*If you enjoyed this long guide and the work that went into it, please consider supporting Techlore on Patreon to keep this content going for free for everyone:* patreon.com/techlore If you have more questions or need any further assistance I'll have a forum thread open for you all: discuss.techlore.tech/t/the-ultimate-guide-to-mastering-nextdns/4564 Note: The author of the GitHub guide I referenced had a few extra things to mention relating to this guide: github.com/techlore/channel-content/issues/43
Could you do a tutorial for Crowdsec and how to install, configure and use it on Windows And btw thank you for this video, it really helped me use NextDNS 👍
Your guides are awesome btw.... Weird scenario but got in to a very toxic relationship where the person literally started tracking my life. Your guides have been a life saver. Thanks for putting this content out there. It's been a real life saver for me.
Been using NextDNS for about 3 years now and already have it configured the way I need it, but this is a very nice refresher for many of the options! Great video, Techlore Team!
Is it noob friendly, I personally use all the best settings you can an only extension is Ublock Origin on medium (That extension is always a learning process and still learning new things every day) and Cookie AutoDelete 3.8.2 (Plan on deleting but only reason I keep it is I have this bug that Hulu just will not let me log in so my browser has no chance of deleting cookies but eventually have no choice to close because of updates. Theres no fix to this bug it just happens to random devices. Anyway have it on strict and all the settings in video delete history, cookies etc but still have it on https because I have no clue what I'm doing when it comes to DNS let alone NextDNS. In other video he uses a custom server which he leaves a link to an in this recent video I guess He's saying NextDNS is better stable option either way I'd be fine just being with one that works an does what it is suppose to do decently. Also does it matter if your router isn't set up with DNS if thats a thing an you just have DNS on a computer thats just on the wifi?
Albeit 11 months ago for this vid - your in-detail review still stands out, and it helped me out. I like your in-detail review. Not all that BS going around, but just the details that I need, instead. Kudos to you, and I will be using your affiliate-link signing up - since you deserve it. I'm amazed you are SO upfront even providing the standard link... Merely THAT is a tribute to your honesty, which is hard to be found these days online. Thumbs up to you. 👍👍
Awesome guide, still today in november 2024! NextDNS is also one of my favorit tools, since they came out. I'm a subscriber to their service since Maj 2020. :)
Just started using NextDNS a couple days ago and am really impressed with all the features. 10 times more than OpenDns which is still pretty good. Thanks for a detailed review!
What a great video. I subscribed to nextdns a couple of months ago and it's a really great service. I have 2 small kids and it's a great way to see if they keep up with what they tell us. Lol. Thanks for your videos, Henry. They're very informative. Greetings from Portugal
Been using it on an old mobile device and now on the newest one it's been almost a year. There is also a setting mode on the PC that can use one setting from the same account. It is really interesting and fun to see what goes in and out and control/regulate what is and isn't allowed, with a little effort and figuring it out. That's like elevating the privileges of managing your own device to a few more and more degrees.
Thanks i was looking for Parental control options for home network wide setup, your video helped. Got the paid version for the year right away. And you know what, it works great!!!
@@techlore You can test it yourself. That info apply to browser extensions like ublock origin. The lists have to be cached (in RAM) and processed locally in the browser hence that specific browser becomes slow(er). But if you run something like AdGuard Home (simulates nextdns) on another device and set the browser's DNS to that (with no extension in the browser), that processing and caching happens there. The browser then only either receives a valid DNS answer (allowed or not blocked) or NXDOMAIN (blocked). To the browser, that is the truth and it's unaware of any filtering
You can enable "Block Page" and this will show you what blacklist blocked the URL you want to visit. As simple as that. So it's actually recommended to add more than one.
Thank you for the detailed video. I added Instagram from Parental Control List to Restrict Access. It works fine for the app but It can still be opened on the browser. Any suggestions other than adding it in the Deny List because I want to use Recreation Time on it.
this would be great... I've done some research (on my router) it's a no-go... you'd have to go thru A LOT OF hoops to get it done... I'm talking about getting DNS over TLS, DNSSEC AD-Blocking etc...
