1.1.1.1

What is 1.1.1.1?

1.1.1.1 is a public DNS resolver, the service a device asks to translate a domain name such as example.com into the IP address of the server it needs to reach. Most people use the resolver supplied by their internet provider without realizing it, but anyone can switch a phone, computer or home router to 1.1.1.1 and its backup address 1.0.0.1. Cloudflare runs the resolver on its network in hundreds of cities, which keeps responses fast, and says the service does not sell user data to advertisers.

Privacy was central to the launch. Cloudflare committed never to write querying IP addresses to disk, to delete logs within 24 hours and to have those practices audited by KPMG. The resolver supports DNS over HTTPS and DNS over TLS, which encrypt lookups so that networks in between cannot easily read or alter them, and it can also be reached as a Tor hidden service. A variant called 1.1.1.1 for Families uses the addresses 1.1.1.2, which blocks malware, and 1.1.1.3, which blocks both malware and adult content.

Cloudflare also offers 1.1.1.1 as an app for iOS, Android, Windows, macOS and Linux. Besides setting up encrypted DNS, the app includes WARP, which encrypts all of a device’s traffic through Cloudflare’s network using the WireGuard protocol, and a paid WARP+ tier that routes traffic over faster paths. The address itself came from a partnership with APNIC, the regional internet registry for the Asia-Pacific region, which gets research data from the junk traffic that misconfigured systems send to 1.1.1.1. The same WARP technology underpins the device client used by Cloudflare One.

Key features of 1.1.1.1

1. 01

   Fast public DNS resolution

   The resolver answers queries from Cloudflare’s network in hundreds of cities, and Cloudflare says independent measurements have ranked it the fastest public DNS resolver.

2. 02

   Privacy commitments

   Cloudflare does not write querying IP addresses to disk, deletes logs within 24 hours, does not sell user data to advertisers and has its commitments audited by KPMG.

3. 03

   Encrypted DNS

   Support for DNS over HTTPS and DNS over TLS protects lookups from eavesdropping and tampering, and the resolver is also available as a Tor hidden service.

4. 04

   1.1.1.1 for Families

   Alternative addresses filter results for home networks: 1.1.1.2 blocks known malware domains, while 1.1.1.3 blocks both malware and adult content.

5. 05

   WARP in the 1.1.1.1 app

   The app can encrypt all of a device’s internet traffic through Cloudflare’s network using WireGuard, with an optional paid WARP+ tier that uses faster routes.

6. 06

   Simple setup

   Users can enter 1.1.1.1 and 1.0.0.1 in device or router DNS settings, or install the app to configure encrypted DNS automatically on phones and computers.

Who uses 1.1.1.1?

• Home users replace their internet provider’s default resolver to get fast lookups and keep DNS data from being sold for advertising.
• Parents configure 1.1.1.1 for Families on a home router to filter malware and adult websites for every device on the network.
• Mobile users on public Wi-Fi turn on WARP in the 1.1.1.1 app to encrypt their traffic.
• Network administrators use 1.1.1.1 as a public resolver for troubleshooting and as a fallback DNS server.

History of 1.1.1.1

Cloudflare launched 1.1.1.1 on April 1, 2018, choosing the date to match the address’s four ones. The address belongs to APNIC, which had long seen large volumes of junk traffic sent to it by misconfigured systems; under their partnership, Cloudflare operates the resolver and shares data that supports APNIC’s research. Mobile apps followed in November 2018, and WARP, announced in April 2019, was added to the app that September.

Cloudflare introduced 1.1.1.1 for Families on April 1, 2020. Because so many people and networks depend on the resolver, its problems are widely felt: on July 14, 2025, an internal configuration error withdrew the service’s routes worldwide for 62 minutes, and in January 2026 Cloudflare reported that a change which altered the order of records in DNS responses had broken lookups for some clients. Cloudflare published technical reports on both incidents.

1. 2018

   Cloudflare launches the 1.1.1.1 resolver with APNIC on April 1 and releases mobile apps in November.

2. 2019

   WARP, an encrypted connection feature built on WireGuard, is added to the 1.1.1.1 app.

3. 2020

   Cloudflare introduces 1.1.1.1 for Families with malware and adult content filtering.

4. 2025

   An internal configuration error takes 1.1.1.1 offline worldwide for 62 minutes on July 14.

1.1.1.1 pricing

1.1.1.1 alternatives

Well-known alternativesGoogle Public DNS, Quad9, Cisco OpenDNS, NextDNS and AdGuard DNS

1.1.1.1: frequently asked questions

Sources

1. 1.1.1.1 one.one.one.one
2. Announcing 1.1.1.1, Cloudflare Blog blog.cloudflare.com
3. 1.1.1.1 DNS resolver, Cloudflare Docs developers.cloudflare.com
4. Cloudflare 1.1.1.1 incident on July 14, 2025 blog.cloudflare.com
5. 1.1.1.1, Wikipedia en.wikipedia.org

Last reviewed September 17, 2026. Spotted an error? Send a correction.