Cloudflare Docs
1.1.1.1
Cloudflare Docs
1.1.1.1
Search icon (depiction of a magnifying glass)
GitHub icon
Visit 1.1.1.1 on GitHub
Set theme to dark (⇧+D)

Set up Cloudflare 1.1.1.1 resolver

By default, the DNS server your devices use is provided by your Internet provider. To start using 1.1.1.1 for your DNS queries, you will need to change the DNS settings in your device or router.

You can also set up 1.1.1.1 for Families for an added layer of protection on your home network against malware and adult content. 1.1.1.1 for Families leverages Cloudflare’s global network to ensure that it is fast and secure around the world, and includes the same strong privacy guarantees that we committed to when we launched 1.1.1.1.

1.1.1.1 for Families

1.1.1.1 for Families categorizes destinations on the Internet based on the potential threat they pose regarding malware, phishing, or other types of security risks. When enabled, 1.1.1.1 for Families will block resolution to these destinations.

1.1.1.1 for Families has two default options:

Block malware

Use the following DNS resolvers to block malicious content:

  • 1.1.1.2
  • 1.0.0.2
  • 2606:4700:4700::1112
  • 2606:4700:4700::1002
Block malware and adult content

Use the following DNS resolvers to block malware and adult content:

  • 1.1.1.3
  • 1.0.0.3
  • 2606:4700:4700::1113
  • 2606:4700:4700::1003

Cloudflare returns 0.0.0.0 if the fully qualified domain name (FQDN) or IP in a DNS query is classified as malicious.

DNS over HTTPS (DoH)

If you have a DoH-compliant client, such as a compatible router, you can set up 1.1.1.1 for Families to encrypt your DNS queries over HTTPS. This prevents spoofing and tracking by malicious actors, advertisers, ISPs, and others. For more information on DoH, refer to the Learning Center article on DNS encryption.

To configure an encrypted DoH connection to 1.1.1.1 for Families, type one of the following URLs into the appropriate field of your DoH-compliant client:

Block malware 
https://security.cloudflare-dns.com/dns-query
Block malware and adult content 
https://family.cloudflare-dns.com/dns-query

DNS over TLS (DoT)

1.1.1.1 for Families also supports DoT if you have a compliant client, such as a compatible DoT router. DoT allows you to encrypt your DNS queries, protecting you from spoofing, malicious actors, and others. You can learn more about DoT in the Learning Center article on DNS encryption.

To configure an encrypted DoT connection to 1.1.1.1 for Families, type one of the following URLs into the appropriate field of your DoT-compliant client:

Block malware 
security.cloudflare-dns.com
Block malware and adult content 
family.cloudflare-dns.com