DNS Security Pro vs DNS Forge

Make your DNS private. DNS Security helps protect your privacy by encrypting DNS queries with DNS over HTTPS (DoH) and DNS over TLS (DoT). Choose a provider, enable your DNS configuration, and manage your settings in one place—without routing your internet traffic through a VPN. WHY ENCRYPT YOUR DNS? HTTPS protects the content exchanged with websites, but traditional DNS lookups may still be unencrypted. These lookups translate domain names into IP addresses and can reveal the domains your device requests. Encrypted DNS helps protect queries between your device and your chosen DNS provider from eavesdropping and tampering. Your provider still handles those queries, so choose one whose privacy practices you trust. EVERYDAY DNS CONTROL • Use DNS over HTTPS or DNS over TLS. • Choose built-in profiles for providers including Cloudflare, Google, and AdGuard. • Enable or disable your DNS configuration from the app. • Choose whether DNS settings apply on Wi-Fi, cellular, or both. • Check DNS protocol and provider details in the Status tab. DNS SECURITY OR DNS SECURITY PRO? DNS Security includes the everyday DNS controls above at no cost. It offers an optional Pro in-app purchase for the advanced features below. DNS Security Pro is the paid edition. It includes the same everyday DNS controls plus these advanced features from the start: ALL PRO FEATURES INCLUDED • Create custom DoH and DoT profiles. • Download updates to built-in DNS profiles. • Enable or disable DNS for specific Wi-Fi SSIDs. • Switch profiles with Shortcuts and URL schemes. The difference is advanced control: both editions support encrypted DNS. You can unlock the Pro tools inside DNS Security or choose DNS Security Pro with those tools already included. DESIGNED AROUND PRIVACY DNS Security manages your device's DNS configuration and does not collect personal information. DNS requests are handled by your selected provider under that provider's privacy policy. Encrypted DNS protects DNS queries; it does not make all browsing anonymous. Blocking malicious domains depends on the provider and profile you choose. AUTOMATE YOUR DNS With Pro, use Shortcuts or a compatible app to open a switch URL and select a DNS profile with your preferred network settings. Example: select google-DOH for Wi-Fi, with cellular disabled: dnsapp://switch?config=google-DOH&enableOnWifi=true&enableOnCellular=false Use the scheme for your installed app: • DNS Security Pro: dnssecuritypro:// • DNS Security: dnssecurity:// • Shared scheme: dnsapp:// Replace dnsapp in the example with your app's scheme. The requested profile must already exist in the app. Initial activation may require selecting DNS Security in iOS Settings. Choose your DNS. Control your settings. Add privacy to every lookup that uses your encrypted DNS configuration.

DNS Forge encrypts every DNS query on your iPhone, stopping your ISP, carrier, and network admin from seeing what you look up. No VPN required. No monthly fees. One tap to activate. PRIVATE BY DEFAULT Every site you visit starts with a DNS query. Normally, those queries leave your device in plain text, fully visible to whoever runs your network. DNS Forge routes them over HTTPS or TLS so your browsing stays private. 6 TRUSTED PROVIDERS Six privacy-focused resolvers, pre-configured and ready: • Cloudflare: Fast, no-log DNS • Cloudflare Family: Blocks malware and adult content • AdGuard DNS: Blocks ads and trackers at the DNS level • AdGuard Family: Adds parental controls and Safe Search • Mullvad DNS: From the makers of Mullvad VPN, zero logs • Quad9: Blocks malicious domains, non-profit operated Or add your own — NextDNS, ControlD, or any DoH or DoT endpoint, including self-hosted resolvers. 10 DIAGNOSTIC TOOLS A full network toolkit, built in: • DNS Resolver Test: Confirm your resolver is active • Hijack Detector: 5-step canary check for MITM and hijacking • Benchmark: Real round-trip latency, ranked fastest to slowest • DNS Lookup: Query any domain, any record type • My IP: Public IP address and geolocation • Reverse DNS: Host lookup for any IP address • WHOIS / RDAP: Domain registration and ownership data • Domain Certificate: TLS certificate details for any site • Cert Inspector: Verify your resolver's own TLS certificate chain • HTTP Headers: Inspect response headers for any URL SMART NETWORK RULES Apply encrypted DNS exactly where you want it - always on, Wi-Fi only, cellular only, or specific SSIDs. Exclude trusted home or work networks. Rules take effect instantly. ICLOUD SYNC Custom DNS profiles sync automatically across all your devices. WIDGET + SHORTCUTS See your active resolver and whether DNS is currently applied on your home screen or lock screen. Build automations in the Shortcuts app to change resolvers by network, time, or any trigger. DNS Forge uses Apple's Network Extension framework to apply DNS settings at the OS level. Your queries go directly to your chosen resolver. DNS Forge never sees them. DNS Forge is an independent app and is not affiliated with or endorsed by Cloudflare, AdGuard, Mullvad, Quad9, NextDNS, or ControlD.