How to Enable Secure DNS in Google Chrome
Secure DNS in Google Chrome is a built-in privacy setting that scrambles your web traffic so internet providers and network snoops cannot see the specific pages you visit. Also known as DNS-over-HTTPS (a protocol that hides website requests inside normal encrypted web traffic), this feature creates a secure tunnel for your browser.
Google added this protection starting with Chrome 78 to block web trackers and stop DNS hijacking. Turn on Secure DNS in a few clicks to keep your browsing activity private from outside eyes.
Open Chrome settings, navigate to Privacy and security, then Security. Under Advanced, find “Use secure DNS” and toggle it on. You can then choose a provider from the list or enter a custom one.
Enable/Disable DNS Over HTTPS in Chrome
To enable secure DNS Chrome settings, open your browser menu, go to Privacy and security, and turn on the option to use secure DNS. This encrypts your website address lookups so internet providers cannot track the sites you visit.
- Open the Google Chrome browser.
- Click the three vertical dots in the top right corner.
- Select Settings.

- Click Privacy and security on the left sidebar.

- Click the Security tile.

- Find Use secure DNS under the Advanced section.
- Toggle the switch to On or Off.
- To choose a specific provider, click Choose another provider. You can pick from a list or type in a custom address.

Enable / Disable Secure DNS in Chrome using Group Policy
You can enable secure DNS Chrome settings across multiple computers by using the Local Group Policy Editor. Open the run dialog with Win+R, type gpedit.msc, and press Enter to configure the DNS over HTTPS policies for all network users at once.
- Press Win+R, type gpedit.msc, and press Enter to open the Local Group Policy Editor.
- Navigate to: Computer Configuration Administrative Templates Google Google Chrome.
- Find the policy named Configure the DNS-over-HTTPS mode.
- Double-click it and select Enabled.
- In the Options box, choose off, automatic, or secure from the dropdown menu.
- Click Apply and OK.
Enable / Disable Secure DNS in Chrome using the Registry
To enable secure DNS Chrome settings through the Windows Registry, you need to open Registry Editor and add the correct policy keys. This advanced method lets you force DNS encryption on computers where local group policies are unavailable.
Back up your registry or set a System Restore point before touching any keys.
Navigate to this path:
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome
If the folders do not exist, right-click the parent folder, select New Key, and name them Google and Chrome.
- Right-click in the right pane.
- Select New String Value.
- Name it DnsOverHttpsMode.
- Double-click it and set the value to:
- off: Disables secure DNS.
- automatic: Uses secure DNS if available.
- secure: Always uses secure DNS.

Your computer may need to be restarted for these changes to take effect. This post helps you manage a DnsOverHttpsTemplates for your network.
Reference: Chrome Enterprise Policy
Conclusion
Managing secure DNS settings in Chrome helps keep your internet activity private by letting you choose between automatic setup or strict encryption. You can easily revert these changes at any time by removing the applied policies or registry entries.
- Options: Choose "automatic" for the best balance or "secure" for maximum privacy.
- Restoring: Delete the registry entry or set the policy to "Not Configured" to go back to default settings.
- Conflicts: Be aware that local registry edits may be overridden by domain-level group policies set by your IT administrator. If your settings are grayed out, a company policy is likely in charge.
- Reboot: Always restart Chrome or your computer if settings do not take effect immediately.
How to fix enable secure DNS in Chrome?
Open Google Chrome. Select the three-dotted menu icon in the top right corner. Then, go to settings. On the left side, select
Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.
[…] article explains how to select the URI template (DNS provider) for the desired DNS-over-HTTPS resolver in Google […]