View source for How to Add Mechtrace VPN onto various devices

[[File:Mechtrace VPN.png|alt=Mechtrace VPN|thumb|Mechtrace VPN]]
= MechTrace DNS — VPN & Device Setup Guide =

This page explains how to connect a device to '''MechTrace DNS''' and, optionally, how to route that connection through a VPN. It covers '''Windows''', '''macOS (OSX)''', '''iOS''' (DNS Override), and '''Android'''.

You can point a device at MechTrace DNS directly (plain DNS or encrypted DNS), and/or use a VPN client such as WireGuard to connect devices to the MechTrace network remotely. Using a VPN is optional but recommended for off-network or remote devices, since it lets you reach MechTrace DNS securely from anywhere, not just from a network that already routes to it.

== MechTrace DNS reference values ==

Keep this table handy — every section below refers back to it.
<div align="center">
{| class="wikitable"
|-
! Type !! Field !! Value
|-
| rowspan="2" | Unfiltered || Primary DNS || <code>103.213.208.45</code>
|-
| Secondary DNS || <code>45.112.32.194</code>
|-
| rowspan="2" | Filtered (malware & adult content blocked) || Primary DNS || <code>103.213.208.46</code>
|-
| Secondary DNS || <code>45.112.32.195</code>
|-
| rowspan="3" | Encrypted DNS (adblocker.mechtrace.com) || DoH || <code>h3://adblocker.mechtrace.com</code>
|-
| Secure DoH || <code>https://adblocker.mechtrace.com</code>
|-
| TLS DoT (hostname only) || <code>adblocker.mechtrace.com</code>
|}
</div>
'''Note:''' Plain DNS fields (Wi-Fi/Ethernet DNS servers, iOS "Configure DNS", Android per-network static DNS) accept the '''IP addresses'''. Encrypted DNS fields (Windows DoH, Android Private DNS, iOS DNS Override app) accept the '''hostname or URL''' shown above, not the IPs.

== Using a VPN to connect devices ==

A VPN lets a device reach the MechTrace network securely from anywhere, rather than only on a network that already points to MechTrace DNS. '''WireGuard''' is a fast, free, open-source option available on every platform covered here:

* Windows — [https://www.wireguard.com/install/ Download WireGuard for Windows]
* macOS — [https://apps.apple.com/us/app/wireguard/id1451685025 WireGuard on the Mac App Store]
* iOS / iPadOS — [https://apps.apple.com/us/app/wireguard/id1441195209 WireGuard on the App Store]
* Android — [https://play.google.com/store/apps/details?id=com.wireguard.android WireGuard on Google Play]

Once installed, import the <code>.conf</code> tunnel file or QR code that MechTrace provides for your account, then toggle the tunnel on. Once connected, follow the DNS steps below as usual — the tunnel doesn't set your DNS automatically unless the config already specifies it.

----

== Windows ==

=== 1. Install a VPN client (optional) ===
Install [https://www.wireguard.com/install/ WireGuard for Windows] if you plan to connect remotely. Import your tunnel and connect before continuing.

=== 2. Set plain MechTrace DNS ===
[[File:windows-dns-settings.png|thumb|center|420px|Windows — Edit DNS settings|alt=Windows DNS settings]]
# Open '''Settings''' (Win + I) → '''Network & internet'''.
# Click your active connection (''Wi-Fi'' or ''Ethernet''), then '''Hardware properties'''.
# Next to '''DNS server assignment''', click '''Edit'''.
# Change the dropdown to '''Manual''' and turn '''IPv4''' on.
# Enter a Preferred DNS and Alternate DNS from the Unfiltered or Filtered pair in the reference table above.
# Click '''Save'''.

=== 3. Set encrypted MechTrace DNS (DoH) ===
Windows 11 only shows the DoH toggle for DNS servers already on its known-server list, so register MechTrace's resolver first:

# Open '''PowerShell as Administrator'''.
# Run:
<pre>
Add-DnsClientDohServerAddress -ServerAddress '103.213.208.45' -DohTemplate 'https://adblocker.mechtrace.com' -AllowFallbackToUdp $False -AutoUpgrade $True
</pre>
# Repeat step 2 above (''Settings → Network & internet → Hardware properties → Edit''), entering <code>103.213.208.45</code> as the Preferred DNS.
# A '''Preferred DNS encryption''' dropdown will now appear — set it to '''Encrypted only (DNS over HTTPS)'''.
# Click '''Save'''. The DNS entry should now show ''(Encrypted)'' next to it.

----

== macOS (OSX) ==

=== 1. Install a VPN client (optional) ===
Install [https://apps.apple.com/us/app/wireguard/id1451685025 WireGuard for Mac] if you plan to connect remotely. Import your tunnel and connect before continuing.

