Encrypted DNS

Encrypted DNS is the official Estonian government app from the Riigi Infosüsteemi Amet (RIA) that protects your phone's DNS traffic.

Every domain your phone looks up normally travels in plain sight to your operator's DNS servers. Encrypted DNS routes those lookups through the national CERT-EE resolver (dns.cert.ee) over an encrypted DNS-over-TLS or DNS-over-HTTPS connection — and blocks known malicious domains using CERT-EE threat intelligence.

What it does

• Encrypts all DNS traffic (DoT or DoH — your choice)

• Blocks known malicious and phishing domains (CERT-EE security feed)

• Shows honest, real-time protection status, including VPN and Private DNS coexistence guidance

• Lets you verify that filtering is really active

• Works alongside other VPN apps, with clear guidance

What it does NOT do

• Does not route or monitor any traffic other than DNS

• Does not hide your IP address

• Does not log your DNS queries

• No accounts, no ads, no tracking — free of charge

On Android, protection runs through a DNS-only VPN, visible as a system VPN with a persistent notification. Android's system Private DNS is also supported: set it to dns.cert.ee and the app detects it automatically.

While protection is on, the app shows your external IP address so you can verify the connection. It is displayed on screen only — never stored, logged or shared.

User interface: Estonian and English.

Publisher: Riigi Infosüsteemi Amet (RIA) / CERT-EE.