Most users should install the Liberador Windows app instead of changing Windows 11 DNS settings manually. The app configures Liberador for you and is easier to update than manual DNS settings.
Recommended: install the Liberador app
- Go to https://liberador.net/download/windows/
- Click Download for Windows.
- Open the downloaded installer.
- If Windows asks for permission, click Yes.
- When the installation is complete, open Liberador.
- Sign in with your Liberador account.
Use Liberador with the app
After signing in, use the app to enable SmartDNS or VPN.
For VPN, the app shows whether the VPN is connected.
For SmartDNS, the app shows the Liberador checks. If everything is configured correctly, the checks turn green.
If your internet provider redirects or filters DNS requests, SmartDNS may not work with normal DNS settings. The app can detect this and offer SecureDNS with SmartVPN when needed. SecureDNS with SmartVPN encrypts DNS traffic and allows SmartDNS to work correctly.
If Liberador asks you to reinstall or update
If the app says that a required system service is missing or outdated, install the latest Windows app again:
https://liberador.net/download/windows/?reason=service_missing
Then open Liberador again and try enabling SmartDNS or VPN.
When should I use manual setup?
Use manual DNS setup only if you cannot install the Liberador app, do not have permission to install it, or specifically want to configure SmartDNS without using the app.
For most users, the app is easier and more reliable.
Manual setup configures Liberador SmartDNS on Windows. It does not replace the full Liberador app experience.
Manual setup with encrypted DNS
Windows 11 supports DNS over HTTPS, also known as DoH. We recommend this option for manual setup because it encrypts DNS requests between your computer and Liberador.
This configuration keeps DNS requests encrypted and avoids falling back to unencrypted DNS when encrypted DNS is unavailable.
Add Liberador DNS over HTTPS support
- Click the Windows search icon and enter Command or Terminal.
- Right-click Command Prompt or Terminal, then select Run as administrator.
- If Windows asks for permission, click Yes.
-
Enter these commands:
netsh dnsclient add encryption server=45.63.105.236 dohtemplate=https://dns.liberador.net/ autoupgrade=yes udpfallback=no netsh dnsclient add encryption server=51.91.192.251 dohtemplate=https://dns.liberador.net/ autoupgrade=yes udpfallback=no netsh dnsclient add encryption server=2001:19f0:9002:bab:5400:3ff:fede:c374 dohtemplate=https://dns.liberador.net/ autoupgrade=yes udpfallback=no netsh dnsclient add encryption server=2001:41d0:303:6489::109 dohtemplate=https://dns.liberador.net/ autoupgrade=yes udpfallback=no - Close Command Prompt or Terminal.
Configure DNS in Windows settings
- Click the Windows menu icon, then click Settings.
- Click Network & internet.
- If you use a network cable, click Ethernet. If you use Wi-Fi, click Wi-Fi.
- Scroll to DNS server assignment and click Edit.
- Select Manual.
- Turn IPv4 on.
- In Preferred DNS, enter
45.63.105.236. - For DNS encryption, choose Encrypted only (DNS over HTTPS).
- In Alternate DNS, enter
51.91.192.251. - For alternate DNS encryption, choose Encrypted only (DNS over HTTPS).
On some Windows versions, DNS encryption may appear as On (automatic template) or On (manual template). If Windows asks for a DNS over HTTPS template, enter https://dns.liberador.net/. If Windows shows a Fallback to plaintext option, turn it off.
If your connection does not use IPv6, click Save. If your connection uses IPv6, complete the next section before saving.
If your connection uses IPv6
If your connection uses IPv6, configure the IPv6 DNS servers too. Otherwise Windows may continue using your provider's IPv6 DNS servers instead of the Liberador IPv4 DNS servers.
- Turn IPv6 on.
- In the IPv6 Preferred DNS field, enter
2001:19f0:9002:bab:5400:3ff:fede:c374. - For IPv6 DNS encryption, choose Encrypted only (DNS over HTTPS), or the equivalent encrypted option shown by Windows.
- If Windows asks for a DNS over HTTPS template, enter
https://dns.liberador.net/. - In the IPv6 Alternate DNS field, enter
2001:41d0:303:6489::109. - For IPv6 alternate DNS encryption, choose Encrypted only (DNS over HTTPS), or the equivalent encrypted option shown by Windows.
- Click Save.
After manual setup, restart your computer.
To check manual setup, go to your Liberador account page:
https://liberador.net/accounts/profile/
The Liberador checks should turn green.
Manual setup without encrypted DNS
Use this option only if DNS over HTTPS is not available on your Windows 11 computer.
This option does not encrypt DNS requests between your computer and Liberador.
- Click the Windows menu icon, then click Settings.
- Click Network & internet.
- If you use a network cable, click Ethernet. If you use Wi-Fi, click Wi-Fi.
- Scroll to DNS server assignment and click Edit.
- Select Manual.
- Turn IPv4 on.
- In Preferred DNS, enter
45.63.105.236. - In Alternate DNS, enter
51.91.192.251.
If your connection does not use IPv6, click Save. If your connection uses IPv6, complete the next section before saving.
If your connection uses IPv6
If your connection uses IPv6, configure the IPv6 DNS servers too. Otherwise Windows may continue using your provider's IPv6 DNS servers instead of the Liberador IPv4 DNS servers.
- Turn IPv6 on.
- In the IPv6 Preferred DNS field, enter
2001:19f0:9002:bab:5400:3ff:fede:c374. - In the IPv6 Alternate DNS field, enter
2001:41d0:303:6489::109. - Click Save.
After manual setup, restart your computer.
To check manual setup, go to your Liberador account page:
https://liberador.net/accounts/profile/
The Liberador checks should turn green.
Troubleshooting manual setup
If the Liberador checks do not turn green after manual setup, your internet provider may be filtering DNS requests. In that case, use the Liberador app if possible and activate SecureDNS with SmartVPN when the app offers it.
If your connection uses IPv6 and the checks do not turn green, make sure the Liberador IPv6 DNS servers are configured. If they are configured and the checks still do not turn green, you can temporarily turn IPv6 off for this connection and check again.
Revert manual DNS setup
If you configured Windows manually and want to go back to your normal network settings, set DNS back to automatic.
- Click the Windows menu icon, then click Settings.
- Click Network & internet.
- If you use a network cable, click Ethernet. If you use Wi-Fi, click Wi-Fi.
- Scroll to DNS server assignment and click Edit.
- Select Automatic (DHCP).
- Click Save.
- Restart your computer or disconnect and reconnect to your network.
If you added the encrypted DNS commands manually and want to remove the Liberador DoH entries from Windows, open Command Prompt or Terminal as administrator and run:
netsh dnsclient delete encryption server=45.63.105.236 protocol=doh
netsh dnsclient delete encryption server=51.91.192.251 protocol=doh
netsh dnsclient delete encryption server=2001:19f0:9002:bab:5400:3ff:fede:c374 protocol=doh
netsh dnsclient delete encryption server=2001:41d0:303:6489::109 protocol=doh
ipconfig /flushdnsThese commands only remove the Liberador encrypted DNS entries from Windows. They do not uninstall the Liberador app, and they do not change your Liberador account.