AdGuard DNS: Detailed Configuration and Privacy

Informatec Digital » Resources » AdGuard DNS: Detailed Configuration and Privacy

If you're fed up with ads that invade everything, trackers that follow your every click, and suspicious websites that sneak in without permission, configure AdGuard DNS as a name server It's one of the simplest and most effective ways to gain privacy without complicating your life. You don't need to install strange apps, root your phone, or pay for subscriptions: just change a few network settings and you're done.

Furthermore, AdGuard DNS doesn't just block ads: it also offers different filtering profiles, real-time statistics, and advanced options For those who want detailed control over what is blocked and what isn't. From a hidden setting in Android that allows the use of encrypted DNS, to specific configurations for Windows, macOS, iPhone, or even its own app and web panel, there is a range of possibilities to adapt the protection to each device and each type of user.

What is AdGuard DNS and why does it improve your privacy?

AdGuard DNS is a service of Free public DNS servers focused on privacy and content blockingIt is maintained by AdGuard, a company also known for its ad blocker and VPN. Instead of simply translating domains into IP addresses, its servers apply filter lists to prevent certain domains from resolving.

When a device uses AdGuard DNS, requests to domains of advertising, tracking, or malicious websites They receive a modified or empty response, so the ads don't get downloaded and the tracking scripts can't contact their servers. This results in fewer banners, fewer pop-ups, and fewer marketing profiles about you.

What's interesting is that AdGuard offers the service in several modes or profiles to adjust the level of protection. You can choose from a Standard profile focused on ads and trackersAnother without any filtering and one geared towards families that adds adult content blocking and activates safe mode in compatible search engines.

Furthermore, the company supports several protocols: Simple DNS (Unencrypted), DNS-over-HTTPS (DoH), DNS-over-TLS (DoT), DNS-over-QUIC and DNSCryptThese encrypted protocols prevent third parties, such as your Internet provider or a public WiFi network, from easily spying on the websites you visit or manipulating your DNS requests.

In many cases, the most effective approach is to combine DNS-level ad blocking with Encrypted DNSThis way, in addition to cleaning up your browsing experience, you also strengthen the privacy of your searches. On modern systems like Android, Windows 11, and some routers, enabling these options is becoming increasingly easy.

AdGuard DNS profiles: standard, unfiltered, and family protection

Each AdGuard DNS profile is based on a different set of IP addresses and hostnames, with a specific level of filtering. This allows you to use one type of protection on your personal mobile device and another on a child's computer, for example, without mixing policies.

The profile Predetermined primarily blocks ads, trackers, and certain known threatsIt is the most balanced option for those who want to browse with less advertising but without very aggressive restrictions.

The profile Without filter (unfiltered) offers a Clean DNS resolution, without domain blockingIt's designed for those who simply want to leverage AdGuard's infrastructure, or for cases where filtering might cause compatibility issues with specific services. It can also be used for performance testing.

Finally, the profile of Family Protection In addition to all of the above, add a specific block of adult content and inappropriate categoriesIn addition, try to enable SafeSearch mode in browsers when possible. This is very useful for tablets or mobile phones used by children, or for computers shared at home.

In all cases, AdGuard DNS provides IPv4 addresses for traditional configurations and hostnames for encrypted protocols such as DoH or DoT. For example, the standard version uses a hostname of the type dns.adguard-dns.comwhile unfiltered and family-oriented profiles are based on domains such as unfiltered.adguard-dns.com o family.adguard-dns.com.

If you're looking for a middle ground, the standard profile is usually the best option for personal devices. Family mode makes more sense for children's devices, and the unfiltered profile is only useful if you want to test the infrastructure without affecting the content being loaded or if you need full compatibility.

Setting up AdGuard DNS on Windows step by step

On Windows you can use AdGuard DNS in the classic way, by entering IPs as DNS servers, or take advantage of modern features such as Encrypted DNS with DNS-over-HTTPSIn Windows 11, this second option is the most interesting, because it improves privacy and prevents traffic manipulation.

To configure AdGuard DNS in Windows 11, the general process would be something like this: first you have to go into the network and internet settingsYou can access it either from the Settings panel or from the network icon in the taskbar. Once there, you must select whether you are connecting via Wi-Fi or Ethernet, depending on your situation.

Within the active connection settings, you'll find a section dedicated to DNS. There you can choose the manual DNS assignmentEnable IPv4 and enter one of AdGuard's IP addresses as the preferred server, for example, the one corresponding to the default profile. Windows then allows you to enable DNS over HTTPS and select a manual template, where you enter the AdGuard DoH URL (for example, the endpoint that begins with...). https://dns.adguard-dns.com/dns-query in the case of the standard profile).

