Protected in about a minute.
Pick your device below. Your dashboard at my.korushield.com generates a personal, encrypted setup for each device, so protection follows you at home and on the go.
iPhone and iPad
One-tap configuration profile, installed in seconds.
See stepsAndroid
Use a compatible DoH profile or client. Android Private DNS uses DoT.
See stepsMac
System-wide protection from your menu bar settings.
See stepsWindows
Encrypted DNS in Settings, no extra software.
See stepsLinux
systemd-resolved configuration for most distros.
See stepsRouter
Cover the whole home network at once, on supported routers.
See stepsYour personal endpoint. Every guide below uses the personal DNS address shown in your dashboard. It is unique to you, which is how Koru Shield applies your profiles and shows your stats. Our public endpoint is us.korushield.com, which routes you automatically to the fastest server.
Easiest
iPhone and iPad
Install a configuration profile. About 30 seconds, and it survives reboots and network changes.
- Sign in at my.korushield.com and open Devices, then Add device.
- Choose iPhone or iPad and tap Download profile.
- Open Settings. You will see Profile Downloaded near the top, tap it, then Install.
- Enter your passcode if asked and confirm the install. Done: a VPN-style icon is not needed, DNS filtering runs silently.
Guided
Android
Android Private DNS uses DNS-over-TLS, which Koru Shield does not offer. Use a compatible DoH app or profile.
- Sign in at my.korushield.com and open Devices, then Add device.
- Follow the Android walkthrough in your dashboard, which shows the exact screens for your phone maker (Samsung, Pixel, and others differ slightly).
- Use a compatible DNS-over-HTTPS client or profile and enter the personal DoH endpoint from your dashboard. Android Private DNS is DoT, so it is not a Koru Shield setup method.
- Open a browser and visit any site to confirm pages load, then run the protection check on our homepage.
About a minute
Mac
System-wide protection for every browser and app.
- Sign in at my.korushield.com and open Devices, then Add device.
- Download the macOS configuration profile and double-click it.
- Open System Settings, go to Privacy and Security, then Profiles, and install the Koru Shield profile.
- Protection is now active on Wi-Fi and Ethernet, at home and on the road.
About a minute
Windows
Encrypted DNS straight from Windows Settings. No extra software.
- Sign in at my.korushield.com and open Devices, then Add device, to get your personal DNS address.
- Open Settings, then Network and Internet, then Wi-Fi or Ethernet, and open your connection properties.
- Under DNS server assignment, choose Manual, turn on IPv4, and enter your personal Koru Shield address.
- Set DNS over HTTPS to On (strict) so lookups stay encrypted. Save and browse normally.
For tinkerers
Linux
Works with systemd-resolved, which ships on Ubuntu, Fedora, Debian, and most modern distros.
- Sign in at my.korushield.com and open Devices, then Add device, to get your personal DNS address.
- Your dashboard shows the exact
resolved.confsnippet for your address. Copy it. - Apply it with
sudo systemctl restart systemd-resolvedand confirm withresolvectl status.
DoH-capable routers
Router
Cover every device on your Wi-Fi at once, including smart TVs and consoles.
- Koru Shield is encrypted-DNS only, so router setup needs a router that supports DNS-over-HTTPS (many Asus, Netgear, and OpenWrt-based routers do).
- In your router admin page, find the DNS-over-HTTPS setting and enter your personal address from the dashboard.
- Per-device setup above is the most reliable path. Native router integrations are on the roadmap.
Why encrypted only? Koru Shield refuses plain, unencrypted DNS on purpose. Unencrypted lookups can be seen and tampered with on the network, which defeats the point of protection. Every guide above sets up the encrypted path.
Not set up yet?
Get started, grab your personal DNS address, and protect your first device in about a minute.