How to Enable DoH on MikroTik Routers

5 min

the dns over https (doh) feature allows you to encrypt dns requests, improving both security and privacy while browsing follow the steps below to enable doh on mikrotik routers using flashstart servers 1 1 connect to the router access your mikrotik router using winbox or the web interface 2 2 open the console (new terminal) once connected, open the mikrotik terminal from the main menu ( new terminal ) 3 3 download and import the flashstart root ca type the following commands to download and install the root certificate /tool fetch url=https //download flashstart com/fs rootca/fs rootca pem /certificate import file name=fs rootca pem these commands download the flashstart root ca and import it into the system, ensuring proper doh certificate verification 4 4 enable dns over https (doh) enable doh by specifying the flashstart server and requesting certificate verification /ip dns set use doh server=https //doh flashstart com/123456 verify doh cert=yes note replace 123456 with your flashstart customer code 5 5 verify operation check that the router is correctly using doh by running /ip dns print make sure the use doh server field is correctly set to https //doh flashstart com/ tip if you are using a multi wan configuration or a local dns setup , ensure that your firewall or nat rules allow https traffic (port 443) to the domain doh flashstart com other ways to ask enabling doh on mikrotik routers doh configuration guide for mikrotik routers