Enable Private DNS with 1.1.1.1 on Android 9 Pie
Aug 16, 2018Stephen Pinkerton

Summary
This post introduces the configuration of Cloudflare's 1.1.1.1 DNS resolver using the new Private DNS Mode in Android 9 Pie, which supports DNS over TLS (DoT). It details the steps to enable DoT on Android devices and explains the privacy benefits of encrypted DNS queries. The post also touches upon the ongoing work to encrypt SNI and the implications of IPv6 adoption on DNS resolution, particularly the requirement for hostnames instead of IP addresses for Private DNS configuration.
More from the DNS Infrastructure & Naming Conventions trail
- The keys to the Internet change on October 11, 2026. Are you ready?
- 1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it
- How we saved 100 terabytes of memory by optimizing 1.1.1.1’s DNS cache
- BGP ORIGIN attribute manipulation and its impact on the Internet
- Cloudflare Internal DNS is now generally available