DNS_PROBE_FINISHED_BAD_CONFIG, what it means and how to fix it

Chrome's probe found the network configuration itself unusable: the DNS servers your device was given are wrong, dead, or unreachable, typically handed out by a router whose own settings are stale, typed in manually long ago and forgotten, or left behind by a VPN. The internet may be physically fine; the instructions your device follows to use it are broken, which is what “bad config” means.

The fix, in order

  1. Set your device's DNS back to automatic. Windows: Settings → Network & internet → your connection → DNS server assignment → Automatic (DHCP). A manual entry pointing at a dead resolver is the most common cause.
  2. Or point DNS at a known public resolver. Setting the DNS servers to 1.1.1.1 and 8.8.8.8 bypasses a broken router resolver entirely. If pages load immediately after, the router's DNS was the fault.
  3. Restart the router. Routers hand out DNS settings by DHCP; if the router's own upstream DNS changed (providers do this during maintenance), a restart makes it hand out fresh, working settings.
  4. Flush the DNS cache. Windows: ipconfig /flushdns. macOS: sudo dscacheutil -flushcache. Cached failures otherwise outlive the fix.
  5. Remove leftover VPN network adapters and settings. Uninstalled VPNs leave virtual adapters and DNS overrides behind. Delete the stale adapter in network settings, or reinstall and properly uninstall the VPN, if the error dates from its removal.

If it still happens

If every device on the network reports bad config, the router is handing out the broken settings: log into it and correct its DNS entries (automatic from the provider, or the public resolvers above) so the fix reaches every device at once.

Common questions

Why did this appear after my provider did maintenance? Providers retire and renumber DNS servers. Routers and devices holding the old addresses by manual setting or stale DHCP leases keep asking servers that no longer answer. Renewing the settings, or restarting the router, picks up the new ones.

Is using a public DNS like 1.1.1.1 safe? Yes; public resolvers from established operators are a standard diagnostic and a common permanent choice. It changes who answers your name lookups from your provider to that operator, nothing more, and it is reversible at any time.

Related errors

DNS_PROBE_FINISHED_NXDOMAIN · DNS_PROBE_FINISHED_NO_INTERNET · ERR_NAME_NOT_RESOLVED