Why a $0 router setting beats most paid filters
Cloudflare Families, NextDNS, OpenDNS — the five-minute setup that protects every device.
The underrated setting
The highest-leverage change you can make in your home — for every device on your WiFi — costs nothing and takes five minutes. Change your router’s DNS server to a family-safe one. See our full router/DNS guide.
Why it beats paid filters
- Protects every device: kid phones, school Chromebooks, smart TVs, Alexa, guests. No installation.
- Works even when an app is unmanaged: if the kid sideloads a browser, DNS still filters it.
- Free. Cloudflare for Families, OpenDNS FamilyShield, AdGuard DNS.
- Invisible. Kids can’t “uninstall” it.
What it doesn’t do
- Doesn’t apply on cellular data (only WiFi).
- Doesn’t replace per-device parental controls.
- Doesn’t filter inside encrypted chat apps.
- Can be bypassed by VPN apps on the kid’s device.
The upgrade: NextDNS
If you want more control — daily logs, per-device profiles, schedule-based rules, custom blocklists — NextDNS costs ~$20/year and works the same way. Free plan covers most families.
Stack, don’t substitute
DNS filtering + device-level controls + a conversation with your kid is the real stack. Not one-size-fits-all tool.