This little-known VPN setting can make a surprising difference
VPNs prevent snooping from your ISP by encrypting your traffic and also protect your privacy by routing your searches through their own DNS servers. To take your VPN experience to the next level, try enabling custom DNS settings.
Setting up your own DNS can improve VPN speed
Specifying your own DNS on your VPN can make your encrypted connection faster. This is because you can set your VPN app to require lookups from more powerful DNS servers, such as those offered by Cloudflare DNS (1.1.1.1) or Google DNS (8.8.8.8).
Doing so will make your VPN connection more sensitive as these public DNS compete for the fastest DNS. For example, they perform optimizations for fast loading of popular websites. They are also usually better at handling load during peak usage and rarely fail compared to DNS servers operated by your ISP or VPN provider.
The steps to set up your own DNS will vary depending on your VPN provider, but here’s an example of how to do it with the NordVPN app on Windows:
- Go to Settings > Connections and enable Use your own DNS.
- Enter the public DNS server you want to use (eg 1.1.1.1 for Cloudflare DNS). Click the check mark to save.
- Open any web page in your browser and test it. If the page loads correctly, you’re in action!
One downside to be aware of: some public DNS servers keep logs, which isn’t great for privacy. Others are more privacy-focused, so they delete logs or don’t save logs at all. I recommend researching and choosing a DNS provider with a privacy policy that works for you.
Some DNS servers block ads and malware
Regardless of my personal opinion on the matter, pop-up ads are not as bad as malware. But let’s put them together to highlight a special feature of some DNS resolvers: filtering unwanted content.
It’s true that many VPN services can already help you block ads and avoid common sources of malware, but some DNS providers are really committed to this cause. For example, specialized resolvers like AdGuardDNS and NextDNS are excellent at keeping blacklists up to date. These translators can filter out other things like tracking cookies, phishing sites, or adult content.
When you block unwanted content, you don’t have to waste bandwidth loading images for ads or their complex tracking scripts. A great side effect is that it also speeds up your VPN connection.
A custom DNS VPN can prevent DNS leaks
Connecting to a VPN should hide your real IP address, right? It should be – unless you have what’s called a DNS leak.
A DNS leak occurs when your Internet requests are forwarded to your ISP’s DNS servers inadvertently. DNS leaks can destroy anonymity when using a VPN because:
- Allow your ISP to log your traffic
- Expose your real IP address to the websites you visit
This issue defeats the purpose of using a VPN to bypass censorship or access region-locked content. If you test your VPN’s encryption and find it’s performing less than stellar, what can you do? Setting up your own DNS on your VPN may be the solution.
Some DNS servers have built their reputation on providing better user privacy. For example, Quad9 (9.9.9.9) prides itself on avoiding DNS leaks. Under the jurisdiction of Swiss law, the Company may not record your IP address or collect and sell your user data.
Custom DNS settings can weaken your privacy
Although using custom DNS settings with your VPN can increase your performance, there are risks.
Many public DNS servers keep logs, which is not great for your privacy. That being said, some DNS servers discard logs or don’t store logs at all. I recommend researching and choosing a DNS provider with a privacy policy you’re comfortable with, especially encrypted DNS providers.
Additionally, VPN providers optimize DNS servers for security and privacy, but public DNS resolvers may not have the same mission. If your VPN shuts down unexpectedly or the app doesn’t route your DNS queries correctly, there’s a chance it could reveal your internet activity. So while your VPN service may be faster, you’re entrusting your privacy to two services, not one.
Whether you want to speed up your VPN, block unwanted content, or protect your privacy, there’s a public DNS server for you.