Select Provider for Secure DNS in Google Chrome
Secure DNS in Google Chrome is a built-in privacy feature that hides the websites you visit from internet service providers and network snoops. It works by turning standard web addresses into computer IP numbers using encryption, specifically a method called DNS-over-HTTPS (DoH).
You can force Chrome to use a specific provider for this job by setting up the DnsOverHttpsTemplates policy in your system. This setup keeps your browser locked to your chosen secure lookup service so your browsing history stays private every time you go online.
Open Chrome settings, navigate to Privacy and security > Security, and toggle “Use secure DNS” on. You can then select a provider from the list or enter a custom one.
Enable/Disable DNS Over HTTPS in Chrome
Managing DNS over HTTPS in Chrome happens using the DnsOverHttpsMode policy.
Configuring this feature takes only a few moments.
Launch the Google Chrome browser.
Click the Customize and Control (3 vertical dots button) in the top-right corner and select Settings.

Click the "Privacy and security" link on the left menu of the Settings page.

On the right, click the tile labeled "Security" to expand it.

On the Security settings page, under "Advanced," select the "Use secure DNS" option. Toggle the switch to enable or disable it.

Closing the Chrome settings page concludes the browser configuration.
Enable / Disable Secure DNS in Chrome using the Registry
Manual control remains available via the Windows Registry Editor for advanced configuration.
Open the Windows Registry and navigate to the path below.
Always back up your registry or create a System Restore point as a precaution before proceeding.
ComputerHKEY_LOCAL_MACHINESOFTWAREPoliciesGoogleChrome
Missing a 'Google' folder within the registry paths? Right-click the 'Policies' key, select 'New' > 'Key,' and name it 'Google.' Repeat this process to create a 'Chrome' key if necessary.
Right-click Chrome > New > String Value and name the new REG_SZ DnsOverHttpsMode.
Double-click the DnsOverHttpsMode entry to open it and assign one of the values listed below.
- off = Disable DNS-over-HTTPS
- automatic = Enable DNS-over-HTTPS with insecure fallback
- secure = Enable DNS-over-HTTPS without insecure fallback

Reverting to default settings and regaining user interface control requires deleting the DnsOverHttpsMode entry.
DnsOverHttpsMode
Restarting the computer applies the configuration changes.
Enabling "secure" mode requires strict adherence to DNS-over-HTTPS queries to prevent resolution failures.
This guide enables configuring a DnsOverHttpsTemplates value or selecting a provider to use with secure mode settings.
The configuration process finishes here.
Reference:
Conclusion:
Managing secure DNS in Google Chrome happens through the built-in browser settings or the Windows Registry. Review the key points below:
- Multiple Options: You can select from "off," "automatic," or "secure" modes based on your privacy needs.
- Ease of Access: Adjustments can be made quickly in the Chrome settings or via Registry Editor for more advanced users.
- Backup Precaution: Always remember to back up your registry before making changes to avoid potential issues.
- Restore Defaults: Deleting the "DnsOverHttpsMode" entry will revert Chrome to its default settings, allowing user-configurable options.
- Reboot Required: A computer restart may be necessary for changes to take effect fully.
- Dedicated Support: For enterprise environments, refer to the Chrome Enterprise Policy for additional configuration options.
Understanding these options enhances browsing privacy and security effectively.
Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.
No comments yet — be the first to share your thoughts!