Both are excellent; Cloudflare (1.1.1.1) edges it on privacy, Google (8.8.8.8) on CDN routing. Speed depends on where you are, so run the test below rather than trusting anyone's chart. If you'd like malware blocking too, Quad9 (9.9.9.9) is the usual third option.
Not tested: AdGuard DNS and OpenDNS. Their DNS-over-HTTPS servers don’t allow requests from web pages, so a browser can’t time them.
Criterion by criterion
| Criterion | Cloudflare | Google Public DNS |
|---|---|---|
| Addresses | 1.1.1.1, 1.0.0.1 | 8.8.8.8, 8.8.4.4 |
| Speed | Fast almost everywhere (anycast) | Fast almost everywhere (anycast) |
| Logging | Truncated IPs, logs deleted within 25 hours | Full-IP logs deleted in 24–48 hours; sampled logs kept without IP |
| Independent audit | Yes, by an accounting firm | Published policy |
| EDNS Client Subnet | Not sent, for privacy | Sent, helping CDNs pick nearby servers |
| DNSSEC validation | Yes | Yes |
| Encrypted DNS | DoH and DoT | DoH and DoT |
| Filtering | None (1.1.1.2 and 1.1.1.3 filter malware, adult content) | None |
Which to pick
Pick Cloudflare if…
- Privacy is your priority.
- You want optional family or malware filtering from the same provider.
Pick Google Public DNS if…
- You want CDNs to pick servers close to your exact network.
- You already rely on Google services and prefer one provider.
Frequently asked questions
Is 1.1.1.1 faster than 8.8.8.8?
It depends on your location and ISP. Both use anycast and are usually within a few milliseconds of each other. The speed test on this page measures both from your browser.
Which is more private, Cloudflare or Google DNS?
Cloudflare: it truncates IPs and deletes logs within 25 hours, with an independent audit. Google deletes full-IP logs within 24–48 hours but keeps sampled logs without IPs.
What about Quad9 vs Cloudflare?
Quad9 (9.9.9.9) blocks known malicious domains and is run by a Swiss non-profit. Cloudflare's 1.1.1.1 doesn't filter, but 1.1.1.2 does block malware.
How do I switch my Mac to 1.1.1.1 or 8.8.8.8?
System Settings › Network › your connection › Details › DNS, then add the addresses with +.