I used NextDNS for a month and then I used ControlD for a month. I ended up sticking with NextDNS because of a few key features. But, ControlD is also very good and has some features NextDNS does not. They are both $2/month (with proxies, ControlD is $4/m). Overall, you can't go wrong with either one.
The Device configuration in ControlD has really confused me. I was trying to create a Device specifically for VPN use, but I didn't know which operating system (Windows, Apple, etc.) to select during the configuration process. NextDNS is way simpler compared to that.
@finalsak I was configuring the router, but ControlD didn't show me any option on how tp configure that. It didn't work, so I moved on to NextDNS. It was super easy there.
@@finalsak I never made a list but the two that come to mind are: 1. you can see detailed logs (each request) for up to 6 months. With controld, you can only see detailed logs for 24 hours. 2. Nextdns has the option to enable a blocked page. So when you go to a blocked domain, it will tell you it's blocked by nextdns and what filters blocked it. With controld you just see a generic content not loaded page.
Great video. Not all android devices support the id feature or inputting the DoH under private dns option coz it doesn't exist, a good example is android TV
Hello, great video! Can you make that detailed video on web apps? And PWA's? You speak about them very often, but I couldnt find any guide how to install them and use them. Also how to customize settings for them. For example when I click install application in brave on instagram page, it works until I exit it, after I have to log in again because I have delete all data on exit option. I still think this is not PWA (progressive web app). Can you please make video on that topic so we can dive deeper into privacy matter? Btw, I started to want to really use web apps after we had conversation with my friend and that evening I had instagram full about topic we discussed... Thank you.
They offer different benefits, I use both OS firewalls like Portmaster AND NextDNS. I made a more thorough response to this here for anyone curious: discuss.techlore.tech/t/the-ultimate-guide-to-mastering-nextdns/4564/15
Is using NextDNS a better option than using the DNS that Proton VPN sets up for you? I plan to still use Proton VPN but might disable it's DNS and setup NextDNS if this is a better option, and will make for a good combo.
@@techlore I've seen it. Seems a bit outdated as things seem to work right out of the box now. Just plug your id into the nextDNS desktop app and it just works. What I'm more curious about is which does a better job of blocking trackers and such? Proton VPN DNS, or NextDNS? If they're comparable, then I guess I'd just be paying for the logs, and analytics
Good video. Is it possible to use NextDNS on my kid's android phone to block certain sites for them only, no matter which WIFI or mobile network they're on, and not have them be able to change those settings themselves?
Thank you! And of course it has an even more badass name (perfection, used usually in describing 100 carats or more dimonds and the biggest flawless diamond is also named Paragon).
I am a pi-hole user, looking at Next DNS given its capability for outside of the network features. Next DNS logging, is it granular like pi-hole , client names and site visited per client or will listed behind my public IP? Likewise am I able to create local DNS records and or ping by hostnames?
I did a little test with malicious/phishing links and NextDNS came first. What suprised me was that Quad9 came after Cloudflare. 10/10 - NextDNS . 05/10 - ControlID . 04/10 - Cloudflare . 02/10 - OpenDNS .00/10 - Quad9, CleanBrowsing, Adguard, DNS0. I am using it and I block all TLDs except like 10. I do not block ads, just tracking and GAFAM and it takes care of all. I have a separate profile for Windows/browsers - each dedicated to a single service like Google, Facebook, MS.
@@ultrasonico5709 NextDNS is definitelly the first, when it comes to blocking porn, it blocks even less known webpages, like e621 or atfbooru. Cloudflare was great, when they launched their family filter, but a week later they decimated it, because of the pressure from *** community. When blocking google, I have to allow google sometimes to be able to login because of googleapis and captcha. I have to make exceptions, because blocking scial, betting, etc works very well.
@@ultrasonico5709 hey ultrasonico, I don't know about the other sites but I have teenage kids and block instagram, snapchat, WhatsApp & Facebook this is the only software I've used that does a thorough job of blocking ALL domains and subdomains...
How could I implement NextDNS in a company that already has a domain controller and active directory. Correct me if I'm wrong but the focus of this video is more for personal use?
