iPhone, iPad & Mac

Apple devices running iOS 14, iPadOS 14, macOS 11 (Big Sur) or newer can use an encrypted DNS server system-wide through a configuration profile. The profile only changes DNS settings. It doesn’t manage your device or install anything else, and you can remove it at any time.

Each profile uses one Bancuh server over DNS-over-HTTPS, on Wi-Fi and mobile data.

Download a profile

Open this page on the device you want to set up, and download one profile:

Dallas

• us-dns1 configuration profile (DNS-over-HTTPS via us-dns1.bancuh.com)

Paris

• fr-dns1 configuration profile (DNS-over-HTTPS via fr-dns1.bancuh.com)
• fr-dns2 configuration profile (DNS-over-HTTPS via fr-dns2.bancuh.com)

Singapore

• sg-dns1 configuration profile (DNS-over-HTTPS via sg-dns1.bancuh.com)
• sg-dns2 configuration profile (DNS-over-HTTPS via sg-dns2.bancuh.com)

Tokyo

• jp-dns1 configuration profile (DNS-over-HTTPS via jp-dns1.bancuh.com)
• jp-dns2 configuration profile (DNS-over-HTTPS via jp-dns2.bancuh.com)

"Unverified" is expected

The profiles aren’t signed, so iOS and macOS label them Unverified when you install them. You can read what’s inside before you install one: it contains the server’s DoH URL and IP addresses and nothing else.

Install it

iPhone & iPad

1. Download the profile in Safari. When asked, allow the download. iOS shows Profile Downloaded.

2. Open Settings. Tap Profile Downloaded near the top, or go to Settings › General › VPN & Device Management and tap the Bancuh DNS profile.

3. Tap Install, enter your passcode, and confirm.

4. Go to Settings › General › VPN & Device Management › DNS, and make sure Bancuh DNS is selected.

Mac

1. Download the profile. macOS shows a notification that it needs to be reviewed.

2. Open System Settings. The profile is under General › Device Management, or Privacy & Security › Profiles on older versions of macOS. You can also search System Settings for “Profiles”.

3. Double-click the Bancuh DNS profile, click Install, and confirm with your password.

Then check that it works.

Remove it

Go to the same place you installed it (Settings › General › VPN & Device Management on iPhone and iPad, or Device Management / Profiles on Mac), select the Bancuh DNS profile, and choose Remove Profile.

Things that bypass the profile

• iCloud Private Relay handles DNS itself for Safari. Ads may still show in Safari while it’s on.
• VPN apps usually send DNS through the VPN.
• Chrome and Firefox may use their own secure DNS setting. See Web browsers.

Mac: plain DNS instead

If you’d rather not install a profile, you can set plain, unencrypted DNS for each network in System Settings › Network › (your Wi-Fi or Ethernet) › Details › DNS. Add these addresses and remove any others:

Dallas

Server	IPv4	IPv6
us-dns1	45.33.24.129	2600:3c00::f03c:94ff:fe97:f94f

Paris

Server	IPv4	IPv6
fr-dns1	51.158.99.7	2001:bc8:710:1efa:dc00:ff:fe34:a339
fr-dns2	163.172.180.231	2001:bc8:710:1efb:dc00:ff:fe34:a1d7

Singapore

Server	IPv4	IPv6
sg-dns1	139.59.219.245	2400:6180:0:d0::f7:1001
sg-dns2	139.59.218.207	2400:6180:0:d0::f5:7001

Tokyo

Server	IPv4	IPv6
jp-dns1	103.29.68.118	2400:8902::f03c:92ff:fe3e:46cd
jp-dns2	172.105.195.19	2400:8902::f03c:94ff:fee9:70