1.1.1.1 — Cloudflare's Free Public DNS (Setup Guide)

⚠ 1.1.1.1 is NOT a router admin IP

Unlike addresses such as 192.168.1.1 or 192.168.0.1, 1.1.1.1 is a public internet address owned by APNIC and operated by Cloudflare as a free DNS service. No home or business router uses it as a LAN gateway, and there is no login page at this address.

1.1.1.1 is the IP address of Cloudflare's free public DNS resolver, launched on April 1, 2018 in partnership with APNIC (the regional internet registry that owns the 1.0.0.0/8 address block). Together with its secondary IP 1.0.0.1, the service answers DNS queries for anyone on the internet — translating domain names like google.com into the IP addresses that browsers actually connect to.

Cloudflare designed 1.1.1.1 as an alternative to the DNS resolvers your internet service provider runs by default. It is positioned around three claims:

• Speed — independent benchmarks (DNSPerf, Cedexis) regularly show 1.1.1.1 among the fastest public DNS resolvers globally.
• Privacy — Cloudflare commits to never log full client IP addresses, to retain query logs for at most 24 hours, and to never sell DNS data to advertisers. KPMG audits the policy annually.
• Free — the service is free for both individuals and businesses, with no signup required.

The IPv6 equivalents are 2606:4700:4700::1111 and 2606:4700:4700::1001.

1. Open Settings → Network & internet.
2. Click your active connection (Wi-Fi or Ethernet).
3. Click Edit next to DNS server assignment.
4. Change the dropdown from Automatic (DHCP) to Manual.
5. Turn on IPv4 and enter:
   • Preferred DNS: 1.1.1.1
   • Alternate DNS: 1.0.0.1
6. Click Save.

On Windows 10, the same option is under Control Panel → Network and Sharing Center → Change adapter settings → right-click your adapter → Properties → Internet Protocol Version 4 (TCP/IPv4) → Properties.

1. Open System Settings (or System Preferences on older macOS).
2. Go to Network, then select your active connection (Wi-Fi or Ethernet).
3. Click Details (or Advanced on older macOS) → DNS tab.
4. Click the + button under "DNS Servers" and add:
   • 1.1.1.1
   • 1.0.0.1
5. Remove any existing entries that point to your ISP's DNS, if you prefer.
6. Click OK, then Apply.

iPhone & iPad (iOS / iPadOS)

1. Open Settings → Wi-Fi.
2. Tap the (i) icon next to your connected network.
3. Scroll down and tap Configure DNS.
4. Switch from Automatic to Manual.
5. Tap Add Server, enter 1.1.1.1, then add 1.0.0.1.
6. Tap Save.

Android (Private DNS — system-wide)

1. Open Settings → Network & internet → Private DNS (location varies slightly by device).
2. Select Private DNS provider hostname.
3. Enter one.one.one.one (the hostname for 1.1.1.1).
4. Tap Save.

Android's "Private DNS" uses DNS-over-TLS by design, so the connection to Cloudflare is encrypted automatically.

Configuring 1.1.1.1 once at the router level means every device that joins your Wi-Fi automatically uses Cloudflare DNS — phones, smart TVs, game consoles, IoT devices, everything.

1. Log in to your router's admin panel (typically at 192.168.1.1, 192.168.0.1, or 10.0.0.1).
2. Find the DHCP or DNS settings (often under Internet, WAN, or LAN).
3. Locate the Primary DNS / Secondary DNS fields.
4. Enter:
   • Primary DNS: 1.1.1.1
   • Secondary DNS: 1.0.0.1
5. Save and reboot the router.
6. Reconnect all active devices — they will now use 1.1.1.1 for DNS without further configuration.

Not sure which IP your router uses for admin login? Check the sticker on the back of the device, or use one of the IP pages listed at the bottom of this page.

For iPhone and Android, Cloudflare offers a free app called "1.1.1.1: Faster Internet" that does two things:

• 1.1.1.1 DNS — configures the public DNS resolver on your device with a single tap (no manual settings).
• WARP — a free VPN-like service that encrypts all traffic from your phone using Cloudflare's network. A paid tier, WARP+, routes traffic through Cloudflare's faster backbone (Argo).

The app is free, requires no account, and is available on the App Store and Google Play. WARP itself is also free; WARP+ is a small monthly subscription.

Q: Can I use 1.1.1.1 as my router's gateway address?

No. 1.1.1.1 is a public internet address (owned by APNIC, operated by Cloudflare). Home and business routers use private IP addresses for their LAN gateway — typically 192.168.x.x or 10.x.x.x. Setting 1.1.1.1 as a gateway would cause routing to break entirely. If you see 1.1.1.1 listed as your default gateway, the device is misconfigured.

Q: Is 1.1.1.1 safe to use? Does Cloudflare see what I browse?

Cloudflare's published policy commits to never logging your full IP address, retaining query logs for at most 24 hours, and never selling DNS data to advertisers. KPMG audits this policy annually and publishes the results. Compared to your ISP's default resolver — which often logs everything indefinitely and may sell it — 1.1.1.1 is more private. Compared to running your own resolver, it still means Cloudflare can see which domains you look up.

Q: How is 1.1.1.1 different from Google's 8.8.8.8?

Both are free, fast, global public DNS resolvers. Differences: Cloudflare commits to stricter privacy guarantees (24-hour log retention vs Google's longer retention); independent benchmarks usually show 1.1.1.1 marginally faster on average; Google's resolver has been around since 2009 and is more battle-tested in obscure edge cases.

Q: Why is my computer showing 1.1.1.1 as a connected address?

If 1.1.1.1 appears in ipconfig/ifconfig output as a DNS server, that's expected and correct — it means your device is using Cloudflare for DNS. If it appears as your default gateway, something is wrong with your network configuration.

Q: Does Cloudflare make routers?

No. Cloudflare is a content delivery network and internet security company. They offer the 1.1.1.1 DNS service, the 1.1.1.1 / WARP mobile app, business security products (Cloudflare Zero Trust, Workers, etc.), but they have never sold consumer or business router hardware.