AdGuard Public DNS is a free service that blocks ad domains and tracker domains at the network level before they load on any device. No app installation is required. This guide covers the complete setup for Android, iPhone and iPad, and home routers. It covers the 3 server profiles, their addresses, real limitations of DNS-level filtering, and a comparison with other free DNS services.
What is AdGuard Public DNS and How Does It Work?
AdGuard Public DNS is a free, cloud-based DNS resolver that intercepts DNS queries for ad, tracker, phishing, and malware domains and blocks them before a response reaches the requesting device. It works across all apps and browsers without requiring any software installation on the device.
DNS stands for Domain Name System. It is the process a device uses to translate a website name like example.com into a numeric IP address. Every time a device opens an app or loads a webpage, it sends a DNS query to resolve that domain name into an address. AdGuard Public DNS receives those queries. When a query arrives for a known ad domain or tracker domain, AdGuard DNS returns no IP address. The ad request never completes. This blocking method is called a DNS sinkhole.
DNS-level filtering is system-wide. It covers all apps, all browsers, and all active network connections at the same time. No browser extension is required. No VPN profile is needed for the basic setup on Android.
What Are the 3 Free AdGuard DNS Profiles?
AdGuard Public DNS provides 3 profiles. Each profile uses a different set of server addresses and targets a different category of domains.
| Profile | What It Blocks | IPv4 Addresses | Private DNS Hostname |
|---|---|---|---|
| Default | Ads, trackers, phishing domains, malware domains | 94.140.14.14 and 94.140.15.15 | dns.adguard-dns.com |
| Family Protection | Ads, trackers, malware, adult content. Enforces SafeSearch on supported search engines and browsers. | 94.140.14.15 and 94.140.15.16 | dns-family.adguard-dns.com |
| Non-filtering | No domain blocking. Provides encrypted DNS resolution for speed and privacy only. | 94.140.14.140 and 94.140.14.141 | dns-unfiltered.adguard-dns.com |
All 3 profiles are free with no monthly query limit on the public DNS plan.
How to Set Up AdGuard DNS on Android?
The Private DNS setting in Android 9 and above allows AdGuard DNS to filter ad and tracker domains across both Wi-Fi and mobile data connections using the DNS-over-TLS (DoT) protocol, with no extra app required.
DoT stands for DNS-over-TLS. It is a protocol that encrypts DNS queries between the device and the DNS resolver. Encrypted queries prevent ISPs (Internet Service Providers) and mobile network operators from reading which domains the device is requesting.
How to Use Private DNS on Android 9 and Above
Android 9 (Pie) and all later versions support a built-in feature called Private DNS. This setting accepts a Private DNS hostname and automatically applies DoT encryption to all DNS queries made on that device.
Follow these steps:
- Open Settings on the Android device.
- Tap Network and Internet. On Samsung and some other devices, this is labelled Connections or More connection settings.
- Tap Private DNS.
- Select Private DNS provider hostname.
- Enter the hostname for the chosen profile:
- Ad and tracker blocking:
dns.adguard-dns.com - Family and adult content protection:
dns-family.adguard-dns.com - Encrypted DNS without filtering:
dns-unfiltered.adguard-dns.com
- Ad and tracker blocking:
- Tap Save.
The device disconnects from the network briefly and reconnects. Ad and tracker domains are blocked on both Wi-Fi and mobile data from this point.
What If the Android Device is Running Version 8 or Below?
Android 8 and below do not include the Private DNS setting. On those devices, configure a manual static IP address for the Wi-Fi connection. Open Wi-Fi settings, long press the connected network name, tap Modify Network, change IP settings from DHCP to Static, and enter 94.140.14.14 in the DNS 1 field and 94.140.15.15 in the DNS 2 field. Tap Save.
This static IP method covers Wi-Fi connections only. Mobile data connections on Android 8 and below require a third-party app to use AdGuard DNS.
How to Set Up AdGuard DNS on iPhone or iPad?
AdGuard DNS on iOS blocks ad and tracker domains on Wi-Fi networks when configured through the native Settings app. Extending that filtering to cellular mobile data requires a free encrypted DNS configuration profile from AdGuard’s website.
The native Wi-Fi method is the right starting point for most users. It takes under 2 minutes, requires no app download, and works on any iPhone or iPad.
Wi-Fi Only Method (Native iOS Settings)
This method configures AdGuard DNS for one specific Wi-Fi network. It does not carry over to other Wi-Fi networks automatically or to mobile data.
Follow these steps:
- Open Settings on the iPhone or iPad.
- Tap Wi-Fi.
- Tap the blue “i” icon next to the name of the currently connected Wi-Fi network.
- Scroll down and tap Configure DNS.
- Change the setting from Automatic to Manual.
