Android allows now to set "private DNS" in the settings (which also allows using DNS over TLS - sadly over HTTPS atm only works for specific DNS providers).

What I am trying to establish is: if I set private DNS and use VPN at the same time, will the DNS queries go through VPN connection - aka will the DNS service only receive the IP of the VPN node I am connected to.

Tried using AdGuard DNS as private DNS with VPN on. In this case I could see in AdGuard logs that the IP was indeed the IP coming from VPN (not my actual IP).

The test I did would suggest that indeed the DNS queries are going through VPN. Which would also make sense as I did use the option to block connections without VPN. But would like to see if anybody can confirm that this is always the case.

With regards to version of Android - let's say we are talking only about 13 (with January 1, 2023 security patch version).

1 Answer 1


Android's private DNS is DoT (DNS over TLS) and it doesn't really matter where requests will go: they will be encrypted regardless.

But yes, when you up a VPN connection, all the outside traffic will be routed via VPN by default, thus your VPN provider will see DNS connections but it won't be able to snoop on them.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .