Mullvad DNS Is Shutting Down: 8 Private DNS Alternatives You Can Use Instead

Mullvad is shutting down its public encrypted DNS resolvers on November 2, 2026. If you’re currently using Mullvad DNS, you’ll need to switch to another resolver before that date.

The good news is that there are plenty of alternatives. Several public DNS providers offer DNS over HTTPS (DoH) and DNS over TLS (DoT), while some also provide built-in filtering for ads, trackers, malicious domains, adult content, and other unwanted traffic.

Mullvad itself recommends Quad9 as a replacement, but it isn’t your only option.

We’ve compared seven privacy-focused DNS services that can replace Mullvad DNS, looking at their encryption protocols, filtering capabilities, logging policies, privacy features, and whether they require an account.

Why Is Mullvad DNS Shutting Down?

Mullvad is discontinuing its public encrypted DNS service on November 2, 2026.

This doesn’t mean Mullvad is abandoning DNS protection altogether. The company’s decision specifically affects its publicly available DNS resolvers. Anyone who currently has their devices configured to use Mullvad’s public DNS servers will therefore need to change those settings.

Mullvad recommends Quad9 as an alternative and has even provided financial support to the organization behind the service.

However, your best replacement depends on what you want from a DNS resolver.

If you mainly care about privacy, one service may be preferable. If you want to block ads and trackers at the DNS level, another may be a better fit. And if you want complete control over filtering rules, services such as NextDNS offer much more customization.

1. Quad9 — The Best Direct Replacement for Mullvad DNS

It’s hard not to start with Quad9, since Mullvad itself recommends the service to users looking for a replacement.

Quad9 is operated by a nonprofit foundation based in Switzerland and has provided a free public DNS resolver since 2017.

Its primary configuration automatically blocks domains associated with malware, phishing, and other security threats. There’s also a separate configuration without malicious-domain filtering if you prefer a completely unfiltered resolver.

Quad9 DNS Addresses

Quad9 DoH and DoT

Quad9 also supports DNSCrypt, while its configurations use DNSSEC validation.

From a privacy perspective, Quad9 is one of the strongest choices on this list. The service says it doesn’t record users’ IP addresses, doesn’t require an account, and doesn’t maintain identifiers that can be used to associate DNS queries with individual users.

One thing to keep in mind is that Quad9 can be required to block certain domains when legally ordered to do so. This has already happened in some European jurisdictions, including France.

Quad9 at a glance

2. DNS4EU — A European DNS With Multiple Filtering Options

DNS4EU is another interesting option, particularly if you prefer a DNS service operated in Europe.

The project was launched with support from the European Union and its public DNS service is operated by Whalebone, a cybersecurity company based in the Czech Republic.

One of DNS4EU’s biggest advantages is its selection of configurations. You can choose basic threat protection, add parental controls, enable ad blocking, combine multiple protections, or use the completely unfiltered resolver.

DNS4EU Addresses

DNS4EU DoH and DoT

DNS4EU handles user IP information differently from some other privacy-focused resolvers. The user’s IP address is anonymized before information is sent to logging systems.

However, DNS4EU isn’t completely log-free. Some DNS query information may be retained for up to six months for security analysis and service improvement.

The service can also be required to implement court-ordered domain blocks in European countries.

DNS4EU at a glance

3. AdGuard DNS — Best for Blocking Ads and Trackers

If you relied on Mullvad DNS primarily to block advertising and trackers, AdGuard DNS is one of the most obvious alternatives.

The free public service offers three main configurations.

The default configuration blocks ads, trackers, and malicious domains. A family configuration adds adult-content filtering and SafeSearch, while the unfiltered option doesn’t block anything.

AdGuard DNS Addresses

AdGuard DNS DoH and DoT

AdGuard DNS also supports DNS over QUIC (DoQ), DNSCrypt, and DNSSEC.

