Mega/Tool DNS Encrypted · no logs · free

DNS.

MegaToolCompanion to Shield

Ad, tracker and malware blocking for every app on a device — no app to install, nothing to keep running.

Blocked
—
Logs
None
Encrypted
Yes
Cost
Free
§1 · One tap

iPhone, iPad & Mac

A configuration profile switches the whole device to MegaTool DNS. Every app, every network.

Install the profileOpen this page in Safari
  1. Tap Install the profile, then Allow.
  2. Open Settings — a Profile Downloaded row appears near the top. Tap it, then Install.
  3. iOS calls it “Unverified” because it isn’t signed by a company. That’s expected for a free profile.
  4. To undo it: Settings › General › VPN & Device Management › MegaTool DNS › Remove. On a Mac, use System Settings › Profiles.
§2 · App

Android

Android’s built-in Private DNS only speaks a different protocol, so Android gets the full app instead.

Shield for Android blocks the same lists right on the phone, plus cookie banners, pop-up ads and fake shops, alerts you when an app tries to open a dangerous site, and has a per-app firewall to cut any app off the internet.

Download Shield for AndroidAndroid 8 or newer · about 6 MB
  1. Open the downloaded file. Android asks to allow installs from your browser the first time — allow it, then Install.
  2. Open Shield and tap Protected. Android asks to allow a VPN connection: Shield’s VPN never leaves the phone and only carries DNS lookups.
  3. Optional: add the Shield tile to Quick Settings, or make it always-on in Settings › Network › VPN.
§3 · Anywhere

Browsers & Windows

Anything with a “custom secure DNS” setting can use this address.

https://…/dns-query
  1. Chrome, Edge, Brave: Settings › Privacy and security › Use secure DNS › Custom, paste the address.
  2. Firefox: Settings › Privacy & Security › DNS over HTTPS › Max Protection › Custom, paste the address.
  3. Windows 11: Settings › Network › your connection › DNS server assignment › Edit — set DNS over HTTPS to On (manual template) with this address.
§4 · Proof

Check the server

Asks the resolver about a few domains right now, from this page.

Shows what the server answers — not which DNS your device uses.