# How to protect your network with AdGuard Home
## Introduction
[AdGuard Home](https://adguard.com/en/blog/in-depth-review-adguard-home.html) is a free and open-source tool for network protection. It can help you protect your devices from advertisements, malicious URLs, and dangerous websites. AdGuard Home is highly customizable and works network wide. However, without exposing the server device to the outside internet, you cannot use your AdGuard Home instance from a remote device or another location.
With the help of [Meshnet](https://nordvpn.com/meshnet/), you can connect your AdGuard Home server and devices from anywhere in the world into a single virtual network. This technology allows you to use self-hosted LAN services, such as AdGuard Home, remotely without compromising on security.
This guide outlines the steps to install AdGuard Home on Windows, macOS, and Linux and explains how to change your DNS addresses to use it remotely.
{% hint style="info" %}
**Note**
Changing DNS addresses while using cellular data and keeping the Meshnet connection active is not possible. If you are using a mobile device with a cellular connection, you will need to use AdGuard Home [with a VPN connection](#with-a-vpn-connection).
{% endhint %}
## Install AdGuard Home
Begin by downloading and installing AdGuard Home on your device.
{% tabs %}
{% tab title="Windows" %}
To install AdGuard Home on Windows:
1. Download the [AdGuard Home package for Windows](https://github.com/AdguardTeam/AdGuardHome/wiki/Platforms) from GitHub.
2. Extract the downloaded .zip file.
3. Open **Command Prompt** as an administrator by pressing the **Windows** key + **R**, entering `cmd`, and pressing **Ctrl** + **Shift** + **Enter**.
4. Navigate to the extracted AdGuard Home folder location using the `cd` command.\
\
**Example**
cd "C:\Users\meshnet\Downloads\AdGuardHome_windows_amd64\AdGuardHome"
5. Run the following command to install and start AdGuard Home:
AdGuardHome.exe -s install
6. Check if the service status is `running` by using this command:
AdGuardHome.exe -s status
AdGuard Home is now installed and active on your device.
{% endtab %}
{% tab title="macOS" %}
To install AdGuard Home on macOS:
1. Download the [AdGuard Home package for macOS](https://github.com/AdguardTeam/AdGuardHome/wiki/Platforms) from GitHub.
* If you are using an Intel Mac, choose the AMD64 release package.
* If you are using an Apple silicon Mac, choose the 64-bit ARM release package.
2. Extract the downloaded .zip file by double-clicking it.
3. In **Finder**, drag the extracted AdGuard Home package to the **Applications** folder.
4. Open **Terminal** and navigate to the AdGuard Home folder using this command:
cd /Applications/AdGuardHome
5. Install AdGuard Home with the following command:
sudo ./AdGuardHome -s install
6. Enter your administrator password. The input will be hidden.
7. Check if the service status is `running` by using this command:
sudo ./AdGuardHome -s status
**Example**
AdGuard Home is now installed and active on your device.
{% hint style="info" %}
**Note**
When trying to install AdGuard Home, you may receive an error message indicating that the developer cannot be verified. To proceed with the installation, open **System settings** > **Privacy & security**, scroll down, and click **Allow anyway**.
{% endhint %}
{% endtab %}
{% tab title="Linux" %}
### Method 1: Using the Snap Store
For a quick and easy installation, you can download AdGuard Home from the [Snap Store](https://snapcraft.io/adguard-home).
1. Open **Terminal**.
2. Run the following command to download and install AdGuard Home:
sudo snap install adguard-home
When the process finishes, AdGuard Home is started automatically.
### Method 2: Using an automated install script
Another way to install AdGuard Home is by using an automated install script with the `curl` command.
1. Open **Terminal**.
2. Run this command to execute the automated install script:
curl -s -S -L https://raw.githubusercontent.com/AdguardTeam/AdGuardHome/master/scripts/install.sh | sh -s -- -v
Once the installation process finishes, check if the AdGuard Home service is `running` with this command:
{% code overflow="wrap" %}
```bash
sudo /opt/AdGuardHome/AdGuardHome -s status
```
{% endcode %}
AdGuard Home is now active and ready for use.
{% endtab %}
{% endtabs %}
## Configure AdGuard Home settings
After you install AdGuard Home, its web interface is created. By default, the interface listens on [port](https://nordvpn.com/blog/what-is-my-port/) 3000. All of the settings are configured via the web interface.
### Set up your account
To set up your AdGuard Home account, take the following steps:
1. Open your internet browser and enter the following URL:\
`localhost:3000/`\
2. Click **Get started**.
3. In the **Admin web interface** section, select the port number. The default port is 80, but if it is already occupied, you can change it to another one, such as port 81.,
4. Under **DNS server**, make sure that the **All interfaces** option is selected. This option allows you to use AdGuard Home locally and remotely over Meshnet.