AdGuard says its public DNS service doesn’t collect personal information. It does, however, maintain anonymous aggregate statistics such as the number of queries, blocked domains, and server performance. It also uses an anonymous database of recently requested domains to help identify new trackers and malicious domains.

For users who want more control, AdGuard offers a private DNS service with custom filtering rules and statistics. But if you’re simply looking for a free replacement for Mullvad DNS, the public service is likely sufficient.

AdGuard DNS at a glance

4. NextDNS — Best for Custom DNS Filtering

NextDNS is the best option if you want to decide exactly what your DNS resolver should block.

Rather than offering only a handful of predefined profiles, NextDNS lets you build your own configuration.

You can choose from numerous blocklists for ads, trackers, malicious domains, newly registered domains, adult content, and more. You can also create your own allowlists and blocklists.

NextDNS Encryption

After creating a configuration, NextDNS provides dedicated DNS endpoints for your setup.

Your exact configuration ID is provided inside the NextDNS dashboard.

Privacy is also highly configurable. NextDNS says logging can be completely disabled. If you choose to keep logs, you can control what information is stored, how long it remains available, and where it is stored.

Available retention periods range from one hour to two years, with storage regions including the European Union, Switzerland, the UK, and the United States.

The free plan allows up to 300,000 DNS queries per month. After reaching the limit, DNS resolution continues, but filtering features are disabled until the next month unless you upgrade.

NextDNS at a glance

5. DNS.SB — A Simple No-Logging DNS

If you want something simple and privacy-focused without any built-in filtering, DNS.SB is worth considering.

The public resolver is operated by xTom GmbH in Germany. It’s free for personal use and doesn’t require an account.

Unlike AdGuard DNS or NextDNS, DNS.SB doesn’t attempt to block advertisements, trackers, malicious domains, or other content.

That makes it particularly suitable if you used Mullvad DNS primarily as a privacy-oriented encrypted resolver rather than as an ad blocker.

DNS.SB Addresses

DNS.SB DoH and DoT

DNS.SB supports DNSSEC and Query Name Minimization, which limits the amount of information disclosed during DNS resolution. It also doesn’t use EDNS Client Subnet.

According to its privacy policy, DNS.SB doesn’t log DNS queries, associated IP addresses, or query timestamps.

The service doesn’t intentionally block domains, although it remains subject to applicable German law.

DNS.SB at a glance

6. dnsforge.de — Private DNS With Built-In Filtering

dnsforge.de is a German public DNS service operated by adminForge.

The service is free, funded through donations, and doesn’t require an account. Its servers are located in Germany.

One of its advantages is the choice of four different configurations.

Normal blocks ads, trackers, and malicious domains. Clean adds adult-content and gambling-site blocking along with SafeSearch. Hard applies stricter filtering, while Blank doesn’t use filtering.

dnsforge.de Addresses

dnsforge.de DoH and DoT

dnsforge.de also supports DNS over QUIC and DNSSEC.

The service says it doesn’t log DNS queries or store IP addresses alongside DNS requests. However, there doesn’t appear to be an independent audit that verifies all of these privacy claims.

To prevent abuse, dnsforge.de applies a query-rate limit. The current limit is around 70 requests every 10 seconds, which should be more than enough for normal personal use.

dnsforge.de at a glance

7. Control D — Free DNS Profiles With Different Filters

Control D is another flexible alternative that offers several free public DNS profiles without requiring an account.

The service is operated by Control D Inc., based in Toronto, Canada.

You can choose between an unfiltered resolver and profiles designed to block malicious domains, ads and trackers, social media, adult content, and other categories.

There’s also an Uncensored profile intended to provide access to domains that may be blocked in certain countries.

Control D DNS Addresses

Control D DoH and DoT

Control D supports DoH, DoT, and DNS over QUIC. More advanced users can also use third-party filtering lists from projects such as AdGuard, HaGeZi, and OISD.

