spoofed through DNS poisoning attacks, redirecting you to malicious sites that look identical to the real ones.
Good DNS Servers resolve queries faster, protect against spoofed lookups, and in many cases filter out known malicious domains entirely.
The Best Good DNS Servers Available
Cloudflare DNS (1.1.1.1): Fastest in the World
Cloudflare’s 1.1.1.1 is the fastest publicly available DNS resolver, with average global response times of approximately 11 milliseconds. It is operated by Cloudflare, one of the world’s largest internet infrastructure companies.
Privacy credentials:
- Does not sell DNS query data to advertisers
- Does not use queries for ad targeting
- Purges all DNS query logs within 24 hours
- Audited annually by third-party security firms
Primary DNS: 1.1.1.1
Secondary DNS: 1.0.0.1
Cloudflare also offers 1.1.1.2 for malware filtering and 1.1.1.3 for malware and adult content filtering as alternatives.
Google Public DNS (8.8.8.8): Most Reliable
Google’s Public DNS is the most widely used DNS service globally. It offers excellent uptime and reliability, with response times averaging around 20 milliseconds globally.
However, Google does perform some temporary query logging for diagnostic purposes and does not block malicious domains by default. For users who prioritize privacy over convenience, Cloudflare or Quad9 are better choices.
Primary DNS: 8.8.8.8
Secondary DNS: 8.8.4.4
Quad9 (9.9.9.9): Best for Security Filtering
Quad9 is operated by a nonprofit foundation and is specifically focused on security. It integrates threat intelligence from more than 25 sources, including IBM X-Force, to block known malicious domains before your device ever connects.
When you visit a domain flagged as malicious, Quad9 blocks the connection entirely instead of resolving it. This provides a network-level layer of protection against phishing sites, malware distribution domains, and botnet command-and-control servers.
Primary DNS: 9.9.9.9
Secondary DNS: 149.112.112.112
Quad9 does not log personally identifiable information and operates as a nonprofit, removing commercial incentives to monetize your data.
OpenDNS (208.67.222.222): Best for Home Filtering
OpenDNS (now part of Cisco) has been in operation for many years and offers both free and paid tiers. The free version provides phishing and botnet protection. The paid version (OpenDNS Home VIP) adds granular content filtering.
Primary DNS: 208.67.222.222
Secondary DNS: 208.67.220.220
OpenDNS is an excellent choice for households that want both security filtering and the ability to block specific content categories across all connected devices.
Good DNS Servers Comparison
| Provider | Speed | Privacy | Security Filtering | Best For |
|---|---|---|---|---|
| Cloudflare 1.1.1.1 | Fastest (~11ms) | Excellent | Optional | Speed and privacy |
| Google 8.8.8.8 | Fast (~20ms) | Moderate | None | Reliability |
| Quad9 9.9.9.9 | Good (~25ms) | Excellent | Yes (25+ threat feeds) | Security-first users |
| OpenDNS 208.67.222.222 | Good (~30ms) | Moderate | Yes (phishing, botnet) | Families and content filtering |
| ISP Default | Varies | Poor | None | Not recommended |
How to Change Your DNS Server
On Windows
- Open Settings → Network and Internet → Change Adapter Options
- Right-click your active connection and select Properties
- Select Internet Protocol Version 4 (TCP/IPv4) and click Properties
- Select Use the following DNS server addresses
- Enter your chosen primary and secondary DNS
- Click OK and restart your browser
On macOS
- Open System Settings → Network
- Select your active connection and click Details
- Go to the DNS tab
- Click the + button and add your chosen DNS addresses
- Click OK and apply
On Your Router (Affects All Devices)
- Log into your router admin panel (usually 192.168.1.1)
- Navigate to WAN Settings or Internet Settings
- Find the DNS Server fields
- Replace ISP-provided addresses with your chosen DNS
- Save and reboot the router
Changing DNS at the router level applies the new servers to every device on your network automatically.
Pro Tips: Getting the Most From Good DNS Servers
- Use DNS over HTTPS (DoH) for encrypted queries: Standard DNS queries travel unencrypted, meaning your ISP can still see your lookups even with a privacy-focused DNS provider. DoH encrypts queries between your device and the DNS server. Both Cloudflare and Quad9 support it.
- Test DNS performance before committing: Use DNS benchmarking tools to test which server responds fastest from your specific location. Performance varies geographically.
- Pair security DNS with browser-level protection: DNS filtering blocks known bad domains, but new malicious domains appear constantly. Browser security features and antivirus scanning catch threats that DNS has not yet catalogued.
- Set DNS on the router, not just individual devices: Device-level DNS settings can be overridden by apps. Router-level DNS applies universally to your entire network.
Common Mistakes When Choosing Good DNS Servers
- Leaving ISP default DNS unchanged: ISP DNS is often slower, logs your queries, and provides no security filtering. Fix: Switch to Cloudflare, Quad9, or OpenDNS for an immediate improvement in speed and privacy.
- Using DNS filtering as the only security layer: DNS blocklists lag behind newly registered malicious domains. Fix: Combine DNS filtering with real-time antivirus scanning and phishing-aware browser extensions.
- Not enabling encrypted DNS queries: Switching to a private DNS provider but leaving queries unencrypted means your ISP can still monitor your lookups. Fix: Enable DNS over HTTPS in your browser settings or OS network configuration.
- Forgetting to update DNS on mobile devices: Many users update DNS on their computer and router but leave mobile devices using default settings. Fix: Set DNS on mobile through the WiFi settings of each network you use frequently.
Protect Your Connection and Gaming Sessions With ExitLag and Norton 360 For Gamers
Using Good DNS Servers improves your network security and speed, but it is one layer of a complete protection strategy.
ExitLag + Norton 360 For Gamers builds on your DNS foundation with full-spectrum security and gaming performance tools. Norton 360 For Gamers provides real-time threat scanning, network protection, dark web monitoring, and a secure VPN for browsing, covering the threats that DNS filtering alone cannot block.
ExitLag optimizes your gaming connection by analyzing multiple network routes in real time and selecting the fastest, most stable path to your game server. It covers 4,000+ titles on 1,500+ servers in 190+ countries. Unlike a VPN, ExitLag is built specifically for gaming, does not slow your connection, and does not conflict with anti-cheat systems.
Good DNS Servers set the foundation. ExitLag + Norton 360 For Gamers builds the rest of your defense on top of it.
All images used in this blog post belong to their respective owners and are used for informational and educational purposes only. They do not imply endorsement or affiliation with the rights holders.
Got questions or want to connect with other players? Join the conversation at the ExitLag Forum!