- Tap the red minus button next to each existing DNS server to remove it.
- Tap Add Server and enter:
94.140.14.14 - Tap Add Server again and enter:
94.140.15.15 - Tap Save at the top right corner.
AdGuard DNS now handles all DNS resolution for that Wi-Fi network on the device.
How to Enable AdGuard DNS on Cellular Data for iOS
The Wi-Fi method above leaves mobile data connections unprotected. To cover cellular data alongside Wi-Fi, download a free encrypted DNS configuration profile from AdGuard’s official public DNS page at adguard-dns.io/en/public-dns.html on the iPhone or iPad.
Select the preferred filtering profile, choose the encryption type (DoH or DoT), and tap Download Configuration Profile. Open Settings, tap Profile Downloaded at the top of the settings list, tap Install, and follow the on-screen steps. Enter the device passcode when prompted.
After installation, go to Settings > General > VPN and Device Management to confirm the profile is active. This profile routes all DNS queries including mobile data queries through AdGuard’s encrypted servers system-wide.
How to Set Up AdGuard DNS on a Home Router?
Configuring AdGuard DNS on the router applies network-level ad and tracker filtering to every device connected to the home network, including smart TVs, gaming consoles, and IoT devices, without any per-device configuration.
This is the most efficient setup for households with 3 or more devices.
Follow these steps:
- Open a browser on any device connected to the home network.
- Enter the router’s admin panel address in the browser address bar. Common addresses are
192.168.1.1or192.168.0.1. The exact IP address is printed on the sticker on the back of the router. - Log in using the admin username and password. These are also on the back sticker by default. Change the password after logging in for the first time.
- Navigate to the DNS settings. Look under sections labelled WAN, Internet, Internet Settings, LAN, or DHCP Server, depending on the router brand. TP-Link routers place this under Advanced > Network > WAN. ASUS routers place it under WAN > WAN DNS Setting.
- Change DNS assignment from Automatic or Get from ISP to Manual.
- Enter the following DNS addresses:
- Primary DNS:
94.140.14.14 - Secondary DNS:
94.140.15.15
- Primary DNS:
- Save the settings.
- Restart the router.
After the router restarts, every device on the home network uses AdGuard DNS for all DNS resolution automatically.
WAN DNS vs LAN DHCP DNS: Which Field to Use on the Router?
Some routers display 2 separate DNS configuration sections: one under WAN settings and one under LAN or DHCP Server settings.
WAN DNS is the DNS server the router itself uses for outgoing DNS queries. The router caches DNS responses and distributes them to connected devices. Changing WAN DNS is faster because the router serves frequently requested domain resolutions directly from its cache.
LAN DNS or DHCP DNS is the DNS server address the router pushes to each connected device via DHCP. Devices query AdGuard DNS directly, bypassing the router cache.
For AdGuard Public DNS, changing the WAN DNS field is the recommended approach. It gives the router caching benefits, reduces DNS query latency for connected devices, and protects all devices on the network at the same time.
What Can AdGuard Public DNS Not Block?
AdGuard Public DNS blocks ad and tracker domains at the DNS resolution layer. It does not perform cosmetic filtering, cannot block ads served from the same domain as main content, and does not allow the free public plan to whitelist falsely blocked domains.
Understanding these 3 limitations sets accurate expectations before and after setup.
Does AdGuard DNS Block YouTube Ads?
No. AdGuard Public DNS does not block YouTube video ads.
YouTube delivers video content and video advertisements from the same set of domains and IP address ranges. DNS-level blocking works by refusing to resolve a domain name entirely. Blocking the YouTube advertising domain would also block the video content delivery. AdGuard DNS does not block the YouTube domain, so pre-roll and mid-roll video ads continue to play.
Sponsored posts on Instagram and Facebook operate the same way. Ad content and regular feed content share the same domain infrastructure. A DNS blocker cannot separate one DNS query from another when both originate from the same domain.
Browser extensions such as uBlock Origin block YouTube ads because they inspect and filter page content directly inside the browser. DNS blocking and browser extension blocking operate at different network layers. A DNS blocker is not a substitute for a browser extension for YouTube ad removal.
What Happens When a Legitimate Website Gets Blocked by AdGuard DNS?
A false positive occurs when AdGuard DNS blocks a domain that a legitimate website or service depends on, not an ad or tracker domain. The affected content on that website stops loading.
The free AdGuard Public DNS plan has no customisation panel, no allowlist, and no per-user whitelist function. Unblocking a specific domain is not possible on the free plan.
The available fix on the free plan is to disable the Custom DNS setting on the device temporarily. On Android, open the Private DNS setting and switch back to Automatic. On iOS, remove or disable the DNS configuration profile. The Non-filtering profile (dns-unfiltered.adguard-dns.com) provides a permanent workaround with encrypted DNS and no domain blocking.