5. Click **Next**.
6. Follow the on-screen instructions to create your account and finish the setup procedure.
### Select your upstream DNS
With AdGuard Home, you can select from a wide range of upstream [DNS addresses](https://nordvpn.com/cybersecurity/glossary/dns/). In addition to standard DNS, you can also choose:
* [DNS-over-HTTPS](https://en.wikipedia.org/wiki/DNS_over_HTTPS)
* [DNS-over-TLS](https://en.wikipedia.org/wiki/DNS_over_TLS)
* [DNS-over-QUIC](https://en.wikipedia.org/wiki/QUIC)
* [DNSCrypt](https://en.wikipedia.org/wiki/DNSCrypt)
To configure your upstream DNS:
1. Access your AdGuard Home dashboard at `http://localhost:`, replacing `` with the previously selected port number.\
\
To open the dashboard from a Meshnet peer device, substitute `localhost` with the server device’s Nord name or Meshnet IP.\
2. Log in to your account.
3. From the dashboard, click **Settings** > **DNS settings**.
4. In the **Upstream DNS servers** field, enter your preferred DNS servers. You can choose from the list of [known DNS providers](https://adguard-dns.io/kb/general/dns-providers/?clid=eSx8bU--QeF322--d09UI5\&utm_campaign=dns_kb_providers\&utm_medium=ui\&utm_source=home).
5. Click **Test upstreams** to check if the DNS servers are working correctly and click **Apply**.
Now your selected upstream DNS servers are used for hostname resolution.
### Choose your blocklists
To enhance your [network security](https://nordvpn.com/cybersecurity/network-security/), you have the option of adding DNS blocklists to your dashboard. You can choose from the built-in list or add your custom blocklist URLs.
1. From your AdGuard Home dashboard, select **Filters** > **DNS blocklists**.
2. Click the **Add blocklist** button at the bottom and select **Choose from the list**.
3. Check the blocklists that you want to include and click **Save**.
You will see the chosen blocklists added to the DNS blocklist table.
## Use AdGuard Home DNS over Meshnet
Now that you've completed all the necessary steps, your AdGuard Home is fully set up. To make use of its features, you need to change your device’s DNS address to the Meshnet IP of the AdGuard Home device.
### Without a VPN connection
{% tabs %}
{% tab title="Windows" %}
### Windows 11
1. Right-click the **Start** button and select **Network connections**.
2. Choose the network type your device is using (Wi-Fi or Ethernet).
3. Find the **DNS server assignment** option and click **Edit**.
4. Choose **Manual** from the dropdown list and enable **IPv4**.
5. Enter the following information:
* Under **Preferred DNS**, enter the Meshnet IP of the AdGuard Home server.
* Under **Alternate DNS**, enter the DNS address of another provider.
6. Click **Save**.
### Windows 10
1. Right-click **Start** and select **Network connections**.
2. Select **Change adapter options**.
3. Right-click your current network adapter (Wi-Fi or Ethernet) and select **Properties**.
4. In the new window, select **Internet Protocol Version 4 (TCP/IPv4)** and click **Properties**.
5. Select **Use the following DNS server addresses**.
6. Enter the following information:
* In the **Preferred DNS server** field, enter the Meshnet IP of the AdGuard Home server.
* In the **Alternate DNS server** field, enter the DNS address of another provider.
7. Click **OK** twice to apply the changes.
{% endtab %}
{% tab title="Android" %}
{% hint style="info" %}
**Note**
These instructions detail how to change your DNS addresses on Android 16. If you are using a different version of Android, consult your device's specific documentation for guidance, as the procedure may differ.
{% endhint %}
1. Go to **Network & internet** > **Internet**, find your current Wi-Fi network, and tap the gear button.
2. In the upper-right corner, select **Modify**.
3. Expand the **Advanced settings** dropdown, and change the **IP settings** value to **Static**.
4. Enter your device's local IP address, network gateway, and network prefix length.
5. Fill in the required DNS addresses.
* Under **DNS 1**, enter the Meshnet IP of the AdGuard Home device.
* Under **DNS 2**, enter the DNS address of another provider.
