Learn how to install the dnscrypt proxy application with an adblocker/malware blocker on Linux with WireGuard or OpenVPN in this nixCraft tutorial.

DNSCrypt is a protocol to authenticate and encrypt DNS traffic between your device and recursive name servers such as Google, Cloudflare, ISP/3rd party servers, or your own DoH server based upon Nginx+Bind9. The dnscrypt-proxy is a free and open-source application supporting protocols such as DNSCrypt v2 and DNS-over-HTTPS (DoH). It also prevents DNS spoofing. It uses cryptographic signatures to verify that responses originate from the chosen DNS resolver and haven’t been tampered with.

Free and DNSCrypt-enabled resolvers are available all over the world including DoH enabled resolvers. In other words, we use dnscrypt-proxy for securing communications between a client and a DNS resolver.