Once the changes are saved, the system will begin using AdGuard DNS for both unencrypted and encrypted queries. protected HTTPS requestsprovided the applications respect the system's network configuration. If you want to use a different profile, simply change the IP address and hostname to those of the unfiltered or family mode.

In earlier versions of Windows, where native DoH support is more limited, you can also configure it from the network card propertiesBy entering only the AdGuard IPs as the preferred and alternate DNS servers, filtering will work, although without system-level encryption.

How to use AdGuard DNS on macOS

On macOS, the simplest method is to use the manual DNS configuration From the system's network settings. There's no need to install additional applications if the unencrypted version of the service is sufficient.

To apply it, simply open System Settings, go to the Network section, and select the active connection, either Wi-Fi or wired. There you will see a specific section for... DNS serversThere you can remove the default ones (usually those from your operator) and add the IPs corresponding to the AdGuard profile you are interested in, for example the set of addresses assigned to standard mode.

After saving the changes, all DNS queries from the Mac will be sent to AdGuard, which will block ads, trackers, and malicious websites according to their filtering lists. If you need to change profiles, simply replace the IP addresses with those from unfiltered or family mode.

If you want to take it a step further and use encrypted DNS on macOS, you can use configuration profiles or tools that support it. DNS-over-HTTPS or DNS-over-TLSor even to AdGuard's own apps that integrate ad blocking and advanced DNS protection, but for many users the classic DNS setting already represents a significant improvement.

AdGuard DNS on Android: the private DNS trick

Android has included a feature since version 9 called Private DNS When properly configured, this feature allows you to block ads and improve privacy without installing apps or using a VPN. This setting is somewhat hidden, but it activates in under a minute and has a very direct impact on the user experience.

The Domain Name System (DNS) is responsible for translating the URLs you type into your browser into IP addresses. By default, these queries are usually handled by internet service providers (ISPs), which allows them to... record your browsing habits and, in many cases, use them for targeted advertising or analysis.

By changing the default DNS and using a server like AdGuard's with support for DNS-over-TLSThe requests travel encrypted and pass through filters that block ad and tracking domains. In practice, when an app tries to contact an ad server, the mobile device receives an empty or modified response, and the ads are never downloaded.

This not only improves privacy: it also reduces data consumption and can make some pages and applications... load fasterThis is because it eliminates the need for heavy advertising scripts and unnecessary external connections. However, the website design may still include spaces for advertising, so you'll sometimes see empty areas where banners used to be.

To configure AdGuard DNS as a private DNS on a compatible Android device, go to Settings and look for the Connections, Network & Internet section or something similar. There's usually an option there called Private DNSOnce there, select the private DNS provider's hostname option and enter the AdGuard hostname, for example. dns.adguard-dns.com for the standard profile.

After saving, all phone connections will be routed through AdGuard DNS over TLS, applying the appropriate filtering. This change is reversible: if you encounter problems with a specific Wi-Fi network, you can revert to automatic settings at any time.

It's important to keep in mind that this system has limitations. DNS blocking is not usually as effective against ads embedded in video platforms like YouTube, which use more complex mechanisms. And on public Wi-Fi networks with captive portals (airports, hotels, cafes), private DNS may prevent the login page from appearing, forcing you to temporarily disable it in order to connect.

Connect Android to AdGuard DNS from the web panel and the app

In addition to private DNS settings, AdGuard offers a AdGuard DNS-specific application and a web panel (Dashboard) at adguard-dns.io that allows you to link devices in a more controlled way and take advantage of additional features.

To connect an Android device through the panel, the first step is to enter the Dashboard and use the option to Connect new deviceIn the device type dropdown, select Android, assign a name to the device, and continue with the wizard.

In the AdGuard app usage section, you can choose from several ways to configure the device: configure it directly if you are browsing from the mobile device you want to protect, scan a unit’s QR code You can use your mobile device to copy a configuration identifier and paste it into the corresponding app. This identifier is used to link the device to your cloud DNS server.

The AdGuard DNS app uses VPN-like protocols: you'll need to allow the creation of a local VPN profile for protection to activate. From the main screen, simply tap on Activate to initiate protection whenever you need it. Because it works at the network level, the block applies to all applications on the device.

The main appeal of the official app is that it allows you Use encrypted DNS easilyChoose from several protocols supported by AdGuard (such as DoH or DoT) and combine DNS filtering with a highly effective system ad blocker, without having to touch advanced operating system menus.

