Unencrypted Decoded

Your DNS queries reveal every website you visit. By default, these queries travel unencrypted to your ISP's DNS resolver, giving your ISP a complete log of your browsing habits.

Two technologies address part of this: DNS over HTTPS (DoH) and DNS over TLS (DoT). Both encrypt your DNS queries, preventing your local network or ISP from reading or tampering with the lookup itself. They do not hide everything about your browsing: destination IP addresses and some TLS metadata may still be visible unless other protections are in place. Browser and operating-system support varies, and whether DoH is active can depend on your settings and DNS provider.