Introduction
On Android, DNS lives under Settings > NETWORK. The screenshot default is Quad9 (9.9.9.9), the same as Windows.

Change DNS
- Open Settings.
- Set App mode to Advanced if DNS is hidden.
- Tap DNS under NETWORK.
- Choose Quad9 (9.9.9.9), Cloudflare (1.1.1.1), Google (8.8.8.8), AdGuard (94.140.14.14), or Custom DNS.
- Reconnect so the new resolver is used inside the tunnel.
Block ads & trackers on the next Settings page also filters via DNS. Use AdGuard or that toggle if you want filtering; use Cloudflare or Google if you want a plain public resolver; use Custom DNS for NextDNS or a home resolver.
Private DNS in Android system settings (Settings > Network > Private DNS) can fight the app. Prefer the in-app DNS while the VPN is on.
