What are the Cloudflare DNS addresses?

Cloudflare DNS primary address is 1.1.1.1 and secondary is 1.0.0.1 for IPv4. For IPv6: 2606:4700:4700::1111 and 2606:4700:4700::1001. For encrypted DNS: hostname one.one.one.one for DNS over TLS (Android Private DNS), or https://cloudflare-dns.com/dns-query for DNS over HTTPS.

Is Cloudflare 1.1.1.1 safe to use?

Yes. Cloudflare 1.1.1.1 is operated by Cloudflare, a major internet infrastructure company. They commit to not selling query data, not using it for ad targeting, and purging logs within 24 hours. Cloudflare DNS is independently audited for privacy compliance. It is considerably safer for privacy than typical ISP DNS, which is often logged and monetised.

Does Cloudflare 1.1.1.1 block anything?

The standard 1.1.1.1 does not block anything — it resolves all valid domains. Cloudflare also offers 1.1.1.2 and 1.0.0.2 which block malware domains, and 1.1.1.3 and 1.0.0.3 which additionally block adult content. These are all free. Use the standard addresses for unfiltered resolution.

Will switching to Cloudflare DNS make my internet faster?

DNS speed affects how quickly your browser starts loading each new website — typically a small but measurable improvement. Cloudflare 1.1.1.1 consistently ranks fastest in DNS benchmark tests. Download speeds, streaming, and gaming ping are determined by your connection to the server, not DNS — those will not change.

What is the difference between Cloudflare DNS and Cloudflare as a CDN?

Cloudflare DNS (1.1.1.1) is a free public DNS resolver anyone can use. Cloudflare as a CDN is a service where your website domain routes traffic through Cloudflare infrastructure for speed, security, and DDoS protection. They are separate services — using Cloudflare DNS does not mean your website uses Cloudflare as a CDN or proxy.

Domain Management

How to Set Up Cloudflare DNS: Free, Fast, and Private (1.1.1.1 and 1.0.0.1)

Domain 360 Team

·June 27, 2026·7 min read

Cloudflare launched 1.1.1.1 on April 1, 2018. The date made people assume it was a joke. It was not — it became one of the most-used DNS resolvers in the world within months, primarily because it is free, fast, and the privacy policy is unusually clear.

Here is how to switch to it on every device you own.

Why Use Cloudflare DNS?

Speed. In independent DNS resolver benchmarks (DNSPerf, dnsperf.com), 1.1.1.1 consistently ranks as the fastest or among the fastest public resolvers globally. Faster DNS means websites start loading faster — not dramatically, but measurably.

Privacy. Most ISP DNS servers log your queries — a complete record of every domain you visit. Many ISPs monetise this data. Cloudflare publishes a specific commitment: queries to 1.1.1.1 are not used for ad targeting, are not sold to third parties, and logs are purged within 24 hours. Cloudflare hired KPMG to audit this commitment.

Reliability. Cloudflare operates one of the largest anycast networks in the world. The same IP (1.1.1.1) routes to the nearest Cloudflare server in your region. Uptime is exceptional.

The Cloudflare DNS Addresses

Standard (unfiltered): Primary IPv4: 1.1.1.1 Secondary IPv4: 1.0.0.1

Malware blocking: Primary: 1.1.1.2 | Secondary: 1.0.0.2

Malware + adult content blocking: Primary: 1.1.1.3 | Secondary: 1.0.0.3

For Android Private DNS (DNS over TLS): one.one.one.one For browsers (DNS over HTTPS): https://cloudflare-dns.com/dns-query

Windows 11

Preferred: 1.1.1.1
Alternate: 1.0.0.1

Enable the Encryption preference option and choose DNS over HTTPS (Automatic template) or enter the Cloudflare DoH address. Click Save.

Windows 10

Control Panel, Network and Sharing Center, Change adapter settings. Right-click your active connection, Properties. Select Internet Protocol Version 4, Properties. Choose Use the following DNS server addresses. Enter 1.1.1.1 and 1.0.0.1. Click OK.

For encrypted DNS on Windows 10, the DoH setting is in the Windows Registry or achievable through the Cloudflare 1.1.1.1 app (available in the Microsoft Store).

macOS

System Settings, Network. Click your connection, Details, DNS tab. Click + and add 1.1.1.1, then 1.0.0.1. Remove old ISP DNS entries if desired. Click OK, then Apply.

For encrypted DNS, install the Cloudflare 1.1.1.1 app from the Mac App Store, which configures DNS over HTTPS system-wide.

Android

Settings, Network and internet, Private DNS, Private DNS provider hostname. Enter: one.one.one.one

This uses DNS over TLS — encrypted DNS — which is better for privacy than plain DNS. Our guide on Private DNS explains what the difference means.

iPhone and iPad

Settings, Wi-Fi, tap the i next to your connected network, Configure DNS, Manual. Remove existing servers, add 1.1.1.1 and 1.0.0.1. Save.

For encrypted DNS on iOS, download the Cloudflare 1.1.1.1 app from the App Store, which installs a configuration profile for system-wide DNS over HTTPS.

Router (Best Option — Covers All Devices)

Log in to your router admin panel (usually 192.168.1.1 or 192.168.0.1). Find DNS settings under WAN, Internet, or Advanced settings. Set primary DNS to 1.1.1.1 and secondary to 1.0.0.1. Save and restart the router.

Every device on your network now uses Cloudflare DNS without individual configuration. When you buy a new device, it automatically benefits from the change.

After Setup

Flush your DNS cache to ensure immediate effect. Windows: ipconfig /flushdns. Mac: sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder.

Test the change by visiting a website you have not visited in a while — the fresh lookup confirms Cloudflare DNS is working. The Cloudflare 1.1.1.1 check page shows whether you are connected to Cloudflare DNS and whether encryption is working.

Never lose a domain again

Track every domain you own in one dashboard. Free for up to 15 domains.