Check this page: DNSCrypt - Download clients and servers for DoH and DNSCrypt.
In a nutshell my recommendations are the following:
- Windows: https://simplednscrypt.org/
- iOS: https://itunes.apple.com/us/app/dnscloak-dnscrypt-client/id1452162351
- Android: Haven't tried any of them but RethinkDNS and TrustDNS seem all right.
- OpenWRT: the new dnscrypt-proxy2 package like in these instructions. You can configure the /etc/dnscrypt-proxy2/dnscrypt-proxy.toml file later.
- Home networks. If you don't want or don't have pihole, pick dnscrypt-proxy for your platform and install it: Releases · DNSCrypt/dnscrypt-proxy (github.com)
- If you do have a pihole, do the same. One example instruction is here: DNS with Pi-Hole + DNSCrypt (sean-wright.com)
Service comparison
| Service | Status | DNS | No Logs | DNSSEC | Price |
|---|---|---|---|---|---|
| dnscrypt.pl | Works | not filtered | Yes | Yes | free! |
| dnscrypt.pl-guardian | Unofficial yet | 6 block lists ~380k domains Current count |
Yes | Yes | free! |
| soltysiak | Legacy | filtered | Yes | Yes | free! |
Addresses and ports
| Service | DNS | Address:Port | Provider Name |
|-------------|:------:|:-------------:|:-------------:|:-------------:|
| dnscrypt.pl | poz1.dnscrypt.pl | 178.216.201.128:2053 | 2.dnscrypt-cert.dnscrypt.pl |
| dnscrypt.pl-guardian | poz1.dnscrypt.pl | 178.216.201.128:2054 | 2.dnscrypt-cert.dnscrypt.pl |
| soltysiak | dc1.soltysiak.com | 178.216.201.222:2053 | 2.dnscrypt-cert.soltysiak.com |
Public Key for poz1.dnscrypt.pl
7F61:7CB8:1EA5:53D2:34C4:9BC2:79C7:4F7B:5498:050D:1DBF:111A:FEE6:9963:C647:A169
Public Key for soltysak.com
25C4:E188:2915:4697:8F9C:2BBD:B6A7:AFA4:01ED:A051:0508:5D53:03E7:1928:C066:8F21