Get On Cutline

Configure your device to use Cutline's encrypted DNS resolvers. For the shortest path, use the one-tap setup below. Manual DNS addresses:

64.176.200.99149.28.79.49

Encrypted DNS (One-Tap Setup)

Cutline now supports DNS-over-HTTPS (DoH) and DNS-over-TLS (DoT). These encrypt your DNS queries end-to-end.

📱 iPhone, iPad, and Mac

Download and install the configuration profile for one-tap encrypted DNS setup. Works on iOS/iPadOS 14+ and macOS 11+.

⚠️ iCloud Private Relay: If Private Relay is on, Apple bypasses Cutline DNS entirely and the cut will not work. Turn Private Relay off: Settings → [your name] → iCloud → Private Relay → Off.
  1. Open this page in Safari (profiles only work in Safari)
  2. Tap the button below to download the profile
  3. Go to Settings → Profile Downloaded → Install
  4. Enter your passcode and tap Install
  5. The install screen should show Verified
Download Cutline DNS Profile

Signed profile. Removable anytime from Settings → General → VPN & Device Management. Not MDM, not a content filter. Configures DoH for all networks, including cellular data.

Mac users: If a previous install failed, delete any leftover "Downloaded" profile in System Settings → General → Device Management, then download again.

🤖 Android phone and tablet

Android 9+ has built-in encrypted DNS support.

  1. Open Settings
  2. Go to Network & internet
  3. Tap Private DNS
  4. Select Private DNS provider hostname
  5. Enter: dns.thecutline.org
  6. Tap Save

This configures DNS-over-TLS (DoT) system-wide, including mobile data.

🪟 Windows

Get Cutline DNS from the Microsoft Store. Same installer as the direct download. Requires Administrator.

  1. Open the Microsoft Store listing using the button below
  2. Click Get
  3. Approve the UAC prompt (User Account Control)
  4. Wait while it configures all network adapters
Get on Microsoft Store

Or just download it here: Direct download link. The installer is signed. SmartScreen may show a warning while the publisher builds reputation. If blocked, click More info → Run anyway. Works on Windows 10 and 11.

To uninstall: Settings → Apps → Cutline DNS → Uninstall

Technical Details

DoH Endpoint:
https://dns.thecutline.org/dns-query
(application/dns-message)
DoT Endpoint:
dns.thecutline.org:853
TLS, SAN dns.thecutline.org
IP Addresses:
64.176.200.99
149.28.79.49

Router (Whole Network)

Setting DNS on your router applies the cut path to all devices on your network.Note: Some ISPs lock router DNS settings. If you cannot change DNS, configure individual devices instead.

  1. Open your router's admin panel (usually http://192.168.1.1 or http://192.168.0.1)
  2. Log in with your router credentials
  3. Find the DNS settings (often under "Internet", "WAN", or "DHCP")
  4. Set Primary DNS to 64.176.200.99
  5. Set Secondary DNS to 149.28.79.49
  6. Save and reboot the router
  7. Restart devices or renew DHCP to pick up new DNS

macOS

  1. Open System Settings
  2. Click Network
  3. Select your active connection (Wi-Fi or Ethernet)
  4. Click Details
  5. Go to the DNS tab
  6. Click the + button to add DNS servers
  7. Add 64.176.200.99 and 149.28.79.49
  8. Remove any other DNS servers
  9. Click OK, then Apply

iPhone/iPad

Recommended: Use the Apple Configuration Profile above for encrypted DNS on all networks, including cellular.

Alternative (Wi-Fi only, unencrypted): Configure DNS manually for a specific Wi-Fi network.

  1. Open Settings
  2. Tap Wi-Fi
  3. Tap the ⓘ next to your connected network
  4. Scroll down and tap Configure DNS
  5. Tap Manual
  6. Remove existing servers (swipe left and delete)
  7. Tap Add Server and enter 64.176.200.99
  8. Tap Add Server and enter 149.28.79.49
  9. Tap Save

Windows 10/11

Recommended: Use the Microsoft Store or one-click installer above for encrypted DNS (DoH) with proper configuration. It covers all network adapters, disables IPv6 to prevent leaks, and automatically configures new adapters when you connect to a new network.

Alternative (unencrypted): Manually configure DNS servers.

  1. Open Settings
  2. Go to Network & Internet
  3. Click your connection type (Wi-Fi or Ethernet)
  4. Click the network name or Properties
  5. Scroll down and click Edit under IP assignment or DNS
  6. Change DNS to Manual
  7. Turn on IPv4
  8. Set Preferred DNS to 64.176.200.99
  9. Set Alternate DNS to 149.28.79.49
  10. Click Save

Note: Manual configuration only affects the current adapter. The one-click installer handles all adapters and prevents IPv6 leaks automatically.

Android

Recommended: Use Private DNS (DoT) above for encrypted DNS on all networks, including mobile data.

Alternative (Wi-Fi only, unencrypted): Manually configure DNS for a specific Wi-Fi network.

  1. Open Settings
  2. Tap Network & Internet or Connections
  3. Tap Wi-Fi
  4. Long-press or tap the gear icon for your connected network
  5. Tap Modify or Manage network settings
  6. Expand Advanced options
  7. Change IP settings to Static
  8. Scroll to DNS fields
  9. Set DNS 1 to 64.176.200.99
  10. Set DNS 2 to 149.28.79.49
  11. Tap Save

Note: Steps may vary by Android version and manufacturer.

Next: Verify It Works

After configuring DNS, test that you're using the cut path.

How to Verify →