6. Press **Save** (if such a button is present).
{% endtab %}
{% tab title="iOS" %}
1. Open **Settings**.
2. Tap **Wi-Fi**, find your current network, and tap the Info button.
3. Tap **Configure DNS** and choose **Manual**.
4. Select **Add server** and enter the Meshnet IP of the AdGuard Home server.
5. Ensure that the added IP address is at the top.
6. Tap **Save**.
{% endtab %}
{% tab title="macOS" %}
### macOS Ventura 13 and newer
1. Go to **System settings** and click **Network**.
2. Select the network interface you use (Wi-Fi or Ethernet) and click **Details**.
3. Open the **DNS** tab and click the plus (+) button at the bottom to add the Meshnet IP of the AdGuard Home server.
4. Ensure that the added IP address is at the top.
5. Click **OK** to save the changes.
### macOS Monterey 12 and older
1. Go to **System preferences** and click **Network**.
2. Select the network interface you use (Wi-Fi or Ethernet) and click **Advanced.**
3. Open the **DNS** tab and add the Meshnet IP of the AdGuard Home server by clicking the plus (+) icon.
4. Ensure that the added IP address is at the top.
5. Click **OK** and **Apply**.
{% endtab %}
{% tab title="Linux" %}
### Method 1: Using Network Manager
1. Open **Settings**, and then select either **Network** or **Wi-Fi** based on your network type.
2. Click the gear button and head to the **IPv4** tab.
3. Next to **DNS**, turn off the **Automatic** toggle.
4. In the **DNS** field, enter the Meshnet IP of the AdGuard Home server and the DNS of another provider, separated by a comma.
5. Click **Apply**.
6. Open **Terminal** and run the following command to restart the Network Manager daemon:
sudo systemctl restart NetworkManager
7. Enter your sudo password. The input will be hidden.
### Method 2: Using Terminal
1. Open **Terminal** and run the following command:
sudo nano /etc/systemd/resolved.conf
2. Locate the `DNS` and `FallbackDNS` lines.
3. Uncomment the lines by removing the hash (#) symbols.
4. Enter the appropriate DNS addresses after the equals (=) sign, as shown:\
`DNS=`\
`FallbackDNS=`\
\
**Example**
5. Press **Ctrl** + **X**, **Y**, and **Enter** to exit and save the changes.
6. Run the following command to ensure that the network changes are applied:
sudo systemctl restart systemd-resolved
7. Enter your sudo password. The input will be hidden.
{% hint style="info" %}
**Note**
Changes in the `/etc/systemd/resolved.conf` file take priority over settings in the Network Manager. Therefore, if you apply the DNS change directly via the Network Manager settings, ensure that there are no custom configurations in the previously mentioned `resolved.conf` file. Otherwise, the specified DNS addresses will not be used.
{% endhint %}
{% endtab %}
{% tab title="Android TV" %}
1. Open the Android TV **Settings** menu.
2. Select **Network & internet**.
3. Choose your network and change the **IP settings** value to **Static**.
4. Enter your device's local IP address, network gateway, and network prefix length.
5. Type in the DNS addresses:
* In the **DNS 1** field, enter the Meshnet IP address of your AdGuard Home device.
* In the **DNS 2** field, enter the DNS address of another provider.
{% endtab %}
{% endtabs %}
### With a VPN connection
Meshnet allows you to use your custom, self-hosted DNS server alongside a VPN connection via the NordVPN app. Follow these steps to use your AdGuard Home DNS when connected to a VPN server:
{% tabs %}
{% tab title="Windows" %}
1. Open the **NordVPN** app.
2. Navigate to **Devices in** **Meshnet** and copy the Meshnet IP address of your AdGuard Home device.
3. In the lower-left corner, click **Settings** .
4. Select the **Connection and security** section.
5. Turn on the **Use custom DNS** toggle and click the dropdown arrow.
6. In the first field, paste the copied Meshnet IP address.
7. Click the Save checkmark.
Now, when you establish a VPN connection to a NordVPN server, the DNS address that you specified will be used for the connection.
{% hint style="info" %}
**Note**
In **Threat protection pro** > **Advanced browsing protection**, ensure that the **DNS filtering** toggle is turned off. Otherwise, the [Threat Protection feature](https://nordvpn.com/features/threat-protection/) will overwrite the custom DNS change.
{% endhint %}
{% endtab %}
{% tab title="Android" %}
1. Open the **NordVPN** app.
2. Navigate to **Products** > **Meshnet** > **Manage devices** and copy the Meshnet IP address of your AdGuard Home device.
3. Go to the **Profile** menu, and then go to **Settings** > **DNS.**
4. Select **Use custom DNS**, paste the copied Meshnet IP address, and tap **Add**.
Now, when you establish a VPN connection to a NordVPN server, the DNS addresses that you specified will be used for the connection.
{% hint style="info" %}
**Note**
On the **Threat protection** tab, ensure that the **Use threat protection** option is turned off. Otherwise, the [Threat Protection feature](https://nordvpn.com/features/threat-protection/) will overwrite the custom DNS change.
{% endhint %}
{% endtab %}
{% tab title="iOS" %}
1. Open the **NordVPN** app.
2. Navigate to **Products** > **Meshnet** > **Manage devices** and copy the Meshnet IP address of your AdGuard Home device by tapping it.
