What is DNScrypt?
DNSCrypt is a solution to the DNS protocol that is done in plain text. Whether you use a VPN or not, your DNS lookups will be done in plain text (depending on how the VPN service works) and should someone be listening before the DNS server, it will reveal which domain you want to look up. With DNSCrypt, all these lookups are encrypted and decrypted only when they reach a selected DNS server or you. This thus prevents eavesdropping and DNS manipulations (also known as man-in-the-middle attacks).
The program acts like a proxy on your computer that takes all incoming DNS lookups and encrypts them with your chosen DNS server's public key. They are then sent encrypted to the DNS server and when they reach it they are decrypted and complete your lookup. The response from the DNS server is of course also encrypted and decrypted when it reaches your computer.
To use DNSCrypt you need to use a DNS server that supports it. DNSCrypt has a list of public DNS servers that all support DNSCrypt and all of these servers log nothing or censor anything.
How do you install DNScrypt?
Install DNScrypt for Windows
Download Simple DNSCrypt and install. Then start the program. You do not need to be connected to OVPN when you do this, it's actually best if you do not use a VPN when you try this.
Make sure to click on the network adapters you are using. You can choose any, which is recommended. Choose a DNS server that you trust.
If done correctly, it should look like this:
Visit https://www.ovpn.com/en/dns-leak-test and see what DNS servers you get. If you get a server it means that everything went well. The result should look like this:
Install DNScrypt on other operating systems
If you want to use DNSCrypt on other systems such as Android, iOS, Linux and in routers, information is available on the DNScrypt website.