You Don't Need A VPN
How-To Guides

Privacy Setup Guides

Free ways to actually improve your privacy. No subscription required.

Set Up Encrypted DNS with Cloudflare 1.1.1.1

Encrypt your DNS queries so your ISP can't log which websites you look up. Takes about two minutes to set up.

One warning: Cloudflare's 1.1.1.1 app also offers a mode called WARP, which routes all your traffic through Cloudflare. That is essentially a VPN, the exact trust shift this site warns about. You only need encrypted DNS. Where the app is required, use its "1.1.1.1" DNS mode and leave WARP off.
Visit 1.1.1.1 Official Site

Windows 11 (no app needed)

  1. Open Settings > Network & internet and select your Wi-Fi or Ethernet connection
  2. Click "Hardware properties", then "Edit" next to "DNS server assignment"
  3. Choose "Manual", turn on IPv4, and enter 1.1.1.1 as preferred DNS and 1.0.0.1 as alternate
  4. Set "DNS over HTTPS" to "On (automatic template)" and save

Android (no app needed)

  1. Open Settings > Network & internet > Private DNS
  2. Select "Private DNS provider hostname"
  3. Enter one.one.one.one and save

macOS

  1. macOS has no built-in setting for encrypted DNS, so the simplest option is enabling DNS over HTTPS in your browser (see the next guide)
  2. If you want it system-wide, download the 1.1.1.1 app from the Mac App Store
  3. In the app, choose the "1.1.1.1" mode (encrypted DNS only), not WARP

iOS

  1. Download the 1.1.1.1 app from the App Store
  2. In the app, choose the "1.1.1.1" mode (encrypted DNS only), not WARP
  3. Approve the configuration profile when prompted

Configure DNS Over HTTPS in Your Browser

Another way to encrypt DNS, using settings already built into your browser.

Chrome

  1. Open Chrome settings (chrome://settings/security)
  2. Search for "DNS" in the settings search bar
  3. Under "Security", find "Secure DNS"
  4. Select "With" and choose "Google" or another provider from the dropdown
  5. Learn more: Google DNS over HTTPS

Firefox

  1. Open Firefox settings (about:preferences#privacy)
  2. Scroll down to "Network Settings"
  3. Click "Settings" button
  4. Check "Enable DNS over HTTPS"
  5. Choose a provider or use the default (Cloudflare recommended)
  6. Learn more: Mozilla DNS over HTTPS guide

Safari (macOS)

  1. Safari has no DNS over HTTPS setting of its own. It uses the system's DNS, so follow the macOS steps in the guide above
  2. While you're in Safari → Settings → Advanced, enable "Use advanced tracking and fingerprinting protection" for all browsing
  3. Learn more: Apple Safari Privacy guide

Enable Enhanced Privacy in Firefox

Firefox has good privacy settings built in. Here's how to turn them on.

Download Firefox
  1. Open Firefox and go to Settings
  2. Navigate to "Privacy & Security"
  3. Under "Enhanced Tracking Protection", select "Strict"
  4. Check "DNS over HTTPS" and choose a provider
  5. Enable "HTTPS-Only Mode" in all windows
  6. Under "Cookies and Site Data", select "Block all third-party cookies"
  7. Enable "Tell websites not to sell or share my data" (the Global Privacy Control signal, which replaced the old and ineffective "Do Not Track" checkbox)
  8. Learn more: Enhanced Tracking Protection guide

Use Privacy-Focused Search Engines

Google tracks everything you search. These alternatives don't.

DuckDuckGo

  • No tracking or user profiling
  • Built-in tracker blocking
  • Available as browser extension and mobile app
  • Set as default search in your browser settings
  • Visit DuckDuckGo

Brave Search

Startpage

  • Anonymous Google search results
  • No tracking or recording of searches
  • Customizable search settings
  • Available in multiple languages
  • Visit Startpage

Secure Your Mobile Device

Your phone tracks you more than your computer. Here's how to limit that.

iOS Privacy Settings

  1. Go to Settings > Privacy & Security
  2. Turn off "Location Services" for apps that don't need it
  3. Review "Tracking" and disable "Allow Apps to Request to Track"
  4. Enable "App Privacy Report" to monitor app behavior
  5. Use "Hide My Email" for sign-ups when possible
  6. Enable "Private Wi-Fi Address" for networks
  7. Learn more: Apple Privacy & Security guide

Android Privacy Settings

  1. Go to Settings > Privacy
  2. Disable "Location" when not needed
  3. Review app permissions regularly
  4. Enable "Private DNS" with a provider like dns.google
  5. Delete your advertising ID under Settings > Privacy > Ads
  6. Consider using Firefox Focus for private browsing
  7. Learn more: Android Privacy controls

Browser Extensions Worth Using

A few extensions that block trackers without breaking websites or slowing things down.

uBlock Origin

The best ad blocker. Lightweight, configurable, and works on Firefox, Chrome, and most other browsers.

Download uBlock Origin

Privacy Badger

Made by the EFF. Learns which trackers follow you across sites and blocks them automatically.

Download Privacy Badger

HTTPS Everywhere (retired, uninstall it)

You'll still see this recommended in older guides. The EFF retired it in January 2023 because every major browser now upgrades connections to HTTPS natively. If you still have it installed, remove it and enable your browser's HTTPS-Only Mode instead. A privacy tool you no longer need is this site's favorite kind.

Read EFF's retirement note

Decentraleyes

Serves common JavaScript libraries locally instead of fetching them from CDNs that track you.

Download Decentraleyes

Privacy is a Process, Not a Product

That's security expert Bruce Schneier's old line about security, and it applies just as well here.

These guides use tools you already have or can get for free. You don't need perfect anonymity. Just reduce the amount of data you're giving away for no reason. Start with whatever seems easiest and go from there.