3. Go to the **Profile** menu and select **Settings** .
4. Under **VPN connection**, tap **Location and protocol**.
5. In the **Enter custom DNS address** field, paste the copied Meshnet IP address.
Now, when you establish a VPN connection to a NordVPN server, the DNS address that you specified will be used for the connection.
{% hint style="info" %}
**Note**
On the **Threat protection** tab, ensure that threat protection is turned off. Otherwise, the [Threat Protection feature](https://nordvpn.com/features/threat-protection/) will overwrite the custom DNS change.
{% endhint %}
{% endtab %}
{% tab title="macOS" %}
{% hint style="info" %}
**Note**
The custom DNS feature is available only on the [direct download](https://nordvpn.com/download/mac/) version of the NordVPN app.
{% endhint %}
1. Open the **NordVPN** app.
2. Navigate to the **Meshnet** tab and copy the Meshnet IP address of your AdGuard Home device.
3. In the upper-right corner, click **Profile** > **Settings** and go to **Custom DNS**.
4. Click **Add new DNS**.
5. In the new entry, paste the copied Meshnet IP address.
6. Turn on the **Enable custom DNS servers** toggle.
Now, when you establish a VPN connection to a NordVPN server, the DNS addresses that you specified will be used for the connection.
{% hint style="info" %}
**Note**
In **Threat protection pro** > **Overview**, ensure that the **DNS filtering** toggle is turned off. Otherwise, the [Threat Protection feature](https://nordvpn.com/features/threat-protection/) will overwrite the custom DNS change.
{% endhint %}
{% endtab %}
{% tab title="Linux" %}
1. Open **Terminal**.
2. Run the following command, replacing `` with your AdGuard Home device's Meshnet IP address:
nordvpn set dns <MeshnetIP>
**Example**
Now, when you establish a VPN connection to a NordVPN server, the DNS addresses that you specified will be used for the connection.
{% hint style="info" %}
**Note**
Make sure that **Threat protection lite** is turned off. Otherwise, the [Threat Protection feature](https://nordvpn.com/features/threat-protection/) will overwrite the custom DNS change.
To disable **Threat Protection lite**, use the `nordvpn set tplite off` command.
{% endhint %}
{% endtab %}
{% tab title="Android TV" %}
1. Open the **NordVPN** app.
2. Navigate to **Settings** > **DNS server**.
3. Choose **Custom** and select **Add server**.
4. Enter the Meshnet IP address of your AdGuard Home device.
Now, when you establish a VPN connection to a NordVPN server, the DNS address that you specified will be used for the connection.
{% hint style="info" %}
**Note**
In **Settings** > **Threat protection**, ensure that the **Threat Protection** toggle is turned off. Otherwise, the [Threat Protection feature](https://nordvpn.com/features/threat-protection/) will overwrite the custom DNS change.
{% endhint %}
{% endtab %}
{% endtabs %}
key + **R**, entering `cmd`, and pressing **Ctrl** + **Shift** + **Enter**.
4. Navigate to the extracted AdGuard Home folder location using the `cd` command.\
\
**Example**
, drag the extracted AdGuard Home package to the **Applications** folder.
and select **Network connections**.
2. Select **Change adapter options**.
3. Right-click your current network adapter (Wi-Fi or Ethernet) and select **Properties**.
4. In the new window, select **Internet Protocol Version 4 (TCP/IPv4)** and click **Properties**.
5. Select **Use the following DNS server addresses**.
6. Enter the following information:
* In the **Preferred DNS server** field, enter the Meshnet IP of the AdGuard Home server.
* In the **Alternate DNS server** field, enter the DNS address of another provider.
button.
3. Tap **Configure DNS** and choose **Manual**.
4. Select **Add server** and enter the Meshnet IP of the AdGuard Home server.
and copy the Meshnet IP address of your AdGuard Home device.
3. In the lower-left corner, click **Settings** 
.
4. Select the **Connection and security** section.
5. Turn on the **Use custom DNS** toggle and click the dropdown arrow.
6. In the first field, paste the copied Meshnet IP address.
> **Advanced browsing protection**, ensure that the **DNS filtering** toggle is turned off. Otherwise, the [Threat Protection feature](https://nordvpn.com/features/threat-protection/) will overwrite the custom DNS change.
{% endhint %}
{% endtab %}
{% tab title="Android" %}
1. Open the **NordVPN** app.
2. Navigate to **Products** 
> **Meshnet** 
menu, and then go to **Settings** 
> **Threat protection**, ensure that the **Threat Protection** toggle is turned off. Otherwise, the [Threat Protection feature](https://nordvpn.com/features/threat-protection/) will overwrite the custom DNS change.
{% endhint %}
{% endtab %}
{% endtabs %}