I.woah I could figure out how to allow whatever ads my local weather stations app use because having it blocked on my phone makes the video clips they post not play too. Doesn't do that with any other apps
21:17 source for the "slow down web traffic"?, and by how much, are we talking going from 5ms to 15ms per query?, I would be interested to see some real world data on this also We're assuming the service just puts them in an endless list one after the other, Imagine maybe it has a different method, like aggregating the domains into a single list, while removing duplicates It could even still create accurate logs as long as it created a records file at the same time when aggregating the lists into 1 As for the second issue, you already mentioned how to find out where the block came from using logs, or if you are sure the domain is safe, you would whitelist it yourself and be good to go
regarding how hard it was to track down issues with multilists, it was not hard at all, set logs to blocked only, run app having problem, watch for block, and either remove the offending blocklist (1hosts xtra) or add site to whitelist. Also during my testing, I noticed no speed difference vs a standrd dns. All of that being said, your 2 main problems with using multi list are no big deal at all, and the slower speed one was just incorrect
I noticed with block bypass methods turned off and do an adblock test I noticed that I get more ads compared to having it turned on. I personally turn it on and just whitelist my vpn provider.
Blocking Dynamic DNS Host-names is kinda upsetting, duckdns has non malicious users like me. That option could be blocking lots of self hosted personal sites & blogs -_-
So in the act of trying to keep your network secure and private you decided to give all your DNS queries to a company you know nothing about. Why not just use Unbound, enable the DNS over TLS function and it's ad blocking feature. This way none of your information is being sent to a company you don't know is going to sell your private information and/or give it to your government.
*If you enjoyed this long guide and the work that went into it, please consider supporting Techlore on Patreon to keep this content going for free for everyone:* patreon.com/techlore
If you have more questions or need any further assistance I'll have a forum thread open for you all: discuss.techlore.tech/t/the-ultimate-guide-to-mastering-nextdns/4564
Note: The author of the GitHub guide I referenced had a few extra things to mention relating to this guide: github.com/techlore/channel-content/issues/43
Could you do a tutorial for Crowdsec and how to install, configure and use it on Windows
And btw thank you for this video, it really helped me use NextDNS 👍
Thank you for the recommendation and feedback. I have nothing to add, great guide! If I can do anything, just let me know.
Yoo hagezi you're awesome! Tysm for your blocklists
Your guides are awesome btw.... Weird scenario but got in to a very toxic relationship where the person literally started tracking my life. Your guides have been a life saver. Thanks for putting this content out there. It's been a real life saver for me.
Been using NextDNS for about 3 years now and already have it configured the way I need it, but this is a very nice refresher for many of the options!
Great video, Techlore Team!
Aw thanks so much! I'm jealous you've used it for so long :P I'm late to the party
Is it noob friendly, I personally use all the best settings you can an only extension is Ublock Origin on medium (That extension is always a learning process and still learning new things every day) and Cookie AutoDelete 3.8.2 (Plan on deleting but only reason I keep it is I have this bug that Hulu just will not let me log in so my browser has no chance of deleting cookies but eventually have no choice to close because of updates. Theres no fix to this bug it just happens to random devices. Anyway have it on strict and all the settings in video delete history, cookies etc but still have it on https because I have no clue what I'm doing when it comes to DNS let alone NextDNS. In other video he uses a custom server which he leaves a link to an in this recent video I guess He's saying NextDNS is better stable option either way I'd be fine just being with one that works an does what it is suppose to do decently. Also does it matter if your router isn't set up with DNS if thats a thing an you just have DNS on a computer thats just on the wifi?
Thanks to this channel, I have been using NextDNS for 6 months. I absolutely love it! Thank you, Techlore team!!
Henry, I was looking for this video for a long time. Thank you for making it.
