# 🛡️ Your ISP Logs Every Site You Visit — One Setting Stops It **URL:** \ **Category:** Tutorials & Methods\ **Tags:** hacking, privacy, tips-tricks\ **Created:** [Março 19, 2026, 7:13pm UTC](https://onehack.st/t/your-isp-logs-every-site-you-visit-one-setting-stops-it/319871 "2026-03-19T19:13:16Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![k1neroast](https://onehack.st/user_avatar/onehack.st/k1neroast/32/168827_2.png) [@k1neroast](https://onehack.st/u/k1neroast)\ **Post date:** [Março 19, 2026, 7:13pm UTC](https://onehack.st/t/your-isp-logs-every-site-you-visit-one-setting-stops-it/319871/1 "2026-03-19T19:13:17Z")
# 🕵 ISPs Sell DNS Logs to Advertisers — This 2-Minute Fix Kills That _Right now, your internet provider can see every single website every device in your house touches. Changing one setting fixes that._ **Think of DNS like a phone book your ISP controls.** Every time you type a website address, your device asks “what’s the number for this site?” — and your ISP answers that question. Which means they see every question you ask. Every site. Every device. Timestamped. That’s your phone, your TV, your kid’s tablet, your smart fridge — all of it routed through your ISP’s DNS by default. Many ISPs sell this data to advertisers. Some hand it to governments without a fight. And the fix takes about 2 minutes. * * * > **🔍 What DNS Actually Is — The 30-Second Version** > > Every website has a secret address made of numbers (like `142.250.80.46` for Google). Nobody types that. You type `google.com`, and a **DNS server** translates that name into the number address so your device can connect. > > **By default, your internet provider (ISP) IS that translator.** Every translation request = one logged entry in their system. That’s your browsing history — built automatically, without you doing anything. > > | What Your ISP Sees | What That Means | > | --- | --- | > | **Every domain you visit** | Full browsing log — not just browser, but every app on every device | > | **Exact timestamps** | They know when you visited what, down to the second | > | **All devices on your network** | Phone, laptop, smart TV, gaming console, IoT devices — everything | > | **Sellable data** | Many ISPs package and sell “anonymized” DNS logs to data brokers | > > > 💡 **Trick:** HTTPS (the lock icon in your browser) encrypts the _content_ of what you see on a website — but NOT the domain name you visited. Your ISP can’t see what you read on Reddit, but they see that you went to Reddit. DNS is the leak. > > **Changing DNS doesn’t hide your IP address** — for that, you need a VPN. But it does three things a VPN doesn’t always do: > > 1. **Stops your ISP from logging your domain requests** (the biggest privacy win for zero effort) > 2. **Speeds up browsing** — most ISP DNS servers are slow and bloated > 3. **Can block malware and ads** before your browser even loads them — no extensions needed > **🧭 Which DNS Should You Pick — Sorted by What You Actually Want** > > No single DNS is “the best.” The best one depends on what problem you’re solving. Pick your row: > > | Your Priority | Best Pick | Why This One | > | --- | --- | --- | > | **Raw speed** | [**Cloudflare 1.1.1.1**](https://1.1.1.1/) | Fastest DNS globally — consistently under 5ms. Set and forget | > | **Maximum privacy** | [**Quad9**](https://quad9.net/) | Swiss non-profit, Swiss privacy law, strict no-log policy, built-in malware blocking | > | **Block malware + phishing** | [**Quad9**](https://quad9.net/) or [**Cloudflare 1.1.1.2**](https://developers.cloudflare.com/1.1.1.1/setup/#1112-for-families) | Blocks known dangerous domains before your browser loads them — like a bouncer for your network | > | **Block ads on every device** | [**AdGuard DNS**](https://adguard-dns.io/) | Ad and tracker blocking at the DNS level — no apps to install, works on every device automatically | > | **Family / kids network** | [**CleanBrowsing Family**](https://cleanbrowsing.org/) or [**OpenDNS FamilyShield**](https://www.opendns.com/setupguide/#familyshield) | Adult content blocked, SafeSearch enforced, zero configuration | > | **Full control + analytics** | [**NextDNS**](https://nextdns.io/) | Per-device rules, logs you control, custom blocklists — like running your own Pi-hole without the hardware | > | **Simple privacy upgrade** | [**Surfshark DNS**](https://surfshark.com/dns) | Free, no account needed, no logs, just set the IP and forget it | > | **Most reliable / trusted** | [**Google 8.8.8.8**](https://developers.google.com/speed/public-dns) | 100% uptime since forever — when everything else fails, this works | > > > 💡 **Trick:** Google DNS is the most popular, but Google logs your queries for up to 48 hours and keeps anonymized data indefinitely. Cloudflare purges logs within 24 hours and publishes independent audits. If privacy is the goal, Cloudflare or Quad9 beats Google every time. > **🖥️ How to Change DNS — Every Platform, Step by Step** > > Pick your device. Each takes under 2 minutes. > > **Windows 10 / 11:** > > 1. Open **Settings** → **Network & Internet** → **Wi-Fi** (or Ethernet) → click your connection > 2. Scroll to **DNS server assignment** → click **Edit** > 3. Switch to **Manual** → turn on **IPv4** > 4. Type your chosen DNS addresses (example: `1.1.1.1` and `1.0.0.1` for Cloudflare) > 5. Click **Save**. Done. > > **Mac:** > > 1. Open **System Settings** → **Network** → select your connection → **Details** → **DNS** > 2. Click **+** and add your DNS addresses > 3. Click **OK**. Done. > > **Android:** > > 1. Open **Settings** → **Network & Internet** → **Private DNS** > 2. Select **Private DNS provider hostname** > 3. Type: `one.one.one.one` (for Cloudflare) or `dns.quad9.net` (for Quad9) > 4. Save. Done. > > > 💡 **Trick:** Android’s “Private DNS” setting automatically uses DNS-over-TLS — meaning your DNS requests are encrypted. This is better than just changing DNS numbers, because it also prevents your ISP from reading the requests in transit. Use this method, not the manual IP method. > > **iPhone / iPad:** > > 1. Open **Settings** → **Wi-Fi** → tap the **(i)** icon next to your network > 2. Scroll to **Configure DNS** → switch to **Manual** > 3. Delete existing entries → add your DNS addresses > 4. Tap **Save** > > **Router (protects every device on your network):** > > 1. Open your router’s admin page (usually `192.168.1.1` or `192.168.0.1` in your browser) > 2. Find **DNS settings** (usually under WAN, Internet, or DHCP settings) > 3. Replace the DNS addresses with your chosen ones > 4. Save and reboot the router > > > 💡 **Trick:** Changing DNS on your router is the power move. One change protects every device that connects to your Wi-Fi — phones, TVs, game consoles, smart home gadgets — without touching each device individually. If you only do one thing from this post, do this. > **🔐 Level Up — Encrypt Your DNS (So Your ISP Can't Even See the Requests)** > > Changing your DNS server is step one. But if you just change the IP addresses without encryption, your ISP can still _see_ the requests — they just can’t answer them anymore. Think of it like changing who you send your postcards to, but the mailman can still read them. > > **Encrypted DNS** puts those postcards in sealed envelopes. Two protocols do this: > > | Protocol | How It Works | Best For | > | --- | --- | --- | > | **DNS-over-HTTPS (DoH)** | Wraps DNS inside normal web traffic on port 443 — looks identical to regular browsing | Personal devices, browsers, hardest to block | > | **DNS-over-TLS (DoT)** | Dedicated encrypted channel on port 853 — cleaner but easier for networks to block | Routers, Android “Private DNS”, home networks | > > **How to enable it:** > > **Chrome:** Settings → Privacy and Security → Security → scroll to “Use secure DNS” → pick a provider > > **Firefox:** Settings → Privacy & Security → scroll to DNS over HTTPS → select “Max Protection” → pick Cloudflare or NextDNS > > **Windows 11:** When entering DNS in Settings, also enable “DNS over HTTPS” in the dropdown — Windows 11 supports this natively for Cloudflare, Google, and Quad9 > > > 💡 **Trick:** Firefox’s DoH is independent from your system DNS. Even if your router uses your ISP’s DNS, Firefox can encrypt