DnsCryptControl v1.2.6

DnsCryptControl is a split-privilege Windows desktop app for encrypted DNS, built on dnscrypt-proxy. An unelevated WPF UI drives a LocalSystem helper over a named-pipe IPC.

Features

Encrypted DNS — DoH, DNSCrypt, anonymized DNSCrypt, and ODoH
Kill switch, on by default — fail-closed: if the proxy ever drops, plaintext DNS on the standard ports is blocked
Per-family filtering & cloaking, plus live query monitoring
Hardened — binary-integrity + supply-chain verification; bundled proxy pinned by SHA-256 and minisign-verified

Install

Download DnsCryptControl-1.2.6.msi below. Requires Windows 10 / 11 (x64).
⚠️ SmartScreen warning: this build is self-signed, so Windows shows "unknown publisher." Click More info → Run anyway. (A trusted SignPath build is planned to remove this.)
Run the installer.

Verify the download

SHA-256: 608bd296562769cdea3cd034e37d11218b36891add4ea2c3c7805effd1734546
SHA256SUMS + the public cert (DnsCryptControl-Release.cer) are attached for verification.

Setup

Three setups — Quad9 DoH, anonymized DNSCrypt, ODoH (all verified working + leak-safe) — in the recommended-settings guide.

Included

dnscrypt-proxy 2.1.16 (pinned, minisign-verified)