Network-wide

Router Setup

Router setup can cover every device on your network, but router support is mixed. Many home routers only accept plain DNS IP addresses. Advanced firewalls and custom firmware can do more.

At a glance

Best for

Homes or small offices that want one setting to cover many devices.

Protocol

Plain DNS by default, DoT or DoH where supported

Coverage

Network-wide

Setup time

5 to 10 minutes

Main input

51.24.7.1

Router Setup stays focused on the shortest accurate path for this platform.

Guide summary

Homes or small offices that want one setting to cover many devices.Plain DNS by default, DoT or DoH where supportedNetwork-wideModerate5 to 10 minutes

Important

Do not assume your router supports encrypted DNS just because it supports custom DNS. Many mainstream home routers only let you set IP addresses.

Before you start

Check 01

You need access to your router or firewall admin screen.

Check 02

Know whether your device supports plain DNS only, DoT, or custom DoH templates.

Exact Values

Use the right field for the right input.

URL fields need the full DoH URL. Hostname fields need the DoT hostname only. IP fields need the raw address only.

IPv4 DNS

51.24.7.1

Works on the widest range of routers.

IPv6 DNS

2a05:d01c:b4a:2900:945c:1a85:e537:cf80

Use if your router and ISP support IPv6.

DoT hostname

dns.easyhns.com

Use only on routers or firewalls that explicitly support DNS over TLS.

DoH URL

https://dns.easyhns.com/dns-query

Use only on gear that explicitly supports custom DNS over HTTPS templates.

Step-by-Step

Short steps, no filler.

Follow the route in order, then verify the active DNS setting before changing another layer.

Step 01

Find the DNS settings in your router

Open the router app or admin page and search for Internet, WAN, DHCP, or DNS settings. The exact label changes by brand.

Step 02

Choose the simplest supported method

If your router only accepts IP addresses, use 51.24.7.1 as the primary DNS server. Add 2a05:d01c:b4a:2900:945c:1a85:e537:cf80 only if your network already uses IPv6 cleanly.

Step 03

Use encrypted DNS only where the platform clearly supports it

For DoT-capable routers or firewalls, enter dns.easyhns.com as the secure hostname. For custom DoH-capable platforms, use https://dns.easyhns.com/dns-query.

Step 04

Save and renew clients

Save the router settings, then reconnect client devices or renew DHCP leases so they pick up the new DNS path.

How to verify

Check 01

Test from two different devices on the network, not just one browser on one machine.

Check 02

If only some devices resolve Handshake domains, they may still be using manually configured DNS or a VPN.

Troubleshooting

Note 01

Google Nest and Google Wifi support changing DNS server IPs in the Google Home app, but this is still a plain DNS flow rather than DoH or DoT.

Note 02

Platforms like OpenWrt, pfSense, and OPNsense can support encrypted upstream DNS, but the exact path is more advanced and should match that platform's own documentation.

Note 03

If a smart TV or console still fails, reboot it after changing router DNS so it requests fresh network settings.

Important note about Handshake website security warnings

Using Easy HNS gives you convenient access to Handshake domains, but standard browsers may still show security warnings for some Handshake websites.

Why? Because most mainstream browsers do not natively validate Handshake trust and DANE/TLSA in the same way they validate the conventional HTTPS web.

As a result:

  • some Handshake websites may load over HTTP;
  • some may show a browser warning or missing secure indicator;
  • this is often a browser trust-model limitation, not automatically proof that the website is malicious.

If you want a stronger Handshake-native browsing experience with DANE/TLSA support, use Fingertip for desktop.

Using a VPN?

Easy HNS still works well with VPNs, but browser Secure DNS can override router or system DNS, and some VPN apps force their own resolver. Use 51.24.7.1 only in IP fields, use https://dns.easyhns.com/dns-query only in DoH fields, and verify which layer is actually winning.