Why a $0 router setting beats most paid filters
Cloudflare Families, NextDNS, OpenDNS — the five-minute setup that protects every device.
The underrated setting
The highest-leverage change you can make in your home — for every device on your WiFi — costs nothing and takes five minutes. Change your router’s DNS server to a family-safe one. See our full router/DNS guide.
Why it beats paid filters
- Protects every device: kid phones, school Chromebooks, smart TVs, Alexa, guests. No installation.
- Works even when an app is unmanaged: if the kid sideloads a browser, DNS still filters it.
- Free. Cloudflare for Families, OpenDNS FamilyShield, AdGuard DNS.
- Invisible. Kids can’t “uninstall” it.
What it doesn’t do
- Doesn’t apply on cellular data (only WiFi).
- Doesn’t replace per-device parental controls.
- Doesn’t filter inside encrypted chat apps.
- Can be bypassed by VPN apps on the kid’s device.
The upgrade: NextDNS
If you want more control — daily logs, per-device profiles, schedule-based rules, custom blocklists — NextDNS costs ~$20/year and works the same way. Free plan covers most families.
Stack, don’t substitute
DNS filtering + device-level controls + a conversation with your kid is the real stack. Not one-size-fits-all tool.
Common questions
Why does a free router setting beat a paid filter?
Because it protects every device on the WiFi with nothing installed — children’s phones, school Chromebooks, smart TVs, Alexa, even guests. It still works if a child sideloads a different browser, and there is nothing on the device for them to uninstall.
Which free service should I use?
Cloudflare for Families, OpenDNS FamilyShield or AdGuard DNS all cost nothing and take about five minutes to set. If you want daily logs, per-device profiles, scheduled rules and custom blocklists, NextDNS is around $20 a year and its free plan covers most families.
What does DNS filtering not cover?
It does not apply on cellular data, only on your WiFi. It does not replace per-device parental controls. It cannot filter inside encrypted chat apps. And a VPN app on your child’s device bypasses it entirely.
So should DNS filtering replace my other tools?
No — stack rather than substitute. DNS filtering plus device-level controls plus an actual conversation with your child is the real arrangement. No single tool covers the whole surface.