When you type “youtube.com” into your browser, your computer has absolutely no idea where that website actually lives. It must ask a Domain Name System (DNS) server to translate that human-readable name into a mathematical IP address (like 142.250.190.46). By default, your Internet Service Provider (like Comcast or Spectrum) forces you to use their private DNS servers.
ISP DNS servers are notoriously slow, prone to crashing, and are routinely used to log your entire browsing history for advertising purposes. By changing your DNS server in Windows 11 to a fast, privacy-focused alternative (like Cloudflare or Google Public DNS), you can instantly speed up your web browsing and prevent your ISP from spying on your traffic.
Step 1: Access the Network Settings
You must dive into the core Windows network configuration to intercept the DNS requests before they leave your computer.
- Click the Start Button on your taskbar and click the gear icon to open Settings.
- In the left-hand navigation sidebar, click on Network & internet.
- Look at the top of the screen to identify your active connection. If you are using a network cable, click on Ethernet. If you are on Wi-Fi, click on Wi-Fi, and then click on the specific name of your Wi-Fi network (e.g., “HomeNetwork_5G”).
- Scroll down the page until you find the section labeled DNS server assignment.
- By default, it will say “Automatic (DHCP).” Click the Edit button next to it.
Step 2: Enter the Custom DNS Addresses
A small pop-up box will appear asking you to define the new server rules.
- Click the drop-down menu at the top and change it from “Automatic” to Manual.
- Two toggle switches will appear for IPv4 and IPv6. Toggle IPv4 to the ON position.
You must now type the exact numerical addresses of your new provider. You need two addresses: a Preferred (primary) server, and an Alternate (backup) server in case the first one crashes.
We highly recommend using Cloudflare (the fastest and most private) or Google (the most reliable).
Cloudflare (1.1.1.1)
- Preferred DNS: 1.1.1.1
- Alternate DNS: 1.0.0.1
Google Public DNS
- Preferred DNS: 8.8.8.8
- Alternate DNS: 8.8.4.4
- Type your chosen numbers into the text boxes.
- Crucial Step: Look for the drop-down menu labeled “DNS over HTTPS.” Change this from “Off” to On (automatic template). This encrypts your DNS requests, completely preventing your ISP from intercepting them.
- Click Save.
Step 3: Flush the Old DNS Cache
Even though you changed the setting, Windows 11 stubbornly holds onto a hidden “cache” of old, potentially corrupted DNS data from your ISP. You must flush this cache into the trash to force the computer to use the new servers immediately.
- Click the Start Button, type cmd into the search bar, right-click on Command Prompt, and select Run as administrator.
- A black terminal window will open. Type this exact command (with no spaces except before the slash):
ipconfig /flushdns
- Press Enter.
The terminal will instantly reply, “Successfully flushed the DNS Resolver Cache.” Close the window. Your computer is now routing all traffic through your new, high-speed, encrypted DNS provider.