NextDNS

Configurable DNS firewall with blocklists, per-device profiles and logging retention that can be disabled.

nextdns.io

KYC: light
US
Evidence and facts →

Configurable DNS firewall with blocklists, per-device profiles and logging retention that can be disabled.

Common useDNSDNSOperator dataUnknown

Identity checkslight KYCDocument check: light · identity exposure level 1/4

Evidence and riskVerified evidenceCautionMaterial claims checked against current sources.; those sources show trade-offs worth reading.

Last reviewedReviewed 27 Aug 2026KYC checked 27 Aug 2026 · inferred jurisdiction · Source → official siteHow to cite this pageSource coverageVerified evidenceRecorded riskCaution

Evidence and facts

CUNICULA SCORE 4.0

50/100Reviewed evidencePrivacy 18/25 · Control 7/20 · Transparency 1/20 · Security 17/25 · Accountability 7/10 · Cap 69 · Method

JURISDICTIONUS

CAUTIONUS-incorporated DNS resolver. Logs and analytics are configurable from no-logs to long retention; disable logging for privacy-sensitive use.

AUDITED BYNo audit listed

OPERATOR DATAUnknown

SOURCE COVERAGE

Verified evidenceSELF-REPORTED5/5Reviewed 27 Aug 2026 · Source → official site

LAST CHECKED2026-08-27

LAST UPDATED2026-08-27

Specs

DOCUMENT CHECKlight

IDENTITY EXPOSURELevel 1/4

KYC TRIGGERSNo document KYC found. No signup is required to try the resolver, but paid/custom profiles create account, payment and optional DNS-log metadata controlled by the user.

FEEFree 300k queries/mo / $1.99/mo

CATEGORIESDNS

FEATURESFully configurable, DNS over HTTPS, DNS over TLS, QUIC support, Ad + tracker blocking, Per-device profiles, Crypto payment

TORNot listed

REGIONSGlobal availability

Review analysis, source material, related services, and history

Analysis

OVERVIEW

NextDNS is a configurable DNS firewall offering DoH, DoT and DoQ with per-device blocklists and analytics, usable without signup for a trial and payable by card, PayPal or cryptocurrency.

LIMITS

The resolver is US-incorporated and therefore Five Eyes jurisdiction, and logging ranges from no-logs to long retention depending on configuration, so privacy-sensitive use depends on actively disabling logs rather than a fixed default.

USEFUL FOR

People wanting granular per-device DNS filtering who actively configure logging off, given the US jurisdiction and configurable retention.

Sources · reviewed 2026-07-16

NextDNS ↗

Corporate identity

Registry-sourced, not audited. The facts below come from cited web research rather than a direct registry query. Each claim links its own source.

LEGAL ENTITY: NextDNS Inc.source ↗
INCORPORATED IN: Delaware, United Statessource ↗
INCORPORATED ON: May 2019source ↗
REGISTERED ADDRESS: 2810 N Church St PMB 73778, Wilmington DE 19802-4447, United Statessource ↗

Registry research · reviewed 2026-08-08

Frequently Asked Questions

Is identity verification required?

The recorded KYC level is "light". No document KYC found. No signup is required to try the resolver, but paid/custom profiles create account, payment and optional DNS-log metadata controlled by the user.

Which payment methods are accepted?

Please check the provider site for accepted payment methods.

Where is it available?

Recorded availability: GLOBAL.

Is the operator based in a Five Eyes country?

Yes. The recorded jurisdiction is US, a Five Eyes country (US, UK, CA, AU, NZ). This is jurisdiction context and does not by itself establish that a service is safer or less safe.

How are identity, operator, and evidence fields reported?

Identity exposure is level 1 of 4. Hosted operator data has not been established. Jurisdiction is shown as context, not a safety verdict. Source coverage is verified evidence, last reviewed 2026-08-27, and recorded risk is caution.

Related Services

Mullvad DNSmullvad.netmullvad.net · DNS · SE

Public DNS closes November 2, 2026; migrate settings.

Cunicula scoreNot ratedSource coverageCurrent Zero KYC

About Visit ↗

Quad9quad9.netquad9.net · DNS · CH

Swiss public DNS with malware blocking.

Cunicula score37/100Source coverageCurrent Zero KYCCaution

About Visit ↗

Compare

Compare withMullvad DNSKYC, privacy, evidence, risk, fees, limits, jurisdiction, audits, and features.

Compare withQuad9KYC, privacy, evidence, risk, fees, limits, jurisdiction, audits, and features.

Sources and history

Terms and privacy policy

No changes to the document we watch since we started checking on 9 Aug 2026. Last checked 9 Aug 2026.

Service history

Latest meaningful changes to the facts shown on this provider page.