AdGuard on Android with the AdGuard Ad Blocker app

Another popular option is to combine AdGuard DNS with the AdGuard Ad Blocker appA comprehensive ad blocker that works system-wide. This application includes a built-in DNS protection module that allows you to select custom servers.

The usual process involves installing the app on the device you want to protect and, once open, going to the shield icon in the bottom bar. Then, you need to enter the section of DNS Protection and then in DNS Server. As you scroll down you will see the custom servers section and the option to add a new server.

At that point, you can copy one of AdGuard's DNS addresses, such as those for DNS-over-HTTPS, and paste it into the server address field. If you're unsure which protocol to choose, AdGuard itself recommends DoH as a balanced optionbecause it combines good performance and privacy.

Once added, the new server appears in the list of custom servers, and you can select it to be used as the default by the app. Simply tap its name or the corresponding selector, and then tap Save and Select.

From that point on, the device will use AdGuard DNS through the app, with DNS filtering and system-level ad blocking. It's a very complete solution if you're looking for fine control over filters, lists, and statistics and you don't mind relying on an additional application that creates a local VPN-type profile.

Using AdGuard DNS with AdGuard VPN

Many VPN services don't support their own encrypted DNS or don't allow customization, which means some domain name traffic can remain visible or manipulated. AdGuard VPN, however, integrates the ability to use AdGuard DNS as a private DNS server within the VPN tunnel itself.

To set it up, install the AdGuard VPN app on the device you want to protect, and once open, access the settings menu at the bottom. In the app's settings section, you'll see a section dedicated to... DNS serverwhere you can select built-in servers or add a custom one.

If you choose the custom option, simply enter an AdGuard DNS address, preferably in DNS-over-HTTPS format for maximum privacy. After saving and selecting the added server, the VPN will start using it for all DNS queries within the tunnel.

This approach is especially interesting if you need combine VPN and encrypted private DNS in a single package, reducing DNS leaks and maintaining ad and tracker filtering even when you're connected to servers in other countries.

Advanced configuration from the AdGuard DNS Dashboard

In addition to basic setup and apps, AdGuard DNS has a web control panel where you can manage servers, devices, and advanced filtering options. One of its most powerful features is the ability to view highly detailed statistics on your devices' DNS activity.

In the Dashboard you can see, for each device, which sites it has tried to connect to, which requests have been blocked, when, and under what ruleIt is also possible to group statistics by date, country or device, and even move to more detailed views for in-depth analysis.

Another important section is the one dedicated to access control in AdGuard DNS v2.5 and later versions. Before introducing a future connection feature using Dedicated IPv4 addressesThe company has added security parameters to prevent malicious uses, such as DNS amplification attacks that generate unwanted traffic.

These access configurations include the fields of Permitted Clients, Unpermitted Clients, and Disallowed DomainsIn the first, you can specify which clients (for example, by IP or identifier) ​​are authorized to use your DNS server; in the second, block specific clients; and in the third, define domains that will not be able to access the server even if the rest of the rules allow it.

By customizing these parameters, you turn your AdGuard DNS server into a kind of smart protector which only accepts requests according to your criteria. Blocked requests won't even appear in the query log, which, in pay-per-volume environments, can also help you avoid generating charges for unauthorized traffic.

User rules and IP logging

The Dashboard also allows you to define additional user filtering rules To further refine server behavior, AdGuard has been increasing the number of available rules depending on the subscription type, so that basic and personal accounts have a modest limit, while team and enterprise plans handle thousands or tens of thousands of rules.

For example, a basic subscription might include around 100 custom rules, while a personal plan operates in the range of 1.000 configurable rulesIn team plans, the number increases to several thousand, and in enterprise solutions, it can reach 50.000 rules or more, covering complex environments with many specific domains.

Additionally, in the advanced server settings section, there is an option to check a box to record the IP address associated with each DNS queryIf you enable this option, the source IPs will be recorded in the filtering log, allowing you to better analyze which devices are generating each type of traffic. This is useful for auditing and monitoring, but it also means storing more sensitive information, so it's worth considering from a privacy perspective.

Taken together, these capabilities make AdGuard DNS more than just a simple ad-blocking server: it's a management and monitoring platform It can be adapted to both simple home use and more demanding environments, provided you are willing to spend a little time on the setup.

Ultimately, choosing AdGuard DNS is a convenient way to gain control over what goes in and out of your devices: it reduces advertising noise, limits tracking, improves the privacy of queries, and offers advanced analytics tools for those who want more than just a simple "set it and forget it" approach. Whether through private DNS settings on Android, manual configuration on Windows and macOS, or the AdGuard apps and web dashboard, you have plenty of options to tailor the level of protection to your needs and those of your family.