# Browser setup (DNS over HTTPS)

Every major browser can use a custom secure DNS (DoH) server. This applies GraceDNS filtering to that browser only, on any network, without touching system settings. Your DoH endpoint is:

`https://dns.gracedns.eu/<configid>`

Replace `<configid>` with your configuration id.

## Chrome

1. Open **Settings**, then **Privacy and security**, then **Security**.
2. Scroll to **Use secure DNS**.
3. Choose **With: Custom** and paste your endpoint URL.

## Firefox

1. Open **Settings** and search for "DNS".
2. Under **DNS over HTTPS**, select **Max Protection**.
3. Choose provider **Custom** and paste your endpoint URL.

Max Protection means Firefox will not silently fall back to unencrypted DNS.

## Edge

1. Open **Settings**, then **Privacy, search, and services**.
2. Under **Security**, enable **Use secure DNS to specify how to lookup the network address for websites**.
3. Select **Choose a service provider** and paste your endpoint URL.

## Brave

Same path as Chrome: **Settings, Privacy and security, Security, Use secure DNS, With: Custom**.

## Safari

Safari has no per-browser DoH setting; it uses the system resolver. Use the [iOS and macOS profile](ios.md) instead.

## Verify

Visit a domain your configuration blocks. It should fail to resolve or show your block page. Note that only this browser is filtered: other apps on the device keep using system DNS. For device-wide protection use [Android Private DNS](android.md), an [Apple profile](ios.md) or your [router](router.md).

Back to [docs](../index.md).