How to Lock Down Your DNS Against Future Hijacking

Think of the Domain Name System (DNS) as the internet's phone book. When you type a website address like "google.com" into your browser, DNS translates that into a computer-friendly IP address so your device can find and connect to the correct server. DNS hijacking is when a cybercriminal redirects you to a fake website, even if you typed the correct address.

Recognising the Signs of DNS Hijacking

It's not always obvious when your DNS has been tampered with, but there are several red flags to watch out for. Being aware of these can help you act quickly to protect your information and devices. Always trust your gut feeling if something seems off with a website you usually visit.

• Unexpected adverts popping up more frequently than usual, especially on sites that don't typically have many ads.
• Being redirected to strange or unfamiliar websites when you try to visit common sites like your bank or email provider.
• Websites you visit regularly looking different, having outdated information, or displaying unusual errors.
• New toolbars or software appearing in your web browser that you don't remember installing.
• Your internet service suddenly feeling much slower than usual, or frequent disconnections.

Why Encrypted DNS is Your New Best Friend

Traditionally, DNS requests are sent across the internet unencrypted, meaning anyone with the right tools could potentially see which websites you're trying to visit. Encrypted DNS, like DNS-over-HTTPS (DoH) or DNS-over-TLS (DoT), scrambles these requests, making them private and much harder for snoopers or hijackers to intercept.

• Increased privacy: Your internet provider and others can't easily see your browsing history.
• Enhanced security: It's much tougher for criminals to redirect your traffic to malicious sites.
• Protection against surveillance: Helps prevent various forms of online tracking and censorship.

Setting Up Encrypted DNS on Your Devices

Many modern operating systems and web browsers allow you to easily switch to encrypted DNS. This is a simple yet powerful step you can take for better online security. It's usually a one-time change that provides ongoing protection.

• On Windows 10/11: Go to Settings > Network & Internet > Advanced network settings > More network adapter options. Right-click your active connection (e.g., Wi-Fi or Ethernet), select Properties, then choose Internet Protocol Version 4 (TCP/IPv4) > Properties. Select 'Use the following DNS server addresses' and enter a secure DNS provider's addresses (e.g., Cloudflare's 1.1.1.1 or Google's 8.8.8.8).
• On macOS: Go to System Settings > Network, select your active connection, click Details, then DNS. Click the '+' button to add new DNS servers.
• In web browsers: Many browsers like Chrome, Firefox, and Edge have built-in options to enable DNS-over-HTTPS. Look in your browser's 'Settings' or 'Privacy and Security' section for options related to DNS or 'Secure DNS'.
• For mobile devices: Check your phone's Wi-Fi settings or network settings for options to configure private DNS. Both Android and iOS offer ways to do this, sometimes under 'Private DNS' or similar.

Securing Your Home Router's DNS Settings

Your home router is a critical gateway to the internet for all your connected devices. If a hijacker gains control of your router's DNS settings, they can affect every device on your home network. Keeping your router secure is essential for comprehensive DNS protection.

• Change default passwords: Always change the default administrator username and password on your router to something strong and unique.
• Access your router's settings: Open a web browser, type your router's IP address (often 192.168.1.1 or 192.168.0.1) into the address bar, and log in with your credentials.
• Find DNS settings: Look for a section labelled 'WAN', 'Internet Settings', 'DNS', or similar. Here you can often manually enter secure DNS server addresses like those from Cloudflare (1.1.1.1, 1.0.0.1) or Google (8.8.8.8, 8.8.4.4).
• Disable remote administration: This prevents anyone from trying to access your router's settings from outside your home network.
• Keep firmware updated: Regularly check your router manufacturer's website for firmware updates and install them. These updates often include important security fixes.

Regular Checks and Best Practices

DNS security isn't a 'set it and forget it' task. Regular checks and good online habits will help ensure your defences remain strong against evolving threats. A little bit of vigilance goes a long way in protecting your digital life.

• Verify your DNS settings periodically on your devices and router, especially after system updates or if you notice any suspicious activity.
• Use a reputable antivirus or anti-malware program and keep it updated.
• Be cautious about clicking on suspicious email links or downloading files from untrusted sources, as these can sometimes install malware that changes your DNS settings.
• Consider using a Virtual Private Network (VPN) as an additional layer of security, as many VPNs include their own secure DNS resolution.

Key takeaway

Protecting your DNS settings is a vital step in safeguarding your online privacy and security. By understanding the signs of hijacking, embracing encrypted DNS, securing your router, and performing regular checks, you can significantly reduce your risk. These actions help ensure that when you type a website address, you always land exactly where you intend to go, keeping you safe from malicious redirects and snoopers.