Select Secure DNS Provider in Google Chrome

This article explains how to select a custom web address (DNS provider) for your DNS-over-HTTPS resolver in Google Chrome.

Google Chrome is a web browser from Google used on many devices. It shares much of the same code as Microsoft Edge, making the two browsers work in very similar ways.

Why do this? Using a secure DNS provider helps stop people from spying on the websites you visit. It also protects you from fake websites that try to steal your information.

What happens when done? Your browser will use an encrypted connection to look up websites. This makes your web browsing safer and more private.

Set Secure DNS Provider in Chrome

Most users can rely on Chrome’s automatic detection. Chrome automatically identifies and uses secure DNS settings if your network supports them. You should only manually set a template if you need to force the browser to use a specific provider that is not automatically detected or if you are managing a network with strict security requirements.

To check your settings in Chrome version 130 or higher:

1. Open the Google Chrome browser.
2. Click the three dots in the top right corner and select Settings.
3. Navigate to Privacy and security > Security.
4. Look for the section labeled Use secure DNS.
5. You can toggle this on and choose a provider from the list or enter your own.

You can close the settings page when finished.

Select Secure DNS Provider in Chrome using the Registry

For advanced setups, you can use the Windows Registry to force a specific provider. Important Note: For better stability and to avoid errors, it is highly recommended to use the official Google Chrome ADMX templates for Group Policy instead of manual Registry editing.

Warning: Changes to the HKLM (HKEY_LOCAL_MACHINE) hive require administrative privileges. Security software on your computer may block these changes to protect your system configuration.

If you must use the Registry, follow these steps:

1. Open the Windows Registry.
2. Remember to back up your registry before making any changes, or create a System Restore point as a precaution.
3. Navigate to this path: Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome
4. If you do not see these folders, right-click the Policies folder to create new keys named Google and then Chrome.
5. Right-click in the right pane, select New > String Value, and name it DnsOverHttpsTemplates.
6. Double-click the new value and enter the web address of your chosen provider.

Common provider addresses:

• Cloudflare: https://cloudflare-dns.com/dns-query
• Google: https://dns.google/dns-query
• Quad9: https://dns.quad9.net/dns-query

You can add multiple providers by putting a space between the web addresses.

To undo this, simply delete the DnsOverHttpsTemplates value you created. You may need to restart your computer to see the changes take effect.

Reference:

Chrome Enterprise Policy

Conclusion: Setting up secure DNS makes your internet usage safer. Most users should stick to the Chrome settings menu, while the Registry method remains available for those who need custom, system-wide configurations.