NextDNS is amazing I don’t know why more privacy folks talk about it. Great video techlore
Albeit 11 months ago for this vid - your in-detail review still stands out, and it helped me out. I like your in-detail review. Not all that BS going around, but just the details that I need, instead. Kudos to you, and I will be using your affiliate-link signing up - since you deserve it. I'm amazed you are SO upfront even providing the standard link... Merely THAT is a tribute to your honesty, which is hard to be found these days online. Thumbs up to you. 👍👍
Awesome guide, still today in november 2024! NextDNS is also one of my favorit tools, since they came out. I'm a subscriber to their service since Maj 2020. :)
This is awesome! I didn't realize all of the features that was offered by NextDNS and I feel like I need to try it out now.
Just started using NextDNS a couple days ago and am really impressed with all the features. 10 times more than OpenDns which is still pretty good. Thanks for a detailed review!
What a great video. I subscribed to nextdns a couple of months ago and it's a really great service. I have 2 small kids and it's a great way to see if they keep up with what they tell us. Lol.
Thanks for your videos, Henry. They're very informative.
Greetings from Portugal
Been using it on an old mobile device and now on the newest one it's been almost a year. There is also a setting mode on the PC that can use one setting from the same account. It is really interesting and fun to see what goes in and out and control/regulate what is and isn't allowed, with a little effort and figuring it out. That's like elevating the privileges of managing your own device to a few more and more degrees.
I’ve been getting into getting into a safer browsing experience and this guide helped tons! Great job tech-lore team.
Currently using adguard dns which offers the same features. But having used nextdns in the past, I can say its an awesome service.
I rarely comment but this video is a godsend. I never heard of NextDNS but this made my day. Thanks for this video.
❤️
Thanks i was looking for Parental control options for home network wide setup, your video helped. Got the paid version for the year right away. And you know what, it works great!!!
Thanks a lot. I've already set up a "trial" account to give this a shot.
Great video :) i would love to see a video on Blocklist
Adding 'too many' lists on nextdns does not slow down browsing. The processing happens in their servers and cached on their servers
I got mixed info on this. Where should I look to verify this? Exciting if true!
@@techlore You can test it yourself. That info apply to browser extensions like ublock origin. The lists have to be cached (in RAM) and processed locally in the browser hence that specific browser becomes slow(er). But if you run something like AdGuard Home (simulates nextdns) on another device and set the browser's DNS to that (with no extension in the browser), that processing and caching happens there. The browser then only either receives a valid DNS answer (allowed or not blocked) or NXDOMAIN (blocked). To the browser, that is the truth and it's unaware of any filtering
@@zer0r00t Will do some testing then, thanks for the info!
Great!
As a NextDNS user this guides sound for me.
👍
You were definitely made this❤great explaining
You can enable "Block Page" and this will show you what blacklist blocked the URL you want to visit. As simple as that. So it's actually recommended to add more than one.
Absolutely loved the video!
Thank you for the detailed video.
I added Instagram from Parental Control List to Restrict Access. It works fine for the app but It can still be opened on the browser. Any suggestions other than adding it in the Deny List because I want to use Recreation Time on it.
Great video! Was hoping you'd go into Ndns router configuration a little bit, but otherwise thank you for the insight 👍🏼
this would be great... I've done some research (on my router) it's a no-go... you'd have to go thru A LOT OF hoops to get it done... I'm talking about getting DNS over TLS, DNSSEC AD-Blocking etc...
Thank you for the comprehensive and very clear guide.
Great video & breakdown appreciate your work always 😀
Great Video Mr Henry I love your guides hope you can Make up For Adguard
Dude! This a GOD TIER VIDEO 🔥🔥
great video! love nextdns
I just set up nextDNS on my phone and laptop. Unfortunately, my comcast router does not let me put my own dns but hey, its comcast.
I used NextDNS for a month and then I used ControlD for a month. I ended up sticking with NextDNS because of a few key features. But, ControlD is also very good and has some features NextDNS does not. They are both $2/month (with proxies, ControlD is $4/m). Overall, you can't go wrong with either one.
The Device configuration in ControlD has really confused me. I was trying to create a Device specifically for VPN use, but I didn't know which operating system (Windows, Apple, etc.) to select during the configuration process.
NextDNS is way simpler compared to that.
@@mahalordx Did you try selecting the actual OS you use?
Can you share these key features?
