# Internet Security Overview

Twingate currently offers DNS encryption via DNS-over-HTTPS (DoH) as an additional internet security option that you can enable for users running on desktop operating systems (Windows, macOS, and Linux).

### DNS and Twingate

Twingate works with DNS in a unique way that enables a configuration-less experience for users as well as the ability to offer system-wide DNS security. [Learn more](/content/docs/how-dns-works-with-twingate/index.html)

As we add more capabilities to this aspect of our product, we will link to the relevant guides below.

## [automatic dns encryption permalink](/content/docs/internet-security#automatic-dns-encryption/index.html) Automatic DNS encryption

Twingate provides native DNS-over-HTTPS (DoH) capabilities for any users in your Twingate network running macOS, Windows, or Linux [Clients](/content/docs/clients/index.html). (Regardless of platform, [headless clients](/content/docs/services-headless-clients/index.html) running in [service account](/content/docs/services/index.html) mode will never use DoH.)

Because Twingate operates at the network level on a user’s device, Twingate DoH will encrypt all DNS traffic regardless of the originating application with no configuration changes required other than running the Twingate Client.

→ Read the [DNS filtering guide](/content/docs/dns-filtering/index.html)

→ Read the [DoH configuration guide](/content/docs/dns-security/index.html)

Last updated 6 months ago