Secure DNS A must!
Who What Where When Why and How
Who: You!
- What: Use a secure DNS provider
- Where: On your home router and everywhere you can
- When: As soon as practical
- Why: DNS providers, like your ISP, only translate DNS names to IP address's. They wont filter for you and will serve up malicious sites! They don't do this to be malicious, they do it to reduce calls to their tech support centers. Since some pages will not load or as slow to load.
- How: Change your router to use a secure DNS provider, we recommend OpenDNS.com. They have several free options and more advanced options for businesses and even large enterprises.
We like them since they get threat feeds from Talos, the world's largest threat feed service fed by the top security providers.
You can point your DNS settings to their IP's and you're done! This will give you the most basic protection. Give it a try, the OpenDNS nameservers are 208.67.222.222 and 208.67.220.220.
If you sign up for a family account you can get granular control of what category websites your family can browse to. Let's say to you want to block social media, just a few clicks and it's blocked. They even provide guides on how to configure your systems.
Android 9:
If you are lucky enough to run the newest Android version, now you can have SecureDNS without a VPN! Unfortunately it will not accept IP's and must be a DNS entry. For this we recommend Quad9.
- Go to Settings –> Network & Internet –> Advanced –> Private DNS.
- Select the Private DNS provider hostname option.
- Enter dns.quad9.net and select Save.
Why quad9, because they protect from malware and other sites without configuration.
Here is a video of how using secure DNS can prevent threats and breaches.