@finalsak I was configuring the router, but ControlD didn't show me any option on how tp configure that. It didn't work, so I moved on to NextDNS. It was super easy there.
@@finalsak I never made a list but the two that come to mind are:
1. you can see detailed logs (each request) for up to 6 months. With controld, you can only see detailed logs for 24 hours.
2. Nextdns has the option to enable a blocked page. So when you go to a blocked domain, it will tell you it's blocked by nextdns and what filters blocked it. With controld you just see a generic content not loaded page.
Great video.
Not all android devices support the id feature or inputting the DoH under private dns option coz it doesn't exist, a good example is android TV
They seriously need to place a search function for all of those TLDs.
ctrl+f
Incredibly helpful. Thank you! 👍
Bro normally speaks at 1.5x. Good!
Thanks!
This was a great guide!
This is a very good guide! Thanks! ❤
Hello, great video! Can you make that detailed video on web apps? And PWA's?
You speak about them very often, but I couldnt find any guide how to install them and use them. Also how to customize settings for them. For example when I click install application in brave on instagram page, it works until I exit it, after I have to log in again because I have delete all data on exit option. I still think this is not PWA (progressive web app). Can you please make video on that topic so we can dive deeper into privacy matter?
Btw, I started to want to really use web apps after we had conversation with my friend and that evening I had instagram full about topic we discussed...
Thank you.
great material, thank you 🙂
thanks great explanation
**Really** love this video ❤ Did I hear it right, you have not enabled logs, right? Because in the video they are not disabled 🐱
Ty you bro I love my Android phone right now ty so much 😀👍👍
What do you think is better in terms of privacy: using Ndns or something local like portmaster?
They offer different benefits, I use both OS firewalls like Portmaster AND NextDNS. I made a more thorough response to this here for anyone curious: discuss.techlore.tech/t/the-ultimate-guide-to-mastering-nextdns/4564/15
Is using NextDNS a better option than using the DNS that Proton VPN sets up for you? I plan to still use Proton VPN but might disable it's DNS and setup NextDNS if this is a better option, and will make for a good combo.
I made a whole video on this! VPN vs DNS breakdown (which covers using your VPN DNS): ruclips.net/video/wlfnIXL63tw/видео.html
@@techlore I've seen it. Seems a bit outdated as things seem to work right out of the box now. Just plug your id into the nextDNS desktop app and it just works. What I'm more curious about is which does a better job of blocking trackers and such? Proton VPN DNS, or NextDNS? If they're comparable, then I guess I'd just be paying for the logs, and analytics
Thanks
Great Information!
Review Adguard DNS server in the next video!
Useful vid! Thanks.
thanks for the guide!
Does it use up more system resources like ram, CPU etc for it to run at its best and be effective ?
No, you use it as your DNS resolver and configure your privacy and security settings through their site.
Good video. Is it possible to use NextDNS on my kid's android phone to block certain sites for them only, no matter which WIFI or mobile network they're on, and not have them be able to change those settings themselves?
Kinda off topic, but that is some dope background music. First time i'm noticing. Does anyone know what it is?
Kyle Preston - Paragon
Thank you! And of course it has an even more badass name (perfection, used usually in describing 100 carats or more dimonds and the biggest flawless diamond is also named Paragon).
good keep up 🆙 👍 updates
I am a pi-hole user, looking at Next DNS given its capability for outside of the network features. Next DNS logging, is it granular like pi-hole , client names and site visited per client or will listed behind my public IP? Likewise am I able to create local DNS records and or ping by hostnames?
I did a little test with malicious/phishing links and NextDNS came first. What suprised me was that Quad9 came after Cloudflare.
10/10 - NextDNS . 05/10 - ControlID . 04/10 - Cloudflare . 02/10 - OpenDNS .00/10 - Quad9, CleanBrowsing, Adguard, DNS0.
I am using it and I block all TLDs except like 10. I do not block ads, just tracking and GAFAM and it takes care of all.
I have a separate profile for Windows/browsers - each dedicated to a single service like Google, Facebook, MS.
What about things like social media, betting, porn, piracy, etc? Do you think NextDNS would still come first in blocking these?
