How to Configure Static IP and DoH in Windows 11

Configuring a static IP address ensures your Windows 11 PC maintains a fixed address on your local network, while enabling DNS over HTTPS (DoH) encrypts your domain lookup requests for enhanced privacy and security. This guide provides a straightforward walkthrough on how to assign a static IP address and enable encrypted DNS using native Windows 11 settings.

How to Set a Static IP Address in Windows 11

  1. Open Network Settings: Press Windows Key + I to open Settings, then click on Network & internet in the left sidebar.
  2. Select Your Connection: Click on either Ethernet or Wi-Fi (depending on your active connection). If using Wi-Fi, click on Manage known networks and select your current network.
  3. Edit IP Settings: Scroll to IP assignment and click the Edit button next to it.
  4. Switch to Manual: Change the dropdown menu from Automatic (DHCP) to Manual.
  5. Enable IPv4: Toggle the IPv4 switch to On.
  6. Enter IP Details:
    • IP address: Enter the desired static IP address (e.g., 192.168.1.150).
    • Subnet prefix length: Enter 24 for a standard 255.255.255.0 subnet mask.
    • Gateway: Enter your router’s IP address (e.g., 192.168.1.1).
  7. Save Changes: Click Save to apply the static IP configuration.

How to Configure DNS over HTTPS (DoH) in Windows 11

  1. Open Connection Properties: Navigate back to Settings > Network & internet > Ethernet (or Wi-Fi).
  2. Edit DNS Settings: Scroll to DNS server assignment and click Edit.
  3. Set to Manual: Select Manual from the dropdown menu, then toggle IPv4 to On.
  4. Enter DNS Providers Supporting DoH:
    • Preferred DNS: Enter a DoH-compatible DNS provider IP:
      • Cloudflare: 1.1.1.1 (Alternate: 1.0.0.1)
      • Google: 8.8.8.8 (Alternate: 8.8.4.4)
      • Quad9: 9.9.9.9 (Alternate: 149.112.112.112)
  5. Enable Encryption:
    • Under Preferred DNS encryption, select Encrypted only (DNS over HTTPS).
    • Repeat the process for the Alternate DNS and set its encryption to Encrypted only (DNS over HTTPS).
  6. Save Changes: Click Save.

Your network connection is now configured with a dedicated static IP address and all outgoing DNS queries are fully encrypted using DNS over HTTPS.