Secure DNS

Secure DNS allows you to share your specific doxx.net account DNS settings (DNS over HTTPS (DoH) and DNS over TLS (DoT)), with devices that are not on the doxx.net network through their browser or OS DNS settings.

September 30, 2026

1.Features

  • Encrypt DNS lookups between your device and doxx.net's resolver.
  • Choose DNS over HTTPS or DNS over TLS.
  • Share DNS configuration with other devices
  • Use personalized encrypted DNS to apply a selected tunnel's filtering policy without sending all other traffic through that tunnel.

To share your secure DNS navigate to: Account → Settings ⚙ → DNS and Domains → Share DNS.

2.How to Share

In your app copy the relevant link (Links below are not real):

Browser Only (Chrome / Edge / Brave)

  • Settings → Privacy & Security → Security → Use secure DNS → Custom → Paste DoH URL

Firefox

  • Settings → Privacy & Security → DNS over HTTPS → Max Protection → Custom → Paste DoH URL

Works on Windows, macOS, Linux, Android. Protects browser traffic only.

Android System-wide (Android 9+)

  • Settings → Network & Internet → Private DNS → Private DNS provider hostname → Paste the DoT hostname

Protects all apps and system DNS queries.

iOS / macOS System-wide

Requires DNS Profile

  • Use a profile generator like dns.notjakob.com to create a .mobileconfig with your DoH URL, then install via Settings → General → VPN & Device Management.

Apple does not provide a simple UI for custom DoH/DoT servers.

Windows System-wide

PowerShell or Apps

  • Windows Settings DNS is per-adapter and easily bypassed. Use PowerShell (netsh dns add encryption) or apps like YogaDNS and SimpleDNSCrypt for reliable system-wide protection.

The Windows Settings method does not persist system-wide reliably.

3.Common Questions

Does encrypted DNS encrypt all my internet traffic?

No. It protects DNS lookups. The websites and apps you use still need their own secure connections, and a network tunnel serves a separate purpose.

Can the resolver still read the lookup?

Yes. The resolver has to process the domain name to answer the request. Encryption protects the journey to the resolver; it doesn't hide the request from the resolver itself.

Can I use my filtering settings without a full tunnel?

Yes. Personalized encrypted DNS links the resolver setup to a tunnel's DNS policy while leaving other device traffic outside that tunnel.

Which should I choose, DoH or DoT?

Use the option supported by your device or DNS client and follow its setup instructions. Both encrypt the DNS exchange; neither is a replacement for the full network connection.