Network security is not achieved by changing a single setting, but through a combination of consistent practices and well-designed technical controls.

Brave and DNS filtering provide a strong baseline: the browser is built to minimise tracking and block data collection by advertising networks. When Brave is combined with a secure, protection-focused DNS resolver such as Quad9, users gain an additional layer of defence that blocks known malicious domains before the browser even attempts to load them.

Why DNS protection complements the browser?

A browser alone cannot detect all malicious domains, especially newly created or rapidly changing ones. DNS queries always leave the browser and pass through external infrastructure, which makes it possible to add intelligent filtering at this stage. The DNS service translates a domain name—such as savelan.fi—into its corresponding IP address, for example 31.217.196.214. Because this resolution happens outside the browser, a protection-focused resolver like Quad9 can block harmful domains before the connection is ever established. This makes Quad9 an excellent additional layer of defence.

Quad9: Protection at the DNS level

Quad9 uses an extensive global threat-intelligence network that continuously gathers data on malicious domains. When a device sends a DNS query to access a site, Quad9 checks the requested domain against its threat databases. If the domain is flagged as dangerous—such as phishing, malware, or botnet activity—the connection is blocked before any communication is established.

Quad9 is a non-profit organisation with strong industry partnerships, including IBM.

Setting up Quad9 DNS in the Brave browser

Open the Brave browser’s settings by clicking the menu in the top-right corner and selecting Settings.

Next, go to Privacy and security and then select Security.

The final step is to add the DNS server address:
https://dns.quad9.net/dns-query

Setting up Quad9 DNS on a device or router

The DNS server addresses are:

IPv4:

9.9.9.9
149.112.112.112

Setting it up on a computer

Open your network connection settings.
Go to the section where DNS addresses are configured.
Replace the existing DNS addresses with Quad9’s servers.
Save the changes and refresh the connection.

Setting it up on a router

Log in to your router’s administration interface.
Look for a section named Internet, WAN, or DNS.
“Enter Quad9’s addresses as the primary and secondary DNS servers.
If available, enable secure DNS transport such as DNS-over-TLS or DNS-over-HTTPS.
Save the settings and restart the router.

A change made at the router level protects the entire home network at once.

Brave + Quad9: A combined protection model

While Brave’s built-in protections block tracking and low-quality content, Quad9 stops malicious domains at the DNS level. Together, they create a three-layered defence:

DNS-level filtering – malicious sites never load.
Browser-level blocking – scripts, tracking mechanisms, and untrusted elements are blocked.
HTTPS enforcement and private browsing mode – prevents traffic manipulation and reduces traceability.

Practical tips for safe browsing

Check the address bar before entering any information.
Update your browser and operating system regularly.
Use two-factor authentication for online services.

Which organisation produces the QUAD9 service?

Quad9 is a non-profit, public-benefit DNS resolver that automatically blocks access to domains known to be malicious before the webpage even begins to load.

The service functions as a recursive DNS resolver through which all DNS queries required for internet traffic can be routed securely and with respect for user privacy. Quad9 does not store personal identifying information nor use it for marketing or profiling; instead, it focuses solely on providing security and privacy protection across all devices and operating environments.

Quad9 is supported by a broad, independent network of partners that provide both technical infrastructure and threat-intelligence sources. Its founders and key contributors include:

Global Cyber Alliance (GCA) – an international non-profit organisation dedicated to developing and promoting best practices and technologies in cybersecurity, including the Quad9 service. GCA | Global Cyber Alliance
Packet Clearing House (PCH) – an organisation that provides the global DNS infrastructure and network resources used by Quad9’s servers and resolution system. Quad9
IBM Security – IBM was one of Quad9’s original partners, providing threat-intelligence analysis and support for the service, including data from its X-Force threat database. STT Info

Together, these organisations make Quad9 not only technically robust but also a trustworthy and globally scalable DNS security solution that protects users from malware, phishing, and other online threats—without commercial interests or compromising privacy.

Need help improving your company’s cybersecurity? We’re here to help – Give us a call