Home › Topic Guides › Router & DNS filtering

Router & DNS: the highest-leverage family setting

One setting at the router protects every device. Here’s the setup, the services, and the gotchas.

Topic guide·Last reviewed 2026-04-22·2 min read·by Lexeprint Inc.
The highest-leverage setting in the house. Changing one DNS value on your router protects every device on your WiFi — kid phones, school Chromebooks, smart TVs, Alexa, even the dog cam.

What DNS filtering does (and doesn’t)

DNS is the phone book of the internet. Filtering DNS means your router refuses to look up addresses for categories you’ve chosen to block (adult content, gambling, phishing). It’s invisible on the device — nothing to install.

What it doesn’t do: replace per-device parental controls, filter on cellular data (only WiFi), or read encrypted content.

Services to consider

  • Cloudflare for Families — free. Two flavors: malware-only (1.1.1.2) or malware + adult (1.1.1.3).
  • OpenDNS FamilyShield — free. 208.67.222.123 / 208.67.220.123.
  • NextDNS — freemium. Per-family dashboard, granular category toggles, block-list imports, daily schedules.
  • AdGuard DNS Family Protection — free. Also blocks ads.

How to set it up

  1. Log in to your router’s admin page (usually 192.168.1.1 or 192.168.0.1).
  2. Find DHCP or DNS settings.
  3. Set primary/secondary DNS to your chosen service’s values.
  4. Save and reboot the router.
  5. Test by visiting a known-blocked URL — the page should fail to load.

Hardware parental-control routers

If you want more granular control (schedule by device, time limits, usage reports), hardware routers can help:

  • Eero (Amazon) — Eero Plus subscription adds family profiles and content filtering.
  • Gryphon — family-focused router with deep parental controls.
  • Circle Home Plus — attaches to your existing router; per-device time limits and filtering.

Gotchas

  • DNS-over-HTTPS (DoH): modern browsers can bypass your router’s DNS by using their own encrypted DNS. Disable DoH in kid browsers, or block it at the router level.
  • VPN on the kid’s device bypasses DNS filtering entirely. Disallow VPN apps.
  • Cellular data: DNS filtering doesn’t apply when the phone is off WiFi.