Control D Settings for Privacy, Security & Speed

Updated 4 November 2026 · Standard formula, shown below

To get the best balance of privacy, security, and speed in Control D, you should change your DNS settings to use a custom filter profile that blocks malware, ads, and trackers, enable DNS-over-HTTPS (DoH) or DNS-over-TLS (DoT), and turn on the "Block new domains" feature. This article explains each recommended setting, why it matters, and how to configure it on your devices.

Background: What Control D Does

Control D is a modern DNS resolver service that lets you filter internet traffic at the DNS level. Unlike a traditional DNS server that simply translates domain names to IP addresses, Control D can block requests to known malicious, advertising, or tracking domains before your device ever connects to them. It offers a free tier and paid plans with more features, and it works on any device that lets you change DNS settingsâ€”routers, computers, phones, and even smart TVs.

Because DNS filtering happens before the actual connection, it can improve speed by preventing your browser from loading heavy ads and trackers, and it can improve security by stopping malware callbacks. However, the default settings may not be optimal for your needs, so adjusting a few key options is worthwhile.

How Control D Works

When you type a website address, your device asks a DNS resolver to find the site’s IP address. Control D acts as that resolver, but it checks each domain against a set of rules you define. You can create a "profile" that specifies which categories to block (e.g., malware, adult content, ads) and which to allow. The service then returns the correct IP address for allowed domains, or a block page (or a null route) for blocked ones.

Control D offers two main types of DNS endpoints: filtering and unfiltered. The filtering endpoints apply your profile; the unfiltered ones just resolve normally. You can also use custom rules to allow or block specific domains, which is handy for whitelisting a site that is mistakenly blocked.

Recommended Settings for Privacy

For privacy, you want to minimize the data that leaves your device and prevent tracking. Here are the key settings to change:

Enable DNS-over-HTTPS (DoH) or DNS-over-TLS (DoT): This encrypts your DNS queries so your internet service provider (ISP) cannot see which websites you visit. Control D supports both; DoH uses port 443 and is harder to block, while DoT uses port 853 and is simpler. In your device’s network settings, choose the Control D endpoint that includes doh or dot in the URL.
Turn on "Block Trackers": In your Control D dashboard, under "Filtering", make sure the "Trackers" category is enabled. This blocks domains known for cross-site tracking, which reduces the amount of data advertisers collect about you.
Disable logging (if possible): On paid plans, Control D offers a zero-logging option. If you are on the free tier, logs are kept for a short time for operational purposes. For maximum privacy, consider a paid plan with no logs, or use the service with your own router-level logging disabled.

Recommended Settings for Security

Security settings focus on blocking malicious activity and preventing phishing. The most important ones:

Enable "Malware Protection": This blocks domains that are known to distribute malware, ransomware, or phishing. It is usually on by default, but double-check in your profile.
Enable "Block Newly Registered Domains": This is a powerful feature that blocks domains registered within the last 30 days (or a custom period). Many malicious sites are short-lived, so this can stop attacks before they are even classified.
Use "Strict" filtering mode: Control D offers a "Strict" mode that blocks domains that are not on the allowlist. This is more secure but can break some sites, so use it only if you are okay with occasional false positives.
Enable "AI Protection" (if available): Some plans include AI-driven detection of zero-day threats. Turn this on if you have it.

Recommended Settings for Speed

Speed is affected by two factors: how fast your DNS resolver responds, and how much content your browser loads. To optimize:

Choose the closest DNS server: Control D has servers worldwide. In your dashboard, you can select a specific server location, or use the "Anycast" option that automatically routes to the nearest one. Using a nearby server reduces latency.
Block ads and trackers: By blocking ads and trackers, you reduce the amount of data your browser downloads, which can make pages load faster, especially on mobile connections. Enable the "Ads" category in your profile.
Use the "Cache" feature: Control D caches DNS responses, so repeat visits to the same domain are faster. This is automatic, but you can ensure your device’s DNS cache is not interfering by using the correct TTL settings (default is fine).
Avoid over-filtering: Blocking too many categories (e.g., social media, video streaming) can cause your browser to wait for timeouts when trying to reach those domains. Only block what you need.