its own requests separately. This is useful on networks you don’t control (office, hotel, coffee shop). Enable it and your DNS is invisible to the local network — they literally cannot see which sites you visit. > **✅ Test If It's Working — Prove Your ISP Is Blind** > > Changed your DNS? Prove it actually took effect: > > **Step 1 —** Go to [**dnsleaktest.com**](https://www.dnsleaktest.com/) and click **Standard Test** > > **Step 2 —** Look at the results. You should see your chosen DNS provider (Cloudflare, Quad9, etc.) — NOT your ISP’s name. > > | You See | What It Means | > | --- | --- | > | **Your ISP’s name** | DNS change didn’t stick — check your settings again | > | **Cloudflare / Quad9 / etc.** | Working — your ISP is no longer handling DNS | > | **Multiple providers** | Possible leak — your system is using fallback DNS alongside your chosen one | > > **Chrome users:** Type `chrome://net-internals/#dns` in the address bar → look for “Secure DNS” entries > > **Firefox users:** Type `about:networking#dns` → check for “TRR” (Trusted Recursive Resolver) status — if active, DoH is working > > > 💡 **Trick:** Some ISPs use “transparent DNS proxies” — they intercept port 53 traffic and answer DNS requests themselves, even if you changed the DNS addresses. The fix: enable DoH or DoT (see previous section). Encrypted DNS can’t be intercepted because the ISP can’t read it. If dnsleaktest still shows your ISP after changing DNS numbers, encryption is the answer. > **🚫 What DNS Does NOT Do — Don't Confuse It With a VPN** > > DNS protects one thing: **which websites your ISP sees you requesting.** That’s it. Important — but limited. > > | DNS Fixes This | DNS Does NOT Fix This | > | --- | --- | > | ISP logging which domains you visit | Hiding your IP address from websites | > | Slow DNS resolution from your ISP | Encrypting your web traffic | > | Malware/ad domains loading (if using a filtering DNS) | Bypassing geo-restrictions | > | DNS-based censorship (in some countries) | Full anonymity | > > **The layered approach:** > > - **DNS change** = stops your ISP from seeing domain requests (free, 2 minutes) > - **Encrypted DNS (DoH/DoT)** = prevents ISP from even intercepting the requests (free, 5 minutes) > - **VPN** = hides your IP + encrypts all traffic + bypasses geo-blocks (usually paid) > > You don’t need all three. But each layer adds something the others can’t. * * * **⚡ Quick Hits** | Want | Do | | --- | --- | | ⚡ Fastest DNS, zero thinking | → `1.1.1.1` / `1.0.0.1` — [Cloudflare](https://1.1.1.1/), set and forget | | 🔒 Best privacy + malware blocking | → `9.9.9.9` / `149.112.112.112` — [Quad9](https://quad9.net/), Swiss non-profit | | 🚫 Block ads on every device | → `94.140.14.14` / `94.140.15.15` — [AdGuard DNS](https://adguard-dns.io/) | | 👨‍👩‍👧 Family-safe network | → `185.228.168.168` / `185.228.169.168` — [CleanBrowsing Family](https://cleanbrowsing.org/) | | ⚙ Full control + logs + per-device | → [NextDNS](https://nextdns.io/) — free up to 300K queries/month | | 🔍 Test what DNS you’re using now | → [dnsleaktest.com](https://www.dnsleaktest.com/) — run Standard Test | | 🛡 Best one-change-protects-everything | → Change DNS on your **router** — covers all devices | * * * _Your ISP has been reading your mail. Time to buy some envelopes._ ---
**Author:** ![LaurentSP](https://onehack.st/user_avatar/onehack.st/laurentsp/32/149658_2.png) [@LaurentSP](https://onehack.st/u/LaurentSP)\ **Post date:** [Março 19, 2026, 9:50pm UTC](https://onehack.st/t/your-isp-logs-every-site-you-visit-one-setting-stops-it/319871/2 "2026-03-19T21:50:45Z")
You’re just letting another company doing the same thing. Now they can log every site you visit. It won’t give you more privacy, but did you know you can setup your own DNS resolver ? ---
**Author:** ![UberBoy](https://onehack.st/user_avatar/onehack.st/uberboy/32/164007_2.png) [@UberBoy](https://onehack.st/u/UberBoy)\ **Post date:** [Março 21, 2026, 8:22am UTC](https://onehack.st/t/your-isp-logs-every-site-you-visit-one-setting-stops-it/319871/3 "2026-03-21T08:22:00Z")
Add [https://tiarap.org/](https://tiarap.org/)