Using AdGuard DNS over HTTPS (DoH) on Windows 11 with updated domain

AdGuard_DoH_Windows.md

Why

You may want to use AdGuard's DNS over HTTPS¹ service if you

1. Want to make it harder for your ISP to know what websites you are requesting (DoH part)
2. Want to block most traditional ads from your web browsing experience across your entire PC (AdGuard DNS part)
3. Want to block some malicious site and malware. (AdGuard DNS part)

Setup instructions

1. (Optional: Skip to step 4) Open PowerShell (Right click on Windows icon, and choose "Terminal (Admin)")
2. Add the primary and secondary AdGuard DNS IPv4 and IPv6 addresses²

   netsh dns add encryption server=94.140.14.14 dohtemplate=https://dns.adguard-dns.com/dns-query autoupgrade=yes udpfallback=no
   netsh dns add encryption server=94.140.15.15 dohtemplate=https://dns.adguard-dns.com/dns-query autoupgrade=yes udpfallback=no
   netsh dns add encryption server=2a10:50c0::ad1:ff dohtemplate=https://dns.adguard-dns.com/dns-query autoupgrade=yes udpfallback=no
   netsh dns add encryption server=2a10:50c0::ad2:ff dohtemplate=https://dns.adguard-dns.com/dns-query autoupgrade=yes udpfallback=no
   

3. Verify addition of DNS options netsh dns show encryption

   Encryption settings for 94.140.15.15
   ----------------------------------------------------------------------
   DNS-over-HTTPS template     : https://dns.adguard.com/dns-query
   Auto-upgrade                : yes
   UDP-fallback                : no
   
   Encryption settings for 94.140.14.14
   ----------------------------------------------------------------------
   DNS-over-HTTPS template     : https://dns.adguard.com/dns-query
   Auto-upgrade                : yes
   UDP-fallback                : no
   
   Encryption settings for 2a10:50c0::ad1:ff
   ----------------------------------------------------------------------
   DNS-over-HTTPS template     : https://dns.adguard.com/dns-query
   Auto-upgrade                : yes
   UDP-fallback                : no
   
   Encryption settings for 2a10:50c0::ad2:ff
   ----------------------------------------------------------------------
   DNS-over-HTTPS template     : https://dns.adguard.com/dns-query
   Auto-upgrade                : yes
   UDP-fallback                : no
   

   • If you don't see the new DNS options, you may need to run PowerShell with administrator priviledges
4. Open Settings > Network & internet > Wi-Fi > Hardware properties
5. Click the "Edit" button in the DNS servers block
6. Change the dropdown setting from "Automatic (DHCP)" to "Manual"
7. Ensure both IPv4 and IPv6 are toggled on
8. Under IPv4, enter 94.140.14.14 for the Preferred DNS, and 94.140.15.15 for the Alternate DNS
9. Under IPv6, enter 2a10:50c0::ad1:ff for the Preferred DNS, and 2a10:50c0::ad2:ff for the Alternate DNS
10. Ensure all of the "DNS over HTTPS template" dropdowns are set to "On (automatic template)" if you did step 1-2. If you didn't, choose "On (manual template)" and enter "https://dns.adguard-dns.com/dns-query" for all "DNS over HTTPS template".
11. Click "Save"

Footnotes

1. https://en.wikipedia.org/wiki/DNS_over_HTTPS ↩

2. https://adguard-dns.io/en/public-dns.html ↩