SentryFi- SentryFi
- DNS guides
- DNS on Android
DNS · Android
How to check DNS on Android
Android has two DNS settings that matter: Private DNS for the whole phone, and the DNS a WiFi network hands out. Here’s where to find both.
First check Private DNS: on Pixel it’s in Settings > Network & internet > Private DNS (Samsung: Settings > Connections > More connection settings > Private DNS). “Automatic” uses encrypted DNS when the network supports it; a hostname means all lookups go to that provider. To see the WiFi network’s own DNS servers, open the network’s details; many phones list DNS there, and others only show it when IP settings are set to Static.
1. Private DNS (whole phone)
| Off | The phone uses the DNS servers each network gives it, unencrypted. |
|---|---|
| Automatic (default) | Encrypted DNS is used when the network’s DNS supports it; otherwise normal DNS. |
| Private DNS provider hostname | All lookups go, encrypted, to the provider you entered (for example a public resolver). |
Google notes Private DNS secures DNS questions and answers only; it doesn’t encrypt anything else. Menu names differ slightly between brands and Android versions.
2. The WiFi network’s DNS servers
- Open Settings > Network & internet > Internet (Samsung: Connections > Wi‑Fi).
- Tap the gear or the network name to open its details.
- Look for DNS in the network details. If it isn’t shown, your phone hides it unless IP settings are set to Static; don’t change that just to look.
What DNS servers tell you
| Your router’s address (e.g. 192.168.x.x) | Normal on home and many public networks: the router passes lookups on. |
|---|---|
| Your internet or mobile provider | Normal; the default for most connections. |
| A public resolver (Cloudflare, Google, Quad9…) | Normal if you or the network chose it. |
| Something you don’t recognize on your home WiFi | Worth a closer look: changed DNS is a common sign of a tampered router. |
Which server is listed doesn’t tell you whether answers are honest. Comparing answers with a trusted resolver does; that’s what SentryFi’s DNS check does.
Captive portals and Private DNS
A Private DNS hostname can stop hotel or airport sign-in pages from loading. Switch to Automatic until you’re signed in. See login page not loading on Android.
Frequently asked questions
Should Private DNS be on or off?
Automatic is a sensible default: it encrypts DNS when possible without breaking sign-in pages. A provider hostname gives more consistency but can block captive portals.
How do I know if my DNS is being changed by the network?
Compare the answers the network gives with a trusted resolver. SentryFi does this comparison and flags answers that differ.
Where is DNS on Samsung phones?
Private DNS is under Settings > Connections > More connection settings. WiFi DNS servers may only appear in a network’s IP settings.