@@ultrasonico5709 NextDNS is definitelly the first, when it comes to blocking porn, it blocks even less known webpages, like e621 or atfbooru. Cloudflare was great, when they launched their family filter, but a week later they decimated it, because of the pressure from *** community. When blocking google, I have to allow google sometimes to be able to login because of googleapis and captcha. I have to make exceptions, because blocking scial, betting, etc works very well.
@@ultrasonico5709 Only if nipples are involved...
@@ultrasonico5709 hey ultrasonico, I don't know about the other sites but I have teenage kids and block instagram, snapchat, WhatsApp & Facebook this is the only software I've used that does a thorough job of blocking ALL domains and subdomains...
What tools are you use for the testing?
Apple AirPlay cast over WiFi to Samsung TV stop working with NextDNS, how to fix it?
How could I implement NextDNS in a company that already has a domain controller and active directory. Correct me if I'm wrong but the focus of this video is more for personal use?
Where did you get the Monero tshirt?
Would you say i could reduce the webfiltering in sophos xg and do most of them with nextdns ?
I tried almost every popular VPN like expres, Nord and also Next DNS. What should I do to use Geo Ban app (Facebook messenger). I'm from Myanmar btw.
Ok then my question is I am using AdGuard DNS and AdGuard Ad blocked premium which is best can you tell me please
I.woah I could figure out how to allow whatever ads my local weather stations app use because having it blocked on my phone makes the video clips they post not play too. Doesn't do that with any other apps
How do I connect it to PS4 for lag switching?
Do its protocols support encryption?
21:17 source for the "slow down web traffic"?, and by how much, are we talking going from 5ms to 15ms per query?,
I would be interested to see some real world data on this
also We're assuming the service just puts them in an endless list one after the other,
Imagine
maybe it has a different method, like aggregating the domains into a single list, while removing duplicates
It could even still create accurate logs as long as it created a records file at the same time when aggregating the lists into 1
As for the second issue, you already mentioned how to find out where the block came from using logs, or if you are sure the domain is safe, you would whitelist it yourself and be good to go
regarding how hard it was to track down issues with multilists, it was not hard at all, set logs to blocked only, run app having problem, watch for block, and either remove the offending blocklist (1hosts xtra) or add site to whitelist. Also during my testing, I noticed no speed difference vs a standrd dns. All of that being said, your 2 main problems with using multi list are no big deal at all, and the slower speed one was just incorrect
I recommend it
When I am using next dns my youtube history is not working
I noticed with block bypass methods turned off and do an adblock test I noticed that I get more ads compared to having it turned on. I personally turn it on and just whitelist my vpn provider.
anyone share benefits of nextdns over adguard home - especially if one was able to host the latter in personal servers?
More blocklists doesn’t hinder performance
There any new updates
Blocking Dynamic DNS Host-names is kinda upsetting, duckdns has non malicious users like me. That option could be blocking lots of self hosted personal sites & blogs -_-
Is this still Relevant? Does it work or should i change something?
Should still be relevant 👌
Thank you so much !
Android 13 support DoH only for famous DNS providers
this video doesnt explain how to setup dynamic dns, ive been trying to fu=ind out how to use and i still doont know how
Can I support you through a one time donation instead of a monthly subscription like Patreon?
Of course, tons of options on the Techlore support page: techlore.tech/support
Alright, great! Just donated $5 :)
@@Parakeet-pk6dl Thanks so much!!
I still have no idea how to connect to router
Learn.. You have access to the Internet so search and learn.
Yea I spent hours and hours to learn not all routers can be connected to nextdns like mine for example
dayum i didn't know NextDNS was this customizable, i guess bye bye Adguard DNS.
Don't bother with a company like NextDNS. Their customer support and billing support are nonexistent.
So in the act of trying to keep your network secure and private you decided to give all your DNS queries to a company you know nothing about. Why not just use Unbound, enable the DNS over TLS function and it's ad blocking feature. This way none of your information is being sent to a company you don't know is going to sell your private information and/or give it to your government.
One thing you need to know is that nextdns servers are located in Russia
Abe ghochu dns start karna kon batayega Mera bap😑