Tailscale provides identity-based Zero Trust connectivity for developers, IT, and security teams across resources and environments.
DNSCrypt
DNSCrypt secures communication between DNS clients and resolvers, with project downloads for DNSCrypt and DNS-over-HTTPS servers and clients.
About DNSCrypt
DNSCrypt is a protocol and official project that secures communication between DNS clients and resolvers. It encrypts, authenticates, and optionally anonymizes these connections to prevent DNS spoofing, using cryptographic signatures to verify that DNS responses have not been tampered with. The project provides official downloads for DNSCrypt and DNS-over-HTTPS (DoH) servers and clients. Unlike DNS-over-TLS and DNS-over-HTTPS, DNSCrypt does not require initial plaintext DNS resolution, as clients are pre-configured with a resolver IP address and public key to enable encryption from the very first query.
Key features
- Encrypts, authenticates, and optionally anonymizes DNS communications
- Prevents DNS spoofing via cryptographic response signature verification
- Enables encryption from the first query without plaintext pre-resolution
- Eliminates dependency on certificate authorities for resolver verification
- Supports anonymized DNS relays to hide client IP addresses
- Includes built-in query padding and multiple cryptographic suites
Best for: It is best for users seeking secure, censorship-resistant DNS communications without reliance on certificate authorities or centralized DoH providers.
Good for
- Encryption initiates from the first DNS query with no plaintext pre-resolution required
- Removes dependency on certificate authorities, mitigating risks from CA compromises or coercion
- Decentralized design allows anyone to operate a resolver without corporate gatekeeper approval
DNSCrypt at a glance
- Website
- dnscrypt.info
- Category
- Privacy & Security › VPNs
- Type
- Website
- Pricing
- Not confirmed. Check the site
- Platforms
- Web
- Open source
- Not stated
- Language
- English
- Last checked
- Oct 6, 2026 · Online when checked
- Listed
- Oct 5, 2026
DNSCrypt alternatives
Tools and sites you could use instead, ranked by how closely they match.
PrivadoVPN offers a free VPN plan with 10 GB of monthly data and support for unlimited devices, alongside paid service options.
Freemium
24 alternatives
The Nebula project provides a scalable overlay networking tool focused on performance, simplicity, and security.
Open source
24 alternatives
Hysteria provides an open-source, censorship-resistant proxy that can host a server behind NAT and connect clients directly without port forwarding.
SlipNet provides an Android VPN client with DNS tunneling, proxy, SSH, Tor, and DNS-over-HTTPS support plus a DNS scanner.
Open source
24 alternatives
MahsaNG adds fragmentation, DNS over HTTPS, rotating configurations, and free VPN servers to a V2RayNG-based app.
Open source
24 alternativesPopular in VPNs
Well-known listings from the same topic.
Cloudflare Tunnelsdevelopers.cloudflare.com/cloudflare-one/conne…WireGuardwireguard.comAmneziaamnezia.orgVPN Jantitvpnjantit.comNetBirdnetbird.ioMullvad VPNmullvad.net
DNSCrypt FAQ
How does DNSCrypt prevent DNS spoofing?
It uses cryptographic signatures to verify DNS responses have not been tampered with.
Does DNSCrypt require initial plaintext DNS resolution?
No, clients are pre-configured with a resolver IP address and public key so encryption starts from the first query.
How does DNSCrypt avoid dependency on certificate authorities?
Each resolver uses a static public key verified via cryptographic signatures instead of CA-issued certificates.
Is something wrong or out of date?
Tell us and an editor will check it.
Own this website?
Claim this listing
Claim the listing and suggest updates yourself. An editor checks every claim first.