Changing DNS: What It Protects & What Your ISP Still Sees

Changing your DNS server can hide your browsing domain names from your ISP and often speeds up lookups, but it does not make you anonymous—your ISP still sees your IP address, connection times, data volumes, and often the websites you visit through other means. This article explains exactly what DNS does, what a change protects, and what your ISP can still observe.

Background: What DNS Actually Does

DNS (Domain Name System) is the internet’s phone book. When you type example.com, your device asks a DNS resolver to translate that human-friendly name into an IP address like 93.184.216.34. That request travels in plain text by default, so anyone on the network path—including your ISP—can see which domain you’re asking about.

Your ISP typically assigns a DNS resolver automatically when you connect. That resolver logs every lookup it handles, creating a record of the domains you visit. Changing your DNS to a third-party resolver (like Cloudflare, Google, or Quad9) moves those lookup logs away from your ISP, but it doesn’t hide the fact that you’re using the internet or the IP addresses you connect to.

How DNS Works: The Request Flow

Here’s the step-by-step path of a typical DNS lookup:

1. You type example.com in your browser.
2. Your device checks its local cache and hosts file.
3. If not found, it sends a DNS query to the resolver configured on your router or device.
4. The resolver (often your ISP’s) checks its own cache, then queries root servers, TLD servers, and authoritative name servers as needed.
5. The resolver returns the IP address to your device.
6. Your device connects to that IP address directly.

When you change DNS resolvers, steps 3–5 go to a different server. The resolver you choose sees your queries, but your ISP no longer does—unless you use a DNS service that your ISP can still intercept (see below).

What Changing DNS Protects

• Hides domain names from your ISP – Your ISP won’t see the DNS queries for the sites you visit, so it can’t build a list of domains from that data.
• Prevents DNS-based phishing blocks (sometimes) – Some ISPs use DNS to block malicious sites; a third-party resolver may have its own filtering or none.
• Can improve speed – A well-maintained resolver with a large cache or closer geographic location may answer faster than your ISP’s.
• Can improve reliability – If your ISP’s DNS goes down, you can switch to another that stays up.
• Can block malware or adult content – Services like Quad9 or CleanBrowsing filter at the DNS level.

Note that DNS only hides the domain name—not the IP address you ultimately connect to. If a site is hosted on a shared server, the IP may be shared by thousands of sites, so the IP alone doesn’t reveal which site you visited. However, many large sites have unique IPs, and your ISP can still see the connection.

What Your ISP Can Still See

Even with a third-party DNS, your ISP observes:

• Your IP address and all connection timestamps – Every connection you make from your home network is visible.
• Data volume and traffic patterns – How much data you send/receive, at what times, and to which IP addresses.
• The IP addresses you connect to – Even if DNS is hidden, the destination IP is in the packet headers.
• SNI (Server Name Indication) – When you connect to a website over HTTPS, the TLS handshake includes the domain name in plaintext (unless ECH is used).
• Your ISP’s own DNS logs (if you don’t change it) – Obviously, if you don’t change DNS, they see everything.
• DNS over HTTPS (DoH) or DNS over TLS (DoT) traffic is encrypted – But your ISP can still see that you’re using a specific DNS service (e.g., Cloudflare) and the IP addresses you visit.

In short, changing DNS hides domain lookups from your ISP, but it does not hide your internet activity. To hide the destinations themselves, you’d need a VPN or Tor, which encrypts the entire connection.

How to Choose a DNS Resolver

When picking a third-party DNS, consider:

• Privacy policy – Some keep logs, others don’t. Read the policy.
• Speed – Test with tools like DNSPerf (but don’t rely on one test).
• Filtering – Do you want malware blocking? Parental controls?
• Support for DNSSEC – Adds a layer of security against spoofing.
• Encryption – DoH or DoT prevents on-path eavesdropping of your queries.

Common public resolvers include Cloudflare (1.1.1.1), Google (8.8.8.8), Quad9 (9.9.9.9), and OpenDNS (208.67.222.222). Each has different features and privacy postures.

Common Problems and Misconceptions

Misconception: Changing DNS makes me anonymous. False. Your ISP still sees your IP and traffic patterns. DNS is only one piece.

Problem: DNS leaks. Even if you set DNS on your device, your router might still use your ISP’s DNS. Check your router settings or use a tool to verify.

Problem: Some ISPs hijack DNS queries. They may redirect all port 53 traffic to their own resolver, ignoring your settings. Using DoH or DoT (encrypted DNS) prevents this.

Problem: Slow lookups. A misconfigured resolver can be slower. Test and switch if needed.

Misconception: DNS changes affect your IP address. No, your public IP stays the same.

Comparison: DNS vs VPN vs Proxy

To understand what DNS does, compare it with other privacy tools:

Tool	Hides DNS queries from ISP?	Hides IP addresses you visit?	Hides your IP from websites?
Changing DNS	Yes (if not intercepted)	No	No
VPN	Yes (all traffic encrypted)	Yes (ISP sees only VPN IP)	Yes (shows VPN IP)
Proxy (HTTP/SOCKS)	Depends	Partially	Yes (shows proxy IP)

Changing DNS is a quick fix for privacy, but it’s not a full solution. For real anonymity, use a VPN or Tor.

Frequently Asked Questions

Does changing DNS hide my browsing history from my ISP?

No. It hides the DNS lookups, but your ISP can still see the IP addresses you connect to and the amount of data transferred. That data can often be correlated with websites, especially if a site has a unique IP.

Can my ISP see my DNS queries if I use a third-party resolver?

Not normally, unless they intercept port 53 traffic or you use a resolver that logs and shares data. Using encrypted DNS (DoH/DoT) prevents interception, but your ISP can still see that you’re using a specific DNS service.

Is changing DNS safe?

Yes, it’s generally safe. Use a reputable resolver. Avoid unknown ones that might log or sell your data. Also, ensure you use DNSSEC if available.

Will changing DNS speed up my internet?

It can, if your ISP’s DNS is slow or overloaded. But the impact is usually small. Test with different resolvers to see if there’s a difference.

What is DNS over HTTPS (DoH) and should I use it?

DoH encrypts your DNS queries inside HTTPS traffic, so they look like normal web traffic. It prevents on-path eavesdropping and ISP hijacking. It’s a good practice if privacy matters to you.

Can I change DNS on my router or only on individual devices?

You can change it on both. Changing on the router affects all devices on your network, but some devices (like phones) may override it. Changing per-device gives more control.

Related

• Best Alternative Search Engines for Independent Sites
• Best Halloween Horror Games: Top Picks
• How to Fix 414 Request URI Too Large Error