Protect: DNS-request security

Yandex.Browser uses DNSCrypt technology, which protects users from DNS hijacking and spoofing.

Note. By default, DNSCrypt encryption is disabled.

DNS hijacking risks

Your computer needs an IP address to connect to internet sites. It's easier for users, however, to remember domain names (the letters comprising the site address) than to remember the string of numbers that make up an IP address. DNS is a widely-used system for retrieving the IP-addresses that correspond to domain names.


  1. The browser sends a request with the domain name to a special DNS server.
  2. The DNS server returns a response with the matching IP address.
Attention! The DNS-server request and response are transmitted openly, without encryption.

Not encrypting DNS requests means that:

  • Attackers can tamper with the response from the DNS server and redirect the user to a malicious site. For example, instead of going to a bank's website, a user might end up on a fake site that steals passwords.

DNSCrypt technology in Yandex.Browser

This is how DNSCrypt technology works:

  2. Encrypted requests are sent to the DNS sever, which supports the DNSCrypt protocol.
  3. The DNS server then sends the encrypted IP-address to your computer.

Enabling encryption of DNS requests

To enable encryption of DNS requests:

  1. Click the icon  Settings.


    Note. We recommend selecting the Yandex DNS server.