How to Configure Control D on Your Devices

Setting up Control D varies by device, but the general steps are:

Create a Control D account and set up a profile with your desired filtering categories.
Get your unique DNS endpoint from the dashboard. It will look like https://dns.controld.com/your-id for DoH, or tls://your-id.dns.controld.com for DoT.
On Windows: Go to Settings â†’ Network & Internet â†’ Wi-Fi (or Ethernet) â†’ Hardware properties â†’ Edit DNS server assignment. Choose "Manual", turn on IPv4, and enter the Control D IP addresses (e.g., 76.76.2.0 for IPv4, and 2606:1a40:: for IPv6). For DoH, you may need to use the Control D app or a third-party tool like DNS over HTTPS in Windows 11.
On macOS: Go to System Settings â†’ Network â†’ choose your connection â†’ Details â†’ DNS. Add the Control D servers. For DoH, you can use the Control D app or a custom configuration profile.
On Android: Go to Settings â†’ Wi-Fi â†’ long-press your network â†’ Modify network â†’ Advanced â†’ IP settings â†’ Static, then set DNS1 and DNS2 to Control D’s IPs. For DoH, use a private DNS provider: Settings â†’ Network & internet â†’ Private DNS â†’ enter dns.controld.com (this uses DoT).
On iOS: Go to Settings â†’ Wi-Fi â†’ tap the (i) next to your network â†’ Configure DNS â†’ Manual, then add the Control D IPs. For DoH, you can install a configuration profile from Control D’s website.
On a router: Log into your router’s admin panel, find the DNS settings, and replace the default DNS with Control D’s IPs. This applies the filter to all devices on your network.

After changing, test with a site like example.com to ensure resolution works, and check your dashboard to see if queries appear.

Common Problems and Misconceptions

Problem: Some websites break after enabling filtering. This is usually because a domain is blocked by mistake. Solution: Add a custom rule to allow that domain in your profile.

Problem: DNS queries are still visible to my ISP. If you are using plain DNS (port 53), your ISP can see them. Ensure you are using DoH or DoT. Also, if you set the DNS on your router, your ISP might still see the traffic if they use transparent DNS interception, but DoH avoids that.

Misconception: Control D slows down my internet. In most cases, it speeds it up by blocking ads and trackers. However, if you choose a distant server or have a very strict filter, you might see a slight delay. Use the nearest server and test.

Misconception: You need to change every device. If you set it on your router, it covers all devices, but some devices (like those with hardcoded DNS) may ignore it. You can also use Control D’s app for per-device control.

Comparing Control D to Other DNS Services

Control D is often compared to Cloudflare’s 1.1.1.1, Google Public DNS, and NextDNS. The main differences:

Customization: Control D and NextDNS offer extensive filtering rules; Cloudflare and Google only offer basic malware blocking (Cloudflare has a family filter).
Privacy: Cloudflare and Control D (on paid plans) have strict no-log policies; Google logs some data. NextDNS also offers no logs on paid plans.
Speed: Cloudflare is generally fastest due to its global network, but Control D is competitive. The speed difference is often negligible for most users.
Price: Control D has a generous free tier (with limited features) and paid plans starting at a low monthly cost. NextDNS has a similar model. Cloudflare and Google are free.

If you want simple and fast, Cloudflare is a good choice. If you want granular control, Control D or NextDNS are better.

Costs and Safety Considerations

Control D offers a free plan that includes basic filtering (malware, ads, trackers) and a limited number of custom rules. Paid plans (starting around $2-4/month) add features like zero-logging, AI protection, and more custom rules. There is no long-term contract; you can cancel anytime.

Safety: Using a third-party DNS service means you are trusting that provider with your DNS queries. Control D states it does not sell user data, and on paid plans, it does not log. However, for sensitive activities, you might want to use a VPN in addition to DNS filtering, because DNS filtering does not encrypt your trafficâ€”only your DNS queries.

Frequently Asked Questions

Will changing DNS settings affect my internet speed? It can, but usually positively. By blocking ads and trackers, pages load faster. The DNS resolution itself is usually faster than your ISP’s resolver, especially if you use a nearby server.

Can I use Control D with a VPN? Yes, they can work together. The VPN encrypts your traffic, and Control D filters DNS queries. However, if your VPN uses its own DNS, you may need to configure Control D inside the VPN app or on your device to ensure it takes effect.

Does Control D work on all devices? It works on any device that allows custom DNS settings, including Windows, macOS, Linux, Android, iOS, routers, and smart TVs. Some devices (like game consoles) may have limited DNS options, but you can set it on your router.

What is the difference between DoH and DoT? Both encrypt DNS queries. DoH (DNS-over-HTTPS) uses the same port as web traffic (443), making it harder to block. DoT (DNS-over-TLS) uses a dedicated port (853) and is simpler but can be blocked by firewalls. For most users, DoH is recommended.

Can I unblock a site that is blocked by Control D? Yes, log into your dashboard, go to "Custom Rules", and add a rule to allow the domain. This overrides the block.

Is Control D safe to use? Yes, it is a reputable service. However, as with any DNS provider, you are trusting them with your DNS queries. For maximum privacy, use a paid plan with no logging, and consider combining with a VPN for full encryption.

Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.