DNS Resolver
Pick an upstream resolver, toggle DNS over HTTPS, or set one custom DNS.
What does the DNS resolver setting do?
After Lava filters a domain locally on your iPhone, the rest of your lookups still need a resolver to answer them, and the DNS resolver setting lets you pick which upstream provider handles that. Open DNS Resolver to choose the provider; the active resolver is also shown on Guard.
Can I use my own custom DNS?
Yes. Setting one custom DNS is part of Lava Security Plus, the optional upgrade; in DNS Resolver you enter a single DNS IP or URL, since keeping it to one value avoids ambiguous mixed entries and keeps validation predictable. Whichever resolver you configure processes your DNS queries according to its own policies.
What is DNS over HTTPS here?
DNS over HTTPS (DoH) is a toggle in DNS Resolver that sends your lookups to the chosen upstream resolver over an encrypted HTTPS connection, and the visible resolver address changes when you turn it on or off. It applies to the upstream provider after Lava has already filtered domains locally on your device.
Does choosing a resolver send my browsing to Lava?
No. Domain filtering and DNS decisions happen locally on your iPhone, and Lava Security does not receive your routine browsing history; you can review recent decisions saved on the device in Activity. Whichever upstream resolver you select still processes your DNS queries under its own policies. (The app does separately fetch catalog and safety-guardrail update data from Lava servers, which is not used as a browsing-history feed.)
Where do I find the DNS resolver setting?
Go to Settings and open DNS Resolver to pick a provider, toggle DNS over HTTPS, or enter a custom DNS. If something still does not look right, email support@lavasecurity.app with your app version, iOS version, and device model.