A public recursive name server (also called public DNS resolver) is a name server service that networked computers may use to query the Domain Name System (DNS), the decentralized Internet naming system, in place of (or in addition to) name servers operated by the local Internet service provider (ISP) to which the devices are connected. Reasons for using these services include:

speed, compared to using ISP DNS services filtering (security, ad-blocking, porn-blocking, etc.) reporting avoiding censorship redundancy (smart caching) access to unofficial alternative top level domains not found in the official DNS root zone temporary unavailability of the ISP's name server

Public DNS resolver operators often cite increased privacy as an advantage of their services; critics of public DNS services have cited the possibility of mass data collection targeted at the public resolvers as a potential risk of using these services. Most services now support secure DNS lookup transport services such as DNS over TLS (DoT), DNS over HTTPS (DoH) and DNS over QUIC (DoQ).

Public DNS resolvers are operated either by commercial companies, offering their service for free use to the public, or by private enthusiasts to help spread new technologies and support non-profit communities.

Notable public DNS service operators

Provider Privacy policy DNS over UDP/TCP (Do53) DNSSEC DNS over TLS (DoT) DNS over HTTPS (DoH) DNS over QUIC (DoQ) EDNS Padding DNSCrypt Hostname IPv4 addresses IPv6 addresses Filters Remarks Alibaba ! ! ! ! ! dns.alidns.com Chinese regulationsAdGuard rowspan="3" ! AdGuard DNS Privacy Notice rowspan="3" ! rowspan="3" ! AdGuard DNS FAQ: What is DNSSEC? rowspan="3" ! rowspan="3" ! The official release of AdGuard DNS — a new unique approach to privacy-oriented DNS rowspan="3" ! AdGuard DNS-over-QUIC rowspan="3" ! rowspan="3" ! Adguard DNS now supports DNSCrypt dns.adguard-dns.com Default: ads and trackersAdGuard DNS Setup guide family.adguard-dns.com Family: ads, trackers, and adult content unfiltered.adguard-dns.com None Cloudflare rowspan="4" ! rowspan="4" ! rowspan="4" ! rowspan="4" ! rowspan="4" ! rowspan="4" ! rowspan="4" ! rowspan="4" ! one.one.one.one<br/ >1dot1dot1dot1.cloudflare-dns.com None security.cloudflare-dns.com Malware, Phishing family.cloudflare-dns.com Malware, Phishing,Adult content dns64.cloudflare-dns.com None Intended to be IPv6-only. See NAT64 and DNS64. DNS4EU rowspan="5" rowspan="5" rowspan="5" rowspan="5" rowspan="5" rowspan="5" rowspan="5" protective.joindns4.eu Malware, phishing Developed for EU citizens child-noads.joindns4.eu Malware, phishing, adult content, ads child.joindns4.eu Malware, phishing, adult content noads.joindns4.eu Malware, phishing, ads unfiltered.joindns4.eu None Google rowspan="2" ! Google Public DNS: Your Privacy rowspan="2" ! rowspan="2" ! rowspan="2" ! rowspan="2" ! Google Public DNS: DNS-over-HTTPS rowspan="2" ! rowspan="2" ! rowspan="2" ! dns.google None dns64.dns.google None Intended for networks with NAT64 gateway.Google Public DNS64 Gcore ! ! ! ! ! ! ! ! NoneMullvad rowspan="5" rowspan="5" rowspan="5" rowspan="5" rowspan="5" rowspan="5" rowspan="5" rowspan="5" dns.mullvad.net None Can be used without its VPN service Shutting down on November 2nd 2026 adblock.dns.mullvad.net Ads, and trackers base.dns.mullvad.net Ads, trackers, and malware extended.dns.mullvad.net Ads, trackers, malware, and social media all.dns.mullvad.net Ads, trackers, malware, social media, gambling and adult content Vercara (formerly Neustar Security Services) rowspan="6" ! rowspan="6" ! rowspan="6" ! rowspan="6" ! rowspan="6" ! rowspan="6" ! rowspan="6" ! rowspan="6" ! rowspan="6" 64.6.64.664.6.65.6 2620:74:1b::1:12620:74:1c::2:2 None Verisign transferred its public DNS to Neustar. Malware, ransomware, spyware, phishing Low security + gambling, pornography, violence, hate Medium security + gaming, adult, drugs, alcohol, anonymous proxies None Will not redirect non-existent domains to a landing page. Cisco Umbrella (OpenDNS) rowspan="3" ! Cisco Online Privacy Statement rowspan="3" ! rowspan="3" ! OpenDNS: DNSSEC General Availability rowspan="3" ! rowspan="3" ! rowspan="3" ! rowspan="3" ! rowspan="3" ! OpenDNS: OpenDNS and DNSCrypt dns.opendns.comdns.umbrella.comCisco Umbrella Enhances Support of DNS Encryption with DNS Over HTTPS Basic Security filtering + user defined policies familyshield.opendns.com FamilyShield: adult content sandbox.opendns.com None Sandbox addresses that provide no filtering.Oracle (formerly Dyn) resolver1.dyndnsinternetguide.comresolver2.dyndnsinternetguide.comrdns.dynect.net None Quad9 rowspan="3" ! Quad9: Compliance and Applicable LawQuad9: Data and Privacy Policy rowspan="3" ! Quad9 FAQ: Does Quad9 implement DNSSEC? rowspan="3" ! Quad9 FAQ: Does Quad9 support DNS over TLS? rowspan="3" ! Quad9 FAQ: Does Quad9 support DNS over HTTPS (DoH)? rowspan="3" ! Quad9 Enables DNS Over HTTP/3 and DNS Over QUIC rowspan="3" ! rowspan="3" ! Quad9 FAQ: Does Quad9 support dnscrypt? dns.quad9.net Phishing, malware, and exploit kit domains dns11.quad9.net Phishing, malware, and exploit kit domains Passes EDNS Client Subnet. Quad9 FAQ: Is there a service that Quad9 offers that does not have the blocklist or other security? dns10.quad9.net None Tencent ! ! ! ! ! ! dns.pub Chinese regulations Wikimedia Wikimedia DNS: Privacy Policy Wikimedia DNS: Encrypted DNS" Wikitech: Wikimedia DNS: DNSSEC Wikitech: Wikimedia DNS Wikitech: Wikimedia DNS Wikitech: Wikimedia DNS: EDNS.280.29 Padding wikimedia-dns.orgWikimedia DNS: Instructions NoneWikimedia DNS Yandex rowspan="3" ! Terms of use of the Yandex.DNS service rowspan="3" ! rowspan="3" ! rowspan="3" ! rowspan="3" ! rowspan="3" ! rowspan="3" ! rowspan="3" ! common.dot.dns.yandex.net None safe.dot.dns.yandex.net Safe: fraudulent / infected / bot sites family.dot.dns.yandex.net Family: fraudulent / infected / bot / adult sites

References

External links Home page of the DNSCrypt project: Public DNS servers