Users who require whitelist control can use AdGuard’s paid private DNS plan, which includes a personalised dashboard, or switch to NextDNS, which provides a full allowlist and blocklist management interface on its free tier.
Cosmetic ad spaces are not removed by DNS blocking. When AdGuard DNS blocks an ad domain request, the browser still renders the container where that ad was expected to load. An empty box or broken image placeholder remains visible on the page. Browser-level ad blockers collapse these empty containers using cosmetic filtering rules. AdGuard Public DNS does not perform cosmetic filtering.
AdGuard DNS vs Other Free DNS Services: Quick Comparison
AdGuard Public DNS is the only major free DNS service with no query limit that blocks both ads and trackers out of the box with no account or configuration required.
| Feature | AdGuard Public DNS | NextDNS (Free Tier) | Cloudflare 1.1.1.1 | Quad9 (9.9.9.9) |
|---|---|---|---|---|
| Blocks Ads | Yes | Yes | No | No |
| Blocks Trackers | Yes | Yes | No | No |
| Blocks Malware and Phishing | Yes | Yes | Yes (variants 1.1.1.2 and 1.1.1.3) | Yes |
| Monthly Query Limit | No limit | 300,000 queries | No limit | No limit |
| Custom Blocklists | No | Yes | No | No |
| Allowlist for False Positives | No | Yes | No | No |
| Family Protection | Yes (dedicated server profile) | Yes (customisable categories) | Yes (1.1.1.3 variant) | No |
| Account Required | No | Yes | No | No |
| Best For | Unlimited free ad blocking, zero setup | Custom rules and query logs | Speed and security, no ad blocking | Security and malware blocking only |
NextDNS is better suited for users who need custom rules and the ability to review query logs, but the 300,000 monthly query limit on the free tier is reached in 2 to 3 weeks on an active household network. Cloudflare 1.1.1.1 consistently ranks as the fastest public DNS resolver globally but does not block ad domains. Quad9 focuses on malware and phishing protection with no ad-blocking functionality.
Is AdGuard Public DNS Safe and Private?
Yes. AdGuard Public DNS does not log DNS queries on the free public plan and supports encrypted DNS protocols including DNS-over-TLS (DoT), DNS-over-HTTPS (DoH), and DNS-over-QUIC across all 3 server profiles.
AdGuard is registered in Cyprus. The AdGuard Public DNS privacy policy states that no personal data, including IP addresses, is collected or stored on the free public plan. A third-party audit of the no-logging claim was conducted, and the results are published on AdGuard’s website.
The Private DNS hostname method on Android uses DoT encryption by default. The configuration profile method on iOS uses DoH or DoT depending on the profile selected during download. Both methods prevent the ISP and mobile network operator from reading domain names in transit.
The Non-filtering profile (dns-unfiltered.adguard-dns.com) provides encrypted DNS resolution for users who want privacy benefits without content filtering.
Frequently Asked Questions
Does AdGuard DNS slow down internet speed?
No. AdGuard DNS does not reduce browsing speed. DNS resolution for a cached domain takes under 50 milliseconds. Blocking ad domain requests reduces the total number of network requests per page, which decreases overall page load time on ad-heavy websites.
Does AdGuard DNS work on mobile data?
On Android 9 and above, the Private DNS method covers mobile data and Wi-Fi simultaneously. On iOS, the native Wi-Fi DNS method covers Wi-Fi only. The configuration profile downloaded from adguard-dns.io covers both Wi-Fi and mobile data on iOS.
Can AdGuard DNS be used on a Smart TV?
Yes. Smart TVs connected to a home network automatically use AdGuard DNS once it is configured at the router level. Smart TVs with hardcoded DNS addresses in their individual network settings bypass the router DNS and require manual DNS configuration inside the TV’s network settings.
What is the difference between AdGuard Public DNS and AdGuard Home?
AdGuard Public DNS is a cloud-based DNS service operated by AdGuard on their own server infrastructure. The user points a device or router to AdGuard’s server IP addresses. AdGuard Home is a separate, self-hosted software application installed on personal hardware such as a Raspberry Pi or a home server. It runs a local DNS resolver on the home network. This guide covers AdGuard Public DNS only.
What is the step to take when a trusted website stops loading after setting up AdGuard DNS?
Disable the Custom DNS setting on the device temporarily. On Android, open the Private DNS setting and select Automatic. On iOS, remove the DNS configuration profile from Settings > General > VPN and Device Management. Test whether the website loads without the custom DNS active. The free public plan does not support whitelisting. Switching to the Non-filtering profile (dns-unfiltered.adguard-dns.com) provides encrypted DNS without any domain blocking as a permanent alternative.
