DNS Tracking: What Changed When I Ditched ISP DNS

Switching your DNS resolver away from your ISP’s default can stop them from logging the domain names you look up, but it does not hide your traffic or make you anonymous. You enter a new DNS server address, and your device sends its domain queries there instead; what you get back is less ISP-level logging, but your IP address and the sites you visit are still visible to your network and the sites themselves.

What DNS Actually Does

DNS (Domain Name System) is the phonebook of the internet. When you type example.com, your device asks a DNS resolver to translate that name into an IP address. Your ISP runs resolvers by default, and those resolvers see every domain you request. That log can include timestamps, your IP address, and the domain names – not the full URLs, but enough to build a profile of your browsing habits.

When you switch to a third-party resolver like Cloudflare (1.1.1.1), Google (8.8.8.8), or Quad9 (9.9.9.9), your device sends those queries to a different server. The ISP no longer sees the domain names in its own logs. That is the main change: you remove one observer from the chain.

What Actually Changed for Me

After switching, the most noticeable difference was in my router’s DNS query log – it went empty. My ISP’s portal no longer showed a list of domains from my connection. But that was about it. My browsing speed stayed the same, and I did not see any difference in page load times, because DNS lookups are a tiny fraction of a second.

What did not change:

• My IP address was still visible to every website I visited.
• My ISP could still see the IP addresses I connected to, even if it could not see the domain names.
• Websites still tracked me with cookies, fingerprinting, and analytics.
• My ISP could still see the amount of data I used and when I was online.

In short, DNS tracking is a small slice of the tracking pie. Removing it changes little in your day-to-day privacy.

How to Choose a Private DNS Resolver

If you want to reduce ISP DNS logging, you need to pick a resolver that has a clear privacy policy and supports encrypted DNS. Here are the main options:

• Cloudflare 1.1.1.1 – promises not to sell your data and deletes logs within 24 hours.
• Google Public DNS 8.8.8.8 – logs some data but uses it for debugging and security.
• Quad9 9.9.9.9 – blocks malicious domains and keeps logs short.
• NextDNS – lets you create custom blocklists and see analytics.

For most people, Cloudflare or Quad9 are good starting points. To set them up, go to your device’s network settings, find the DNS section, and enter the new IP addresses. On a router, you change the DNS in the WAN or internet settings. On Windows, you can set it per adapter. On a phone, you can set it per Wi-Fi network.

Common Problem: Encrypted DNS vs. Plain DNS

One issue many people hit is that changing the DNS server address alone does not encrypt your queries. Your ISP might still see them if they use transparent DNS interception, or if your device uses the ISP’s resolver for some queries. To actually hide queries from your ISP, you need DNS over HTTPS (DoH) or DNS over TLS (DoT). These encrypt the query itself, so even if your ISP sees the connection, it cannot read the domain name.

Many browsers now have DoH built in. In Firefox, you can enable it in settings. In Chrome, it is under security settings. On Windows 11, you can turn on encrypted DNS in the network properties. But note: even with DoH, your ISP can still see the IP address you connect to, and that IP often reveals the site (e.g., 142.250.190.46 is Google).

What It Costs and What It Does Not Do

Switching DNS is free and takes about two minutes. There is no downside in terms of speed for most users – the difference between a good and bad resolver is often under 10 milliseconds. But it is not a privacy silver bullet. It does not:

• Hide your IP address (use a VPN for that).
• Encrypt your web traffic (use HTTPS, which most sites already do).
• Stop websites from tracking you (use browser extensions like uBlock Origin or privacy settings).
• Prevent your ISP from seeing your connection metadata (they see IPs, timestamps, and data volumes).

If your goal is to stop all ISP tracking, DNS changes alone will not do it. You would need a VPN (which hides your IP and encrypts all traffic) or Tor (which routes through multiple relays). But those have their own trade-offs: VPNs slow down your connection slightly, and Tor is slow and sometimes blocked.

Safety and Accuracy Notes

When changing DNS, be careful to use the correct IP addresses. A typo can send your queries to a malicious server. Stick to well-known resolvers. Also, some ISPs force their DNS regardless of your settings – in that case, you need to use encrypted DNS or a VPN. Finally, remember that DNS logs are just one type of data. Even if your ISP cannot see domains, they can see IPs, and many sites are on shared IPs, making it harder to identify the exact page.

Frequently Asked Questions

Will changing DNS make me anonymous?

No. DNS only translates names to IPs. Your IP address is still visible to every site you visit, and your ISP can still see that IP. Anonymity requires a VPN or Tor, which hide your IP.

Does changing DNS affect my internet speed?

Usually not noticeably. DNS lookups are tiny and happen once per domain. A good resolver might be a few milliseconds faster than a slow one, but you will not see a difference in page load times for most sites.

Can my ISP still see my browsing history if I use a third-party DNS?

Yes, partially. They can see the IP addresses you connect to, which often reveal the website. They can also see the amount of data and the times you are online. They just cannot see the domain names in their DNS logs.

What is DNS over HTTPS (DoH) and do I need it?

DoH encrypts your DNS queries so your ISP cannot read them. It is helpful if you want to hide domain names from your ISP, but it does not hide IPs. Most modern browsers support it, and you can enable it in settings.

Is it safe to use a third-party DNS resolver?

Yes, if you use a reputable one like Cloudflare, Google, or Quad9. They have clear privacy policies and are widely used. Avoid random DNS servers from unknown sources, as they could log or manipulate your queries.

What is the difference between a VPN and changing DNS?

A VPN encrypts all your traffic and routes it through a server, hiding your IP from websites and your ISP. Changing DNS only changes who resolves domain names. A VPN is a stronger privacy tool, but it is slower and costs money (or has limits). DNS changes are free and quick but offer limited privacy benefits.

Related

• Mini Thermal Printer: How It Prints a Morning Newspaper
• Rust Fearless Concurrency: A Practical Guide
• Configure Thunderbird with iRedMail for Samba4 AD LDAP