According to Control D’s privacy policy, its free public resolvers don’t retain IP addresses, timestamps, or DNS queries. Individual browsing histories aren’t stored either.

The paid service offers additional features such as custom rules, statistics, and query logs, but those features aren’t required for the free public resolvers.

Control D at a glance

8. Cloudflare 1.1.1.1: One of the Fastest Public DNS Resolvers

Cloudflare’s 1.1.1.1 is one of the most recognizable public DNS services available today. Operated by US-based Cloudflare, the free resolver is known for its easy-to-remember address and consistently strong performance. It is also regularly ranked among the fastest public DNS resolvers by DNSPerf, which measures DNS performance across hundreds of locations worldwide.

The standard 1.1.1.1 service does not filter content. However, Cloudflare offers two additional configurations under 1.1.1.1 for Families. One blocks domains associated with malware and phishing, while the other adds filtering for adult content.

Standard DNS Addresses

DNS over HTTPS (DoH) and DNS over TLS (DoT)

Cloudflare supports both DNS over HTTPS (DoH) and DNS over TLS (DoT). Its public resolver also supports DNSSEC, allowing DNS responses to be cryptographically validated when the queried domain uses DNSSEC.

Privacy is another major part of Cloudflare’s 1.1.1.1 offering. According to Cloudflare’s published privacy policy, the company does not sell users’ personal data or use it for targeted advertising. The complete IP address associated with a DNS request is not permanently retained. Some technical logs are temporarily stored, however, with Cloudflare stating that these logs are deleted within 25 hours.

There is one important caveat for users in France and some other jurisdictions: DNS-level blocking can be imposed following court orders. Cloudflare has previously been required to block certain domain names on its 1.1.1.1 resolver, including domains associated with illegal sports-streaming services.

Comparison of the 8 Mullvad DNS Alternatives

If you want to quickly compare the services covered in this guide, the table below highlights their main filtering, privacy, and pricing differences.

Which Mullvad DNS Alternative Should You Choose?

There is no single replacement that is perfect for everyone.

• Quad9 is a strong choice if security and privacy are your priorities.
• DNS4EU is worth considering if you want European infrastructure with several filtering profiles.
• AdGuard DNS is a good option for blocking ads, trackers, malware, and unwanted content.
• NextDNS is the best fit if you want extensive customization and control over filtering and logging.
• DNS.SB is a straightforward option if you want an unfiltered resolver with no query logging.
• dnsforge.de is particularly interesting if you want aggressive filtering without relying on a commercial account.
• Control D offers several ready-made filtering profiles, including security, social-media, and family options.
• Cloudflare 1.1.1.1 is an excellent choice if speed, simplicity, and broad compatibility matter most.

For most users looking for a simple Mullvad DNS replacement, Quad9, AdGuard DNS, and Cloudflare 1.1.1.1 are among the easiest services to get started with. More advanced users may prefer NextDNS because of its extensive customization options.

Final Thoughts

Mullvad DNS shutting down does not mean you have to give up on private or encrypted DNS. There are several strong alternatives available, whether your priority is privacy, security, ad blocking, parental controls, customization, or raw DNS performance.

For a simple privacy-focused replacement, Quad9 is an excellent option. If you want built-in ad and tracker blocking, AdGuard DNS is worth considering. NextDNS stands out for advanced users who want detailed control over filtering and logging, while Cloudflare 1.1.1.1 remains a fast and easy-to-configure choice for everyday use.

The important thing is to choose a DNS resolver that matches your needs rather than simply picking the most popular service. All eight alternatives covered in this guide can replace Mullvad’s public encrypted DNS, but they differ considerably in filtering, logging policies, customization, and privacy practices.

Before switching, check the provider’s current privacy policy and configuration options. DNS providers can also be subject to legal blocking requirements depending on the country where you connect from.

If you are looking for a free, reliable, and privacy-conscious replacement for Mullvad DNS, the services in this guide give you plenty of options to choose from.

Read more: