Lyra DNS

Tear ads out of everything. Out of everything.

The Lyra extension blocks ads in your browser. Lyra DNS blocks them in every app on your device — Chrome, Safari, TikTok, Instagram, Spotify, Netflix, smart TV, Xbox. No need to install anything everywhere. Set it up once, it covers everything.

Sign in to install

Lyra DNS is included with every Lyra subscription.

Works now

How to install on Mac

Time: 1 minute. You need to be signed in to your Lyra account with an active paid plan.

  1. Open this page in the browser you use — any will do (Safari, Chrome, Brave, Edge, Firefox).
  2. Signed in, click the Download my install profile button up top. A file named lyra-dns-...mobileconfig starts downloading.
  3. On Safari, macOS opens System Settings → Privacy & Security → Profiles as soon as the download finishes.
    On other browsers (Chrome, Brave, Edge, Firefox), the file goes to Downloads — double-click it to open the installer.
  4. You will see an item called "Lyra DNS" in the list. Double-click it.
  5. A window asks whether to install. Click Install, type your Mac password, click Install again.
  6. Done. Your entire Mac now uses Lyra DNS — in every app, on any Wi-Fi you connect to.
How to verify it is working

Open Terminal (Applications → Utilities → Terminal) and paste:

dig doubleclick.net

If you see status: NXDOMAIN, it is blocking ✓. If you see an IP, the profile is not installed correctly or has been removed.

How to uninstall
  1. System Settings → Privacy & Security → Profiles
  2. Select Lyra DNS and click the minus (−)
  3. Type your password → the profile is removed immediately
Works now

How to install on iPhone or iPad

Time: 2 minutes. Same profile as Mac — the difference is where you install it.

  1. On your iPhone, open this page in the browser you use — Safari, Chrome, Brave, any one.
  2. Signed in, tap the Download my install profile button.
  3. On Safari: a notice appears "This site is trying to download a configuration profile" → tap Allow, then Close on the next screen.
    On other browsers: the file goes to the Files app. Open Files → Downloads → tap the .mobileconfig → choose Share → Settings (or long-press → Open in Settings).
  4. The Settings app opens with the "Profile Downloaded" screen. If it is not there, go to Settings → General → VPN, DNS & Device Management → Lyra DNS.
  5. Tap Install (top-right) → type your iPhone passcode → Install again → Install a third time on confirmation.
  6. Done. It applies to every app, on Wi-Fi and cellular.
How to verify it is working

No terminal on iPhone, but here is a trick: open Safari in private mode and type https://doubleclick.net. If you see "The server could not be found", it is blocking ✓.

How to uninstall
  1. Settings → General → VPN, DNS & Device Management
  2. Tap Lyra DNS
  3. Tap Remove Profile → type your passcode
Works now

How to install on Android

Time: 1 minute. Android has native support for encrypted DNS via Private DNS. No app to install — just paste a hostname in Settings.

  1. Open this page on your Android phone, signed in to your Lyra account with an active paid plan.
  2. Tap Download my install profile up top. A box appears with your personal hostname (something like ax9p2k…dns.lyrasearch.com) — already copied to clipboard.
  3. Tap Open DNS Settings to jump straight to the right screen. Some browsers block this shortcut for security — if nothing happens, open it manually: Settings → Network & Internet → Private DNS (on Samsung: Connections → More → Private DNS).
  4. Select "Private DNS provider hostname" (not "Automatic" and not "Off").
  5. Long-press the field → Paste. The hostname appears.
  6. Tap Save. Done — Chrome, Instagram, TikTok, Spotify, game apps and smart TVs via Chromecast all sit behind Lyra DNS.
How to verify it is working

Open any site in any app — for example Chrome, and visit doubleclick.net. You should see "No connection" or "Could not connect" (because the domain was blocked at DNS level). A normal site like google.com keeps opening as usual.

And on /billing, the Android device shows "Active now" within about 30 seconds of you browsing anything.

How to uninstall

Settings → Network & Internet → Private DNS → choose "Automatic" or "Off". Nothing remains on the device — it is just a string in the OS database.

Works now

Windows

Windows 11 already has native DNS-over-HTTPS support. Windows 10 needs a third-party app.

Windows 11

  1. Settings → Network & Internet → Wi-Fi (or Ethernet)
  2. Click the connected adapter → Hardware Properties
  3. DNS server assignment → Edit → switch to Manual
  4. Enable IPv4, set any valid IP (e.g. 1.1.1.1), and under DNS over HTTPS select On, encrypted only (DoH)
  5. In DoH server (template), paste the URL shown above (your personal Lyra DNS endpoint, already copied to your clipboard).
  6. Save. Repeat for every adapter (Wi-Fi + Ethernet) you use.

Windows 10

Windows 10 has no native DoH UI. The easiest path is the free app YogaDNS (closed-source, ~5 years on the market without incidents). The ideal path is to upgrade to Windows 11 — it is free and has native support.

  1. Download YogaDNS Free from yogadns.com/download and install (standard installer — Next, Next, Finish).
  2. Open YogaDNS as Administrator (right-click → Run as administrator).
  3. Click Servers tab → Add → DNS-over-HTTPS (DoH). Paste the URL shown above into the Server URL field. Name it "Lyra DNS". Save.
  4. Click Rules tab → Add → leave domain field empty (matches all) → select your Lyra DNS server → Save.
  5. Click Interfaces tab → check the network adapter(s) you use (Wi-Fi, Ethernet).
  6. Click Apply. When prompted, confirm Yes to set YogaDNS as the system DNS provider. Done — every app on Windows now goes through Lyra DNS.

For maximum transparency, the open-source alternative is dnscrypt-proxy (CLI, no UI). For maximum simplicity, upgrading to Windows 11 (free since 2021) gives you the native DoH UI shown above.

How this looks on screen

Unlike the Lyra browser extension, Lyra DNS blocks silently at the network level — no badge, no notice, no marker. When an ad is blocked, it simply does not load. You do not see anything special in its place; just nothing.

Banners and popups inside pages. The area where the ad would be is empty or grey. The page continues loading normally, just without that block. On some sites the layout reorganizes itself and no space is left; on others, a white or grey rectangle stays where the ad was. Both are signs it worked.

Invisible tracking pixels. Most trackers load 1×1 pixels the user never sees. Those vanish without you noticing — they go straight to the "blocked queries" counter at /billing.

Entire pages blocked. If you open a blocked address directly (e.g. clicking a doubleclick.net/... link), the browser shows "Could not connect to server" or "Site cannot be reached". This is not Lyra showing an error — it is the Mac or iPhone itself reporting that the name does not exist (NXDOMAIN). It worked exactly as it should.

Pages that load faster. News sites, blogs and e-commerce normally load dozens of tracker and ad scripts before the main content appears. By blocking all of those at the DNS level, the page appears all at once — that "oh, it got faster" is the most-felt effect day to day.

Want to explicitly see "Lyra hid X here"? That is only possible with the Lyra browser extension, because it sees the page HTML and can paint a marker. DNS only sees the domain name being queried — there is no way to paint anything inside the page.

What this blocks

  • ✓ Banners and popups on most news sites and blogs
  • ✓ Trackers (analytics platforms, marketing pixels, heatmap and session-replay services)
  • ✓ Display and RTB networks (the major programmatic ad exchanges)
  • ✓ Smart-TV telemetry (Samsung, LG, Vizio sending data home)
  • ✓ In-app ads on mobile games and free apps
  • ✓ Fast-fashion and dropshipping sites from the Lyra blocklist

What it does NOT block (being honest)

  • × YouTube mid-roll ads (served from the same domain as the video)
  • × Sponsored posts in Instagram, TikTok, Facebook feeds (served as first-party content)
  • × Spotify Free audio ads (also first-party)

For those three cases, the Lyra Chrome extension complements the DNS — it sees the page DOM and can block via CSS/JS what cannot be blocked by network.