- Cloudflare — Privacy and speed, no filtering
- Google Public DNS — Reliability and CDN-friendly answers
- Quad9 — Malware blocking from a non-profit
- OpenDNS — Families and configurable filtering
- AdGuard DNS — Blocking ads and trackers network-wide
How we tested
We checked every address and encrypted-DNS endpoint answered from a Mac on 24 October 2026, confirmed filtering behaviour with live queries (AdGuard returned 0.0.0.0 for an ad domain; the others returned real addresses), and read each operator's privacy policy.
We don't publish a speed ranking: DNS speed depends on where you are and on your ISP, and a chart measured in one city is wrong for most readers. The live test below measures DNS-over-HTTPS response times from your own browser to each resolver that allows it. Plain DNS from your Mac is usually a little faster than DoH, but the ranking tends to hold.
Not tested: AdGuard DNS and OpenDNS. Their DNS-over-HTTPS servers don’t allow requests from web pages, so a browser can’t time them.
Cloudflare
Best for Privacy and speed, no filtering
Pros
- Logs deleted within 25 hours, independently audited
- Fast anycast network
- Filtering variants: 1.1.1.2 (malware), 1.1.1.3 (malware and adult)
Cons
- No EDNS Client Subnet, so some CDNs pick slightly less ideal servers
Google Public DNS
Best for Reliability and CDN-friendly answers
Pros
- Very large, reliable anycast network
- Sends EDNS Client Subnet for better CDN routing
- Clear, detailed privacy policy
Cons
- Run by an advertising company
- Sampled logs kept long-term (without IPs)
Quad9
Best for Malware blocking from a non-profit
Pros
- Blocks known malicious domains using threat intelligence
- Swiss non-profit foundation, no IP logging
- DNSSEC validation
Cons
- Filtering can rarely block a legitimate site
OpenDNS
Best for Families and configurable filtering
Pros
- FamilyShield (208.67.222.123) blocks adult content with no setup
- Account-based category filtering
Cons
- Owned by Cisco, more data collection for filtering features
- DoH endpoint can't be timed from a browser
AdGuard DNS
Best for Blocking ads and trackers network-wide
Pros
- Blocks ad and tracker domains for every device using it
- Family variant available
Cons
- Blocking can break some sites and apps
- DoH endpoint can't be timed from a browser
Frequently asked questions
What is the fastest DNS server?
Whichever has the closest site to you, which differs by location. Cloudflare and Google are usually fastest; run the speed test on this page to see your results.
What is the best DNS server for a Mac?
Cloudflare (1.1.1.1) for privacy and speed, Quad9 (9.9.9.9) if you want malware blocking. Set it in System Settings › Network › Details › DNS.
Is changing DNS safe?
Yes. It only changes who answers your lookups. Choose a reputable resolver, and you can switch back any time.
Is AdGuard DNS good?
It's a simple way to block ads and trackers for every device, but blocking at the DNS level can break some sites and apps.
Does DNS affect internet speed?
It affects how quickly connections start, not download speeds. A slow resolver adds delay to every new site you open.