Protect phones and laptops anywhere (Android, iPhone, Mac, Windows 11)

What it is and when to use it

Staff phones, work-from-home laptops and call-centre agents working from home are not behind your office router, so the office setting does not cover them. Instead, each device gets its own private ZDNS address, such as k7m2qpx9ra.dns.zdns.co.za. Once it is set up, protection follows that device everywhere: home Wi-Fi, mobile data, hotels and abroad. Filtering, reports and blocking work exactly as they do for the office, and the device shows up as part of your account. Protecting an office router instead? Use the office setup guide.

Get your device address

1. Log in to your ZDNS dashboard and find the card called Phones & laptops away from the office.
2. Type a label for the device (for example "Thandi's phone") and click Add device.
3. The dashboard shows that device's private address, a 10-character code followed by .dns.zdns.co.za. In the steps below, replace YOUR-ADDRESS with that address.

You can add up to 2 devices per seat, and at least 5 per account. Each address is for one device only, so give every phone and laptop its own. If a phone is lost or someone leaves, click Remove next to the device and that address stops working straight away.

Android phones and tablets (Android 9 and newer)

1. Open Settings → Network & internet (or Connections) → Private DNS.
   On Samsung: Settings → Connections → More connection settings → Private DNS.
2. Choose Private DNS provider hostname.
3. Type or paste your device's address, for example:
   k7m2qpx9ra.dns.zdns.co.za
   Do not type https:// and do not add a slash.
4. Tap Save.

iPhone and iPad

1. Open the ZDNS dashboard on that iPhone or iPad and tap download the profile next to the device.
2. Open Settings → Profile Downloaded (or General → VPN & Device Management).
3. Tap the profile, which is named ZDNS protection - <label>, then tap Install and confirm.

The profile uses DNS over HTTPS with that device's address.

Mac

1. Open the ZDNS dashboard on that Mac and click download the profile next to the device.
2. Open System Settings → Privacy & Security → Profiles.
3. Double-click the ZDNS protection - <label> profile and click Install.

The profile uses DNS over HTTPS with that device's address.

Windows 11

1. Open Settings → Network & internet and click your connection (Wi-Fi or Ethernet).
2. Click Hardware properties, then next to DNS server assignment click Edit.
3. Change Automatic (DHCP) to Manual and switch IPv4 on.
4. Set Preferred DNS to 139.84.251.222.
5. Set DNS over HTTPS to On (manual template) and enter:
   https://YOUR-ADDRESS/dns-query
   For example https://k7m2qpx9ra.dns.zdns.co.za/dns-query
6. Click Save.

Check it is working

Open the dashboard on the device and click Test my protection. It also works on mobile data once the device is set up. The dashboard may tell you that the address you are browsing from is not your office address. On a protected device away from the office that is expected, and you should not change your office address.

If something goes wrong

If Private DNS is set on an Android phone and the phone cannot reach ZDNS, Android shows "No internet" or "Private DNS server cannot be accessed" until it can. This happens, for example, on a hotel Wi-Fi that shows a login page first.

1. Set Private DNS to Automatic. Normal internet comes back immediately.
2. Open the Wi-Fi login page and sign in.
3. Switch Private DNS back to your device's address.

Removing a device, or when someone leaves

Open the Phones & laptops away from the office card on the dashboard and click Remove next to the device. That address stops working straight away, so a lost phone or a former staff member's laptop is no longer protected by your account. Remove the profile or Private DNS setting from the device as well, or the device will lose normal internet access when you remove its address. You can then add a new device with its own address.