DNS-over-HTTPS setup
Your endpoint is shown on your dashboard once your instance is provisioned — a hostname unique to you, and a full URL built from it:
https://<your-token>.dns.sanctuslabs.com/dns-query
macOS / iOS
System Settings → Wi-Fi (or your active network) → DNS. Paste the full URL (with https:// and /dns-query), not just the hostname — confirmed working on current macOS.
Browsers (Firefox, Chrome, Edge)
Settings → Privacy & Security → "DNS over HTTPS" / "Secure DNS" → Custom provider. Paste the full URL. This only encrypts DNS for that browser, not the whole device.
Android
Android's built-in "Private DNS" setting (Settings → Network & internet → Private DNS) is DNS-over-TLS, a different protocol from what this service speaks (DNS-over-HTTPS) — a hostname pasted there won't work. Use a DoH-aware app instead (e.g. Intra, RethinkDNS) and paste the full URL there.
Routers
Support varies by firmware. OpenWrt (via https-dns-proxy) and AdGuard Home used as an upstream forwarder both accept a custom DoH URL directly — paste the full URL, which then filters every device on your network. Stock consumer router firmware usually doesn't support DoH at all.