dnscrypt-proxy

Local proxy that encrypts your DNS and lets you pick any resolver.

github.com

FreeOpen SourceE2E EncryptedWindowsmacOSLinuxAndroidSelf-hosted (open source)

Pricing Free and open source.

dnscrypt-proxy is not a resolver service but a small local proxy you run on your own machine, encrypting outbound DNS with DNSCrypt v2, DoH, or Anonymized DNSCrypt before it ever leaves your device. Because you choose the upstream resolver, it hands you full control, filtering, caching, and the option to spread queries across servers so no single one sees both who you are and what you asked. It is free, open source under the permissive ISC license, and maintained by the community DNSCrypt project. It runs on Windows, macOS, Linux, and Android. The cost is effort: this is a config-file tool aimed at people comfortable editing settings, not a one-tap app.

Strengths

  • Fully open source (ISC) and free
  • You choose and even mix your own resolvers
  • Anonymized DNSCrypt hides who is asking

Considerations

  • Setup is config-file driven, not beginner-friendly
  • No polished GUI; you self-manage it

Listed in DNS

dnscrypt-proxy alternatives