DNS Security vs Encrypted DNS

Make your DNS private. Start with DNS Security. DNS Security helps protect your privacy by encrypting DNS queries with DNS over HTTPS (DoH) and DNS over TLS (DoT). Choose a provider, enable your DNS configuration, and manage your settings in one place—without routing your internet traffic through a VPN. WHY ENCRYPT YOUR DNS? HTTPS protects the content exchanged with websites, but traditional DNS lookups may still be unencrypted. These lookups translate domain names into IP addresses and can reveal the domains your device requests. Encrypted DNS helps protect queries between your device and your chosen DNS provider from eavesdropping and tampering. Your provider still handles those queries, so choose one whose privacy practices you trust. EVERYDAY DNS CONTROL • Use DNS over HTTPS or DNS over TLS. • Choose built-in profiles for Cloudflare and Google. • Enable or disable your DNS configuration from the app. • Choose whether DNS settings apply on Wi-Fi, cellular, or both. • Check DNS protocol and provider details in the Status tab. DNS SECURITY OR DNS SECURITY PRO? DNS Security includes the everyday DNS controls above at no cost. It offers an optional Pro in-app purchase for the advanced features below. DNS Security Pro is the paid edition. It includes the same everyday DNS controls plus these advanced features from the start: PRO FEATURES • Create custom DoH and DoT profiles. • Use built-in AdGuard profiles and download profile updates. • Skip encrypted DNS for some domains or networks. • Sync custom DNS profiles and optional Wi-Fi rules with iCloud. • Enable or disable DNS for specific Wi-Fi SSIDs. • Switch profiles with Shortcuts and URL schemes. • Compare DNS profile response times with the built-in speed test. DESIGNED AROUND PRIVACY DNS Security manages your device's DNS configuration and does not collect personal information. DNS requests are handled by your selected provider under that provider's privacy policy. Encrypted DNS protects DNS queries; it does not make all browsing anonymous. Blocking malicious domains depends on the provider and profile you choose. AUTOMATE YOUR DNS With Pro, use Shortcuts or a compatible app to open a switch URL and select a DNS profile with your preferred network settings. Example: select google-DOH for Wi-Fi, with cellular disabled: dnsapp://switch?config=google-DOH&enableOnWifi=true&enableOnCellular=false Use the scheme for your installed app: • DNS Security Pro: dnssecuritypro:// • DNS Security: dnssecurity:// • Shared scheme: dnsapp:// Replace dnsapp in the example with your app's scheme. The requested profile must already exist in the app. Initial activation may require selecting DNS Security in iOS Settings.

Encrypted DNS adds an extra layer of security on top of standard network protection. Leveraging CERT-EE's threat intelligence, it blocks access to cyber threats directly at the DNS level.