DNS PROFILE GENERATOR

Generate native Apple configuration profiles (.mobileconfig) and Declarative Device Management (DDM) JSON declarations directly in your browser. Profile generation happens locally on your device.

Selecting a preset repopulates the resolver fields below.
Legacy configuration profile format (.mobileconfig); deprecated on iOS/iPadOS/macOS/visionOS 27+.
HTTPS URI for a DNS-over-HTTPS resolver. Verify that the endpoint supports Apple's required DoH format.
Direct resolver IP addresses; avoids relying solely on initial hostname resolution.
Disables encrypted DNS routing on specified Wi-Fi networks.
Routes matching domain lookups to the fallback network resolver.
Adds common Apple, Google, Microsoft, Mozilla, ConnMan, GNOME, and captive-portal test domains to improve captive-portal compatibility.
Allows failover to the device's default system DNS resolver if the encrypted DNS server is unavailable.
Prevents users from disabling the DNS configuration. Available on supervised devices.
Payload Type: -
Identifier: -
Profile UUID: -
Configured Rules: - 

        


        

            

                
                Profile data processed locally
            

            

                
                Dual Payload Architecture (Configuration Profile & DDM)