Adults 18+ · general information
DNS, router, browser, device, and accountability options, with the bypasses worth planning for.
This information is general only and is not a substitute for professional medical advice. Always seek the advice of your GP or another qualified health professional.
answer
Use layers. Set family DNS on the router, lock device restrictions, turn on browser Secure DNS, and add a blocker for the device you use most. DNS alone can be bypassed by mobile data, VPNs, and browser DNS-over-HTTPS settings.
dns
Use these for adult-content and malware filtering. Put router settings first if you want the whole home Wi-Fi covered.
table
| Change this | Use it when | Limitation |
|---|---|---|
| Router | You want adult-content filtering on home Wi-Fi for every device. | It does not cover mobile data, VPNs, hotspots, or other Wi-Fi networks. |
| Phone | Your phone is the main bypass or you use mobile data. | iOS manual DNS is per Wi-Fi network; Android Private DNS is more direct. |
| Mac or Windows | A laptop leaves home, uses different Wi-Fi, or bypasses router DNS. | Settings can be per network, adapter, or browser. |
| Browser Secure DNS | Chrome, Edge, or Firefox ignores the router DNS. | A browser can still be changed back unless settings are locked. |
setup
Start with the router if you control it. Then set the phone, because mobile data is the common gap. Add Mac or Windows settings if the computer travels or uses a browser-level bypass.
Router menus vary. If DNS is locked by your ISP router, use device-level settings or put your own router behind it.
steps
Open Privacy and security, find Secure DNS, then choose a custom provider and use https://family.cloudflare-dns.com/dns-query.
Open Privacy & Security, find DNS over HTTPS, then use the custom provider URL https://family.cloudflare-dns.com/dns-query.
Check the browser first. Secure DNS can override the router and make it look like the router settings failed.
table
| Bypass | What it means | Practical response |
|---|---|---|
| Mobile data | Router DNS only covers Wi-Fi. | Set restrictions on the phone itself, not only the router. |
| VPNs | A VPN can send traffic around DNS filtering. | Block VPN app installs and remove existing VPN profiles. |
| Browser DoH | The browser may use its own DNS provider. | Set browser Secure DNS to the same family resolver. |
| New devices | A spare device can skip your rules. | Put the plan on the account or router, then remove private spare devices from the bedroom. |
Related next steps
Sources