Configure DNS over HTTPS protection levels in Firefox

Revision Information
  • Revision id: 294421
  • Created:
  • Creator: Mark Heijl
  • Comment: minor edits and typo fixes
  • Reviewed: Yes
  • Reviewed:
  • Reviewed by: AliceWyman
  • Is approved? No
  • Is current revision? No
  • Ready for localization: No
Revision Source
Revision Content

DNS over HTTPS (DoH) is a recommended feature that enhances privacy for everyone. When you type a web address into your address bar, Firefox sends a secure DNS request to look up the IP address for that website over the Internet. DNS over HTTPS protection can be configured in four different ways. To navigate to these protection settings:

  1. Click the menu PhotonMenuButton button at the top right of the screen.
  2. Click Settings.
  3. Click Privacy & Security on the left.
  4. Scroll down to the DNS over HTTPS section.

In this section, you can enable the following preferences for DNS-over-HTTPS: DoH_protection_levels

Default Protection

The Default Protection automatically enables secure DNS in available regions and falls back to the default resolvers if there are issues. Default protection allows you to use local providers when possible. It disables DoH when VPN, parental control or enterprise policies are active or when a network tells Firefox not to use secure DNS.

Increased protection

When Increased Protection is on, you can select a provider and choose to only fallback to your default DNS resolver.

Max Protection

Max protection will always use secure DNS and a security warning will show before falling back to your system DNS.

Off

When secure DNS is off, you’ll use your default DNS resolver.

Choose the desired level of protection. Once you select a protection level other than Default Protection, the status indicator will change to active, and you will see the corresponding provider for your selection.

DoH_status

Add sites to the Exceptions list

  1. Click the menu PhotonMenuButton button at the top right of the screen.
  2. Click Settings.
  3. Click Privacy & Security on the left.
  4. Scroll down to DNS over HTTPS.
  5. Click Manage Exceptions….

doh_manage_exceptions