Project archived

DcDNS has been discontinued and will not receive further updates. The source code and last release remain available on GitHub for reference.

discord privacy hardening · windows

DcDNS

ARCHIVED · windows · open source · no longer maintained

Enforces strict DNS-over-HTTPS, blocks WebRTC IP leaks, disables telemetry, and strips tracking headers — all before Discord touches the network.

Releases on GitHub View source Demo

⚠ This project is archived — no new releases will be published. Files are hosted on GitHub only.

DoH DNS-only, no plaintext

17+ telemetry endpoints blocked

0 network calls from DcDNS

1-click full restore & uninstall

what_it_does

Privacy where
Electron cuts corners

Discord runs on Chromium. That means plaintext DNS, WebRTC IP leaks, and fingerprinting headers — unless you patch it at the source.

Strict DNS-over-HTTPS

All DNS queries forced through Mullvad's encrypted DoH resolver. Plain DNS fallback removed — queries fail securely rather than silently downgrade.

WebRTC Leak Protection

Blocks non-proxied UDP via disable_non_proxied_udp. Your local LAN IP is never exposed to Discord's voice servers or other call participants.

Telemetry Blocking

Cancels requests to /science, /track, /analytics, Sentry, Mixpanel, Segment, and Amplitude at the Electron network layer.

User-Agent Cleaning

Strips Electron/x.x.x and DiscordApp/x.x.x from all outgoing headers so servers cannot fingerprint your exact Electron build.

TLS 1.2+ Enforced

Minimum TLS enforced via setSSLConfig. Connections to servers using outdated, insecure TLS are blocked entirely.

Geolocation Blocked

All geolocation requests denied at the Electron layer via both setPermissionRequestHandler and setPermissionCheckHandler.

Spellcheck Disabled

Chromium's spellchecker — which can send typed text to remote cloud APIs — disabled via setSpellCheckerEnabled(false).

X-Client-Data Removed

Google's Chromium ID header plus X-Goog-Visitor-Id and X-Firebase-Client stripped from every request via webRequest.onBeforeSendHeaders.

Crash Reports Blocked

Breakpad crash reporting disabled and upload endpoints blocked independently. Your crash data stays on your machine, not Discord's servers.

how_it_works

Patches Discord's core
before it boots

DcDNS prepends a JS payload into Discord's index.js. Every protection fires before Chromium opens a single socket.

Kill Discord processes

DcDNS terminates all running Discord processes automatically. Patching a live process causes file-lock errors — this step prevents that.

Run DcDNS.exe as Administrator

Single portable .exe, zero install. Admin privileges are required to write into Discord's installation directory — nothing else is modified on your system.

Pick your client & click Install

Choose Stable, PTB, Canary, or Development. The original index.js is backed up as index.js.dcdns.bak before anything is written.

DcDNS prepends the payload

A compact JS block is inserted at the top of index.js. It hooks Chromium's session API — DoH, WebRTC policy, header filters, and permission handlers all activate here.

Restart Discord — done

The title bar shows "Encrypted by DcDNS" when the patch is active. All protections are live before the first DNS query leaves the machine.

Re-patch after Discord updates

Discord auto-updates overwrite index.js, removing the patch. Just re-run DcDNS and click Install — your settings are saved in dcdns_conf.json and reapplied automatically.

After every Discord update: Discord replaces index.js with a clean copy. Re-run DcDNS and click Install to restore the patch — your configuration is preserved.

why_trust_it

Built to be verified,
not just believed

DcDNS improves network-level privacy within Discord. Every claim here is checkable — source code, no obfuscation, no telemetry, no install.

transparency

Fully open source

Every line — Python launcher, JS payload injected into Discord, and this page — is public on GitHub. Read it before you run it. There are no compiled black boxes and no minified blobs that hide behavior.

data hygiene

DcDNS makes zero outbound calls

The patcher transmits nothing. The website makes no external requests — the project is archived and no update checks are performed.

reversibility

One click to undo everything

Before writing anything, DcDNS saves the original index.js as index.js.dcdns.bak. Click Uninstall and it's restored exactly. If the backup is missing, the injected payload is cleanly stripped by marker — the file is never left in a broken state.

integrity

SHA-256 shown before you run anything

The SHA-256 of the .exe is computed from the binary at runtime and shown in the UI — and published in each GitHub release. Verify it yourself with certutil -hashfile DcDNS.exe SHA256 before patching anything.

heads up

This probably violates Discord's ToS

Patching Discord's client files is not something Discord officially allows. Their Terms of Service prohibit modifying the client, and using DcDNS puts you in that category. Discord could detect the modification and ban your account — in practice this hasn't been reported, but that doesn't mean it's impossible.

This tool exists for people who've already decided they want more control over what Discord sends over the network. If you're not comfortable with the risk, don't use it. The source code is public so you can read exactly what gets injected before you touch anything.

You're doing this on your own terms. The author takes no responsibility for bans, broken installs, or anything else that happens as a result of using DcDNS. Back up your Discord installation before running it if you're unsure.

release_history

Changelog

Full release history is available on GitHub. The project is no longer actively maintained.

Project archived

This project has been archived. No further releases are planned. You can still view the full release history and download the last version directly on GitHub.

View releases on GitHub

DcDNS

Privacy whereElectron cuts corners

Patches Discord's corebefore it boots

Built to be verified,not just believed

This probably violates Discord's ToS

Changelog

Privacy where
Electron cuts corners

Patches Discord's core
before it boots

Built to be verified,
not just believed