How do I change DNS on an iPhone?
The iPhone has a built-in DNS setting, but only for Wi-Fi networks, and it is set one network at a time. Menu names can differ by iOS version, but the path is usually this:
- Open Settings and tap Wi-Fi.
- Tap the (i) button next to the network you are connected to.
- Scroll down and tap Configure DNS, then choose Manual.
- Remove the existing server with the red minus button if you want to replace it.
- Tap Add Server and type an IP address, for example
1.1.1.3. Add a second one the same way if you want a backup. - Tap Save.
To undo it, return to Configure DNS and choose Automatic. The IP addresses of public providers, including family filters, are in the family DNS servers table.
Does the manual DNS setting work on mobile data?
No. Manual DNS exists per Wi-Fi network only, and the iPhone offers no equivalent field for mobile data. If you set a family filter on your home Wi-Fi, your phone is back on its normal DNS as soon as it switches to mobile data or to a different Wi-Fi network. The manual setting also uses plain IP addresses, so the lookups are not encrypted (see what is DNS over HTTPS).
What are configuration profiles and DoH on iPhone?
Apple lets a configuration profile carry settings for the device, including encrypted DNS (DoH or DoT). When you install such a profile, it can apply beyond one Wi-Fi network. Provider websites and some apps offer them.
A few cautions in general terms:
- Install a profile only from a source you trust. It changes how your phone resolves site names.
- You can see and remove installed profiles in the iPhone settings, usually under General > VPN & Device Management. Names can differ by iOS version.
- Only one encrypted DNS setup is in charge at a time, so remove an old profile before trying another.
How does EZOBLOCKER handle DNS on iPhone?
EZOBLOCKER does not use a profile or the manual Wi-Fi setting. It uses the iPhone's VPN setting, only to carry DNS lookups. When you turn protection on, iOS asks you to add a VPN configuration. After that, the phone's DNS lookups go through a small local connection to EZOBLOCKER's servers, encrypted with DoH. Our servers block the categories you chose, before the page or the ad loads.
Things worth knowing:
- Why "VPN"? That is the name iOS gives the feature. Your pages, messages and videos do not go through our servers, only the DNS lookups.
- Not tied to one Wi-Fi network. It is a device-level connection, not a per-network setting, so it is not limited to one Wi-Fi network.
- Turning it off. Use the app's home screen or the phone's VPN settings.
- One VPN at a time. A phone runs one VPN at a time, so another VPN app turns EZOBLOCKER off. Turn EZOBLOCKER back on when you are done.
- Servers unreachable. Site names may briefly go to well-known public DNS services such as Cloudflare or Quad9 so the internet does not cut out. Details are on the privacy page.
If you choose a public provider under Advanced > DNS provider instead, your lookups go to that provider and EZOBLOCKER's categories do not apply. Parental control explains the Family lock for a child's phone.
Which option should I pick?
| Goal | Option |
|---|---|
| Try a family filter on one home Wi-Fi network | Manual DNS with the provider's IP addresses |
| Encrypted DNS across networks | A trusted profile or an app |
| Category filtering (ads, trackers, gambling, adult) that follows the phone | EZOBLOCKER |
After setup, open the protection check to confirm the filter is active. The DNS changer page shows how EZOBLOCKER fits in. Note that DNS filtering has limits, such as YouTube video ads, listed on what DNS cannot block.