---
title: How to Enable DoH on MikroTik Routers
slug: legacy/how-to-enable-doh-on-mikrotik-routers
description: Enhance your network security by learning how to block incoming DNS service connections on port 53 to mitigate cyber threats like DDoS attacks. 
docTags: 
createdAt: 2024-02-05T13:02:30.029Z
---

The **DNS over HTTPS (DoH)** feature allows you to encrypt DNS requests, improving both security and privacy while browsing.
 Follow the steps below to enable DoH on **MikroTik routers** using Platform servers.

## Connect to the Router

Access your **MikroTik router** using **WinBox** or the **web interface**.

## Open the Console (New Terminal)

Once connected, open the MikroTik terminal from the main menu (**New Terminal**).

## Download and Import the Root CA

Type the following commands to download and install the root certificate:

:::BlockQuote
/tool fetch url=[link](https://download.flashstart.com/fs_rootca/fs_rootca.pem)
/certificate import file-name=fs\_rootca.pem
:::

These commands download the** Root CA** and import it into the system, ensuring proper DoH certificate verification.

## Enable DNS over HTTPS (DoH)

Enable DoH by specifying the server and requesting certificate verification:

:::BlockQuote
/ip dns set use-doh-server=[link](https://doh.flashstart.com/123456) verify-doh-cert=yes
:::

**Note:** Replace 123456 with the **DoH code **visibile from your Dashboard (Network/DoH DoT menu).

## Verify Operation

Check that the router is correctly using DoH by running:

:::BlockQuote
/ip dns print
:::

Make sure the use-doh-server field is correctly set to [link](https://doh.flashstart.com/....)

## Tip

If you are using a **multi-WAN configuration** or a **local DNS setup**, ensure that your firewall or NAT rules allow HTTPS traffic (port 443) to the domain [link](https://doh.flashstart.com).

**Other ways to ask**:

- Enabling DoH on MikroTik Routers 
- DoH Configuration Guide for MikroTik Routers