=== 2. Set plain MechTrace DNS ===
[[File:macos-dns-settings.png|thumb|center|420px|macOS — Network → DNS tab|alt=macOS DNS Settings]]
# Open the '''Apple menu''' → '''System Settings''' → '''Network'''.
# Select your active connection (''Wi-Fi'' or the Ethernet adapter) and click '''Details…''' (older macOS: '''Advanced…''').
# Open the '''DNS''' tab.
# Click '''+''' and add both IPs from the Unfiltered or Filtered pair in the reference table above.
# Click '''OK''', then '''Apply'''.

macOS does not have a built-in field for entering a DoH or DoT hostname system-wide. To use MechTrace's encrypted DNS on a Mac, either route the Mac through the WireGuard tunnel (Section "Using a VPN" above) with the tunnel configured to push MechTrace DNS, or enable DoH inside an individual browser (e.g. Firefox's ''Enable Secure DNS'' setting, pointing at <code>https://adblocker.mechtrace.com</code>).

----

== iOS (iPhone / iPad) — DNS Override ==

=== 1. Install a VPN client (optional) ===
Install [https://apps.apple.com/us/app/wireguard/id1441195209 WireGuard for iOS] if you plan to connect remotely. Import your tunnel and connect before continuing.

=== 2. Set plain MechTrace DNS (Wi-Fi only, built-in) ===
[[File:ios-configure-dns.png|thumb|center|280px|iOS — Configure DNS|alt=iOS DNS Configuration]]
# Open '''Settings''' → '''Wi-Fi'''.
# Tap the '''ⓘ''' next to your connected network.
# Scroll to '''DNS''' and tap '''Configure DNS'''.
# Switch to '''Manual'''.
# Remove any existing entries and '''Add Server''' for both IPs from the Unfiltered or Filtered pair in the reference table above.
# Tap '''Save'''.

This method only applies to that one Wi-Fi network, and iOS does not allow changing DNS for cellular data natively.

=== 3. Set encrypted MechTrace DNS for all networks (DNS Override app) ===
iOS doesn't provide a native field for a custom DoH/DoT hostname, so use the '''DNS Override''' app, which applies your chosen DNS to both Wi-Fi and cellular:

# Install [https://apps.apple.com/us/app/dns-override/id1060830093 DNS Override] from the App Store.
# Open the app and create a '''custom profile'''.
# Enter the encrypted DNS hostname: <code>adblocker.mechtrace.com</code> (the app will use this for DoH/DoT).
# Save the profile, select it, and enable it globally when prompted to install its DNS-enforcement profile.

----

== Android ==

=== 1. Install a VPN client (optional) ===
Install [https://play.google.com/store/apps/details?id=com.wireguard.android WireGuard for Android] if you plan to connect remotely. Import your tunnel and connect before continuing.

=== 2. Set encrypted MechTrace DNS (Private DNS / DoT — recommended, all networks) ===
[[File:android-private-dns.png|thumb|center|280px|Android — Private DNS|alt=Android DNS Settings]]
# Open '''Settings''' → '''Network & internet''' (Samsung: '''Connections''').
# Tap '''Advanced''' (or '''More connection settings''') → '''Private DNS'''.
# Select '''Private DNS provider hostname'''.
# Enter: <code>adblocker.mechtrace.com</code>
# Tap '''Save'''.

This applies to Wi-Fi and mobile data, and requires Android 9 or later.

=== 3. Set plain MechTrace DNS (per Wi-Fi network) ===
# Open '''Settings''' → '''Network & internet''' → '''Wi-Fi'''.
# Press and hold your connected network, then tap the gear icon.
# Expand '''Advanced''' → change '''IP settings''' to '''Static'''.
# Enter both IPs from the Unfiltered or Filtered pair in the reference table above as '''DNS 1''' and '''DNS 2'''.
# Tap '''Save'''.

----

== Verifying your setup ==

After configuring any of the above, confirm it's working:

* Visit a DNS leak test site in a browser on the device.
* On Windows, run <code>ipconfig /flushdns</code> after changing settings, then <code>nslookup mechtrace.com</code> and check the server it reports.
* On Android, look for the key/shield icon in the status bar when Private DNS is active.

== Support ==

If a device won't connect or DNS settings don't stick, contact MechTrace:

* '''Email:''' contactus@mechtrace.com
* '''Phone:''' +91 (80) 4089-5060
* '''Address:''' 143H Bommasandra Industrial Area, Hosur Main Road, Bangalore, Karnataka 560099, India

[[Category:MechTrace]]
[[Category:DNS]]
[[Category:VPN Setup]]