9 Aug 2026
Corporate registry information updated
Corporate / Entity type
8 Aug 2026
Corporate registry information updated
Corporate
6 Aug 2026
Provider presentation updated
Best for, Evidence status, Recorded risk, Tagline, and 1 more

Full service history

27 Aug 2026updated
Reconcile score 4.0 evidence
Changed at
not set2026-08-27
Checked at
2026-06-242026-08-27
KYC last checked
2026-06-222026-08-27
Last reviewed
2026-06-222026-08-27
Source reviewed
official sitePrimary-source review 2026-08-27
Score review
not setOutcome: PASS; Checked at: 2026-08-27; Inputs: Operator data exposure: limited; Control model: hosted-account; Source model: closed; Audit: Score eligible: no; Reason: No dated, scoped independent audit of the score-critical core was evidenced in the reopened first-party source family.
Updated at
2026-06-222026-08-27
Review source: official site · public history entry
26 Aug 2026updated
Apply full-service rereview and score 4.0
Score assessment
not setOperator data exposure: limited; Control model: hosted-account; Source model: closed
Review source: official site · public history entry
9 Aug 2026updated
Corporate registry information updated
Corporate / Entity type
not setcompany
Review source: official site · public history entry
8 Aug 2026updated
Corporate registry information updated
Corporate
not setLegal entity: NextDNS Inc.; Incorporation jurisdiction: Delaware, United States; Incorporation date: May 2019; Registered address: 2810 N Church St PMB 73778, Wilmington DE 19802-4447, United States; Officers: none; Prior entities: none
Review source: official site · public history entry
8 Aug 2026updated
Provider summary rewritten
Description
Configurable private DNS firewall with DoH/DoT/DoQ, blocklists, analytics and per-device profiles. It works without signup for trial use; paid plans accept cards, PayPal and cryptocurrency, and logging retention can be disabled or configured.Configurable DNS firewall with blocklists, per-device profiles and logging retention that can be disabled.
Review source: official site · public history entry
7 Aug 2026updated
Provider summary rewritten
Card summary
not setConfigurable private DNS firewall.
Review source: official site · public history entry
6 Aug 2026updated
Provider presentation updated
Best for
General usagenot set
Evidence status
not setverified
Recorded risk
not setcaution
Tagline
A privacy-preserving tool offering genuine utility.not set
Trust level
cautionnot set
Review source: official site · public history entry
24 Jun 2026updated
Provider facts reviewed and updated
Checked at
2026-06-222026-06-24
Review source: official site · public history entry
23 Jun 2026updated
Provider facts reviewed and updated
Checked at
2026-03-082026-06-22
Description
Highly configurable private DNS. Per-device blocklists, DoH/DoT/QUIC. Free tier 300k queries/mo. Accepts crypto. (Light KYC)Configurable private DNS firewall with DoH/DoT/DoQ, blocklists, analytics and per-device profiles. It works without signup for trial use; paid plans accept cards, PayPal and cryptocurrency, and logging retention can be disabled or configured.
KYC last checked
2026-03-082026-06-22
KYC level
21
Kyc note
Expect unexpected KYC triggers for withdrawals above arbitrary risk thresholds.No document KYC found. No signup is required to try the resolver, but paid/custom profiles create account, payment and optional DNS-log metadata controlled by the user.
Last reviewed
2026-03-082026-06-22
Privacy warning
Five Eyes JurisdictionUS-incorporated DNS resolver. Logs and analytics are configurable from no-logs to long retention; disable logging for privacy-sensitive use.
Source reviewed
older source, not independently verifiedofficial site
Tagline
A custodial or semi-custodial financial service.A privacy-preserving tool offering genuine utility.
Updated at
2026-03-132026-06-22
Review source: official site · public history entry
22 Jun 2026updated
Ship trust audit remediation pass
Jurisdiction confidence
not setinferred
KYC last checked
not set2026-03-08
Last reviewed
not set2026-03-08
Source reviewed
not setolder source, not independently verified
Review source: older source, not independently verified · public history entry
7 Apr 2026updated
Drop warrantCanary trust signal
Warrant canary
nonot set
Review source: source not recorded · public history entry
29 Mar 2026updated
KYC risk level system + advanced directory filters
KYC level
partial2
Review source: source not recorded · public history entry
14 Mar 2026updated
Offline status bug, vetted grid, news/projects img tags
Status
liveok
Review source: source not recorded · public history entry
14 Mar 2026updated
Provider presentation updated
Updated at
not set2026-03-13
Votes
0not set
Review source: source not recorded · public history entry
10 Mar 2026updated
Provider facts reviewed and updated
Best for
not setGeneral usage
Kyc note
not setExpect unexpected KYC triggers for withdrawals above arbitrary risk thresholds.
Privacy warning
not setFive Eyes Jurisdiction
Tagline
not setA custodial or semi-custodial financial service.
Review source: source not recorded · public history entry
9 Mar 2026updated
Social links re-verified
Twitter
https://x.com/NextDNShttps://x.com/nextdns
Review source: source not recorded · public history entry
8 Mar 2026updated
Social links re-verified
Telegram
https://t.me/nextdnsnot set
Review source: source not recorded · public history entry
8 Mar 2026updated
Social links re-verified
Telegram
not sethttps://t.me/nextdns
Review source: source not recorded · public history entry
8 Mar 2026updated
Social links re-verified
Telegram
https://t.me/nextdnsnot set
Twitter
https://x.com/nextdnshttps://x.com/NextDNS
Review source: source not recorded · public history entry
8 Mar 2026updated
Social links re-verified
Telegram
not sethttps://t.me/nextdns
Twitter
not sethttps://x.com/nextdns
Review source: source not recorded · public history entry
8 Mar 2026updated
Provider presentation updated
Audited by
not setnone
Jurisdiction
not setUS
Trust level
not setcaution
Warrant canary
not setno
Review source: source not recorded · public history entry
8 Mar 2026created
Provider facts reviewed and updated
Provider profile
not setcreated
Review source: source not recorded · public history entry

Only fields shown on the provider page are tracked. Private identifiers are never published.

Evidence basis: Claims on this page are linked to published sources for comparison, not certification, audit, endorsement, or recommendation; read the methodology and coverage map before relying on an entry.