Every time a device in your home opens a website, it first asks a DNS resolver to translate the name (example.com) into an address it can reach. By default that job goes to whatever resolver your internet provider or router picks, and it sees every domain you look up. Quad9 is a free resolver you can use instead, run by a nonprofit that doesn't keep a record of you.
What it does
Translates domain lookups like any resolver, at the address 9.9.9.9.
Blocks known phishing, malware, and botnet domains before your device connects, using threat intelligence.
Doesn't store your IP address and doesn't sell your data.
Supports encrypted DNS (DNS over HTTPS and DNS over TLS), so your lookups aren't readable in transit.
Run by the Quad9 Foundation, a nonprofit based in Switzerland.
Why we recommend it
Monday's study found that none of 25 router brands will say whether they log your DNS requests. You can't force a manufacturer to be transparent, but you can decide which resolver your traffic goes to. Quad9 is free, requires no account, and works for non-technical households: it's a set-it-once change, not a subscription or an app to manage. It focuses on security and privacy rather than custom ad-blocking, so there's little to tune.
How to start
On a single device: change its DNS server to 9.9.9.9 in network settings.
On your whole home network: set 9.9.9.9 as the DNS server in your router settings, so every device is covered, including smart TVs, consoles, and IoT gadgets that can't be configured on their own.
If your router or device supports encrypted DNS, turn it on and point it at Quad9.
Free at quad9.net.
Quick tip
Set Quad9 on the router, not just your phone. That's the one place that covers the devices you can't configure individually, the smart TV and the thermostat included.
Up next · Friday
The ten-minute walk-through: how to lock down the router itself, from the admin password to a guest network for your smart-home gear.