Why a $0 router setting beats most paid filters
Cloudflare Families, NextDNS, OpenDNS — the five-minute setup that protects every device.
The underrated setting
The highest-leverage change you can make in your home — for every device on your WiFi — costs nothing and takes five minutes. Change your router’s DNS server to a family-safe one. See our full router/DNS guide.
Why router DNS filtering beats paid filters
- Protects every device: kid phones, school Chromebooks, smart TVs, Alexa, guests. No installation.
- Works even when an app is unmanaged: if the kid sideloads a browser, DNS still filters it.
- Free. Cloudflare for Families, OpenDNS FamilyShield, AdGuard DNS.
- Invisible. Kids can’t “uninstall” it.
What router DNS filtering cannot do
- Doesn’t apply on cellular data (only WiFi).
- Doesn’t replace per-device parental controls.
- Doesn’t filter inside encrypted chat apps.
- Can be bypassed by VPN apps on the kid’s device.
The upgrade: NextDNS
If you want more control — daily logs, per-device profiles, schedule-based rules, custom blocklists — NextDNS is $1.99 a month or $19.90 a year and works the same way. The free tier NextDNS publishes is capped at 300,000 queries a month, which a household with a dozen connected devices can pass without doing anything unusual — so treat free as a trial rather than the plan.
Stack, don’t substitute
DNS filtering + device-level controls + a conversation with your kid is the real stack. Not one-size-fits-all tool.
Common questions
Why does a free router setting beat a paid filter?
Because it protects every device on the WiFi with nothing installed — children’s phones, school Chromebooks, smart TVs, Alexa, even guests. It still works if a child sideloads a different browser, and there is nothing on the device for them to uninstall.
Which free service should I use?
Cloudflare for Families, OpenDNS FamilyShield or AdGuard DNS all cost nothing and take about five minutes to set. If you want daily logs, per-device profiles, scheduled rules and custom blocklists, NextDNS is $1.99 a month or $19.90 a year. Its free tier NextDNS publishes is capped at 300,000 queries a month, which a household with a dozen connected devices can pass without trying, so treat free as a trial rather than the plan.
What does DNS filtering not cover?
It does not apply on cellular data, only on your WiFi. It does not replace per-device parental controls. It cannot filter inside encrypted chat apps. And a VPN app on your child’s device bypasses it entirely.
So should DNS filtering replace my other tools?
No — stack rather than substitute. DNS filtering plus device-level controls plus an actual conversation with your child is the real arrangement. No single tool covers the whole surface.
When parental controls change
Scams and platform changes move quickly. Roughly monthly we send new guides, changes to controls like these, and scams worth knowing about.
Free. No ads, no affiliate links, and we never sell or share your address.
What was checked, and when. The NextDNS free tier verified against the vendor’s own documentation on 2026-09-08. Not reached in that pass: US pricing.