Automatic installation and configuration of DNSCrypt (on Debian + Redhat like systems). This script will install DNSCrypt and configure it to start on boot and use an optional dnscrypt service.
Switch branches/tags
Nothing to show
Latest commit ea4c771 Mar 22, 2017 @AladW AladW committed on GitHub Merge pull request #100 from crypto-universe/master
Fix link to the script


Join the chat at

A script for installing and automatically configuring DNSCrypt on Linux-based systems.


DNSCrypt is a protocol for securing communications between a client and a DNS resolver by encrypting DNS queries and responses. It verifies that responses you get from a DNS provider have actually been sent by that provider, and haven't been tampered with.

This script will automatically and securely set up DNSCrypt as a background service that runs at system startup using DNSCrypt-proxy, the libsodium cryptography library, and the DNSCrypt service provider of your choice. The script also has options that allow you to change the service provider at any time, turn off DNSCrypt to use regular unencrypted DNS, as well as uninstall DNSCrypt.


The script supports recent Red Hat-based (CentOS, Fedora, Scientific Linux), Debian-based (Debian, Ubuntu, Linux Mint) distributions and OpenSUSE.

Note Scripts with sysvinit support were moved to the "legacy" branch (CentOS 6, Debian 7, Ubuntu < 16.04)
chmod +x dnscrypt-autoinstall
su -c ./dnscrypt-autoinstall

Supported providers

Providers are retrieved from the latest published dnscrypt-resolvers.csv (, with a fallback to those included with the DNSCrypt installation.


If the install fails at a particular stage and the script mentions DNSCrypt is already configured, use the forcedel argument to force an uninstallation:

./ forcedel