Most Android antivirus apps are glorified advert supply programs. They drain your battery, nag you with improve prompts, and largely duplicate what Google Play Shield already does totally free. For the typical consumer who sticks to the Play Retailer, they’re nothing greater than useful resource hogs.
What these apps do not do effectively, nonetheless, is cease your telephone from connecting to a malicious server within the first place, whether or not it is a phishing web page, a malware distribution area, or a botnet command heart. Quad9, a free nonprofit DNS service, fills that hole on the community degree and helps you retain secure towards on-line threats whereas additionally defending your privateness.
Quad9 is a nonprofit DNS that blocks threats earlier than your telephone connects
A free DNS resolver backed by 19+ risk intelligence feeds
Tashreef Shareef / MakeUseOfCredit: Tashreef Shareef / MakeUseOf
Each time you faucet a hyperlink or open an internet site, your telephone performs a DNS lookup to translate that area title into an IP handle. Usually, your telephone makes use of your ISP’s DNS server for this, and it merely resolves no matter you ask for, malicious or not. Quad9 (9.9.9.9) replaces that default resolver with one which checks each lookup towards a database of recognized malicious domains earlier than permitting the connection.
Associated
Your router and telephone are most likely combating over DNS with out you realizing it
How a DNS battle is likely to be slowing down your telephone’s web.
What makes Quad9 totally different from Cloudflare (1.1.1.1) or Google DNS (8.8.8.8) is its deal with safety with out compromising privateness. Quad9 is operated by a Swiss-based nonprofit, which implies it is certain by strict Swiss privateness legal guidelines. It would not log your IP handle, would not require an account, and would not construct a profile of your looking habits. The service is funded by means of grants from organizations like Craig Newmark Philanthropies and partnerships with risk intelligence suppliers, and never by monetizing your information.
The risk blocking itself is powered by over 19 industrial and public risk intelligence sources, together with IBM X-Pressure. Impartial assessments have discovered that Quad9 blocks greater than 97% of recognized malicious domains. If a website is related to phishing, malware, ransomware, or a botnet, Quad9 merely refuses to resolve it, and your telephone by no means connects. You do not see a warning or a pop-up; the malicious web site simply would not load.
That is totally different from how conventional antivirus apps work. An antivirus scans recordsdata after they have been downloaded or detects suspicious conduct after an app is already working. Quad9 prevents the connection from taking place within the first place, which implies the malware by no means will get an opportunity to achieve your system.
Organising Quad9 on Android is simple
One setting change, no app required
On Samsung telephones working One UI, go to Settings > Connections > Extra connection settings > Non-public DNS. Choose Non-public DNS supplier hostname and enter dns.quad9.internet. Hit Save, and also you’re accomplished. On different Android telephones, you may discover the identical choice underneath Settings > Community & web > Non-public DNS.
That is all you must do. I set this up on my Samsung Galaxy Z Flip 6, and it has been working quietly within the background since. Your telephone now routes all DNS queries by means of Quad9’s encrypted DNS-over-TLS connection, which additionally means your ISP cannot see which domains you are trying up. The safety applies to each app in your telephone, not simply your browser.
You would possibly count on a nonprofit DNS to be slower, however Quad9 holds its personal. Based on DNSPerf’s international benchmarks, it ranks third amongst all public resolvers at 15.95 ms, quicker than Google DNS (19.11 ms) and inside a number of milliseconds of Cloudflare (11.21 ms). In on a regular basis use, the distinction is unnoticeable.
In comparison with Cloudflare and Google DNS, Quad9 is the one one that mixes risk blocking with a strict no-logging coverage:
Function
Quad9 (9.9.9.9)
Cloudflare (1.1.1.1)
Google DNS (8.8.8.8)
Menace blocking
Sure (19+ intel feeds)
No (not by default)
No
IP handle logging
No
Deleted after 24 hours
Sure (retained)
Group
Nonprofit (Swiss basis)
For-profit
For-profit
Privateness jurisdiction
Switzerland (GDPR+)
United States
United States
Encrypted DNS (DoT/DoH)
Sure
Sure
Sure
What Quad9 cannot do, and when to skip it
It has limits value understanding about
Tashreef Shareef / MakeUseOfCredit: Tashreef Shareef / MakeUseOf
Quad9 works on the DNS layer, which implies it will probably solely block threats that begin with a website lookup. If malware is already in your system, Quad9 cannot detect or take away it. It can also’t scan recordsdata, test app permissions, or flag suspicious conduct inside an app. For that, you’d nonetheless want one thing like Google Play Shield, which comes constructed into each Android telephone.
Quad9 additionally would not block advertisements or trackers until its risk intelligence companions have particularly categorised them as malicious. So should you’re searching for an advert blocker, this is not it.
When you use a VPN, it is best to most likely skip Quad9 or at the least keep away from overriding your VPN’s DNS with it. Most VPN suppliers route your DNS queries by means of their very own servers, and utilizing a special DNS whereas related to a VPN creates an uncommon site visitors sample that makes you simpler to fingerprint amongst different VPN customers. It additionally means you are now sharing your DNS queries with two events as an alternative of 1, your VPN supplier and Quad9, with out gaining any significant privateness profit. When the VPN is off, Quad9 works nice. However when it is on, persist with no matter DNS your VPN supplier assigns.
There’s additionally the broader limitation that altering your DNS would not cover your exercise out of your ISP solely. Your ISP can nonetheless see the IP addresses you connect with, even when the DNS queries are encrypted. For full privateness, you’d want a VPN or Tor on high.
Logging coverage
No logs
Cell app
Sure
Proton VPN is a digital personal community service that gives a safe and personal method to make use of the web by encrypting your web site visitors and hiding your IP handle. It has a strict no-logs coverage and privateness coverage.
A easy setting that does greater than most safety apps
Quad9 is made to catch each risk, and it isn’t a substitute for fundamental safety hygiene like holding Android’s built-in protections enabled. It will not scan your downloads, quarantine suspicious recordsdata, or warn you about app permissions, both.
However as a free, set-and-forget first layer of protection, it does one thing most antivirus apps on Android fail at: it stops your telephone from reaching recognized malicious servers earlier than something dangerous can occur. So, in case you are searching for a quick, privacy-focused DNS resolution that may additionally shield you from malicious web sites, Quad9 is a no brainer resolution.
