The Easiest Thing You Can Do

There is one step you can take today, in about five minutes, that will protect every device in your home at once. No software to install. No apps to buy. No account to create.

It is called changing your DNS.

What is DNS?

DNS stands for Domain Name System. Think of it like a phonebook. Just as a phonebook converts a person's name into their phone number, DNS converts a website name into the numerical address a computer needs to find it.

Every time you visit a website, open an app, or stream a video, your device first sends a DNS query to look up the address. By default, these queries go to your Internet Service Provider's DNS servers, which offer no content filtering at all.

Here is the key insight: because every internet connection begins with a DNS query, DNS is the ideal place to filter content. If you can control DNS, you can control what websites are reachable on your network, before any content ever loads.

Why your router is the best place to start

The biggest advantage of configuring DNS at the router level is coverage. One change on your router protects every device on your network automatically: laptops, phones, tablets, smart TVs, gaming consoles, and even guest devices.

There is no software to install and no per-device setup required. You change one setting in one place, and your entire home is covered.

CleanBrowsing's Family Filter

CleanBrowsing is a free DNS filtering service that creates safe browsing experiences on your network. They offer three free filters, each building on the previous one:

• Security Filter — Blocks phishing, spam, malware, and malicious domains. Does not block adult content.
• Adult Filter — Blocks all adult, pornographic, and explicit sites. Does not block proxy or VPN domains, and allows mixed-content sites like Reddit.
• Family Filter — The most protective option. Blocks all adult content, enforces SafeSearch on Google, Bing, and YouTube, and blocks mixed-content sites like Reddit. Also blocks proxy and VPN domains that are used to bypass filters, and blocks malicious and phishing domains. Recommended for families with children.

We recommend the Family Filter because it provides the most comprehensive protection for a household with children.

The numbers you will need

To set up the Family Filter, you will enter two numbers into your router. These are called DNS server addresses:

That is it. Those two numbers are what make the filtering work.

How to change DNS on your router

The process is similar for most routers. Here are the general steps that work for most brands and models:

1. Log in to your router's admin panel. Open a web browser and type your router's gateway address. The most common addresses are 192.168.1.1 (most TP-Link, Netgear, ASUS, and Linksys routers), 192.168.0.1 (some D-Link, Netgear, and ISP routers), or 10.0.0.1 (Comcast/Xfinity, Google Fiber). You will need your router's admin username and password. If you never changed these, check the sticker on the bottom of your router.
2. Find the DNS settings. Look for a section labeled "WAN," "Internet," "Network Settings," or "DHCP." The DNS fields are usually found there.
3. Enter the CleanBrowsing Family Filter numbers. Replace the existing DNS addresses (or switch from "Automatic" to "Manual") and enter: Primary DNS 185.228.168.168, Secondary DNS 185.228.169.168.
4. Save and apply. Click "Save," "Apply," or "OK" to confirm the changes.
5. Reboot your router. Many routers cache previous DNS responses. Rebooting clears that cache so all new queries use the updated servers.

Step-by-step for popular router brands

Every router brand places DNS settings in a slightly different location. Click your brand below for specific instructions:

How to check that it is working

After you have changed the DNS and rebooted your router, you can verify the filter is active:

• Quick browser test: Visit CleanBrowsing's DNS Leak Test and run a test. The results should show CleanBrowsing's servers (look for IPs in the 185.228.168.x range). If you see your ISP's DNS servers instead, the change has not taken effect yet.

If the test still shows your old DNS servers, reboot your router again. It can take 5 to 10 minutes for the change to reach all devices. Toggling WiFi off and back on on each device will speed this up.

What you get for free

CleanBrowsing's free filters come with no strings attached:

• No registration required — just point your DNS and it works.
• No tracking — CleanBrowsing does not log or sell your DNS queries.
• No query limits — unlimited DNS queries at no cost.
• Encrypted DNS supported — DNS over HTTPS and DNS over TLS are available for all free filters.

A note about IPv6

If your network uses IPv6 (most modern networks do), you should also enter the IPv6 DNS addresses if your router supports it. Without this step, some devices may bypass your filter by resolving queries over IPv6 using your ISP's default servers.

The Family Filter's IPv6 addresses are:

On most routers, IPv6 DNS settings are on the same page as the IPv4 settings. Some routers have a separate "IPv6" tab. If your router does not support IPv6 DNS configuration, you can disable IPv6 on the router's WAN settings to force all traffic through IPv4 where your filter is active.

That is it

One change. Two numbers. Five minutes. Every device in your home is now protected.

This is not the only step you should take, but it is the best first step. It requires no technical expertise, no software, and no cost. And it works immediately.

That said, this is far from a full solution. DNS filtering only protects devices connected to your home network — it does nothing for phones on cellular data, school WiFi, or any network outside your home. It also does not filter content within apps, does not enforce SafeSearch on all platforms, and can be bypassed by determined teens. A proper device-level filter, like the ones we install at our filter drives, provides protection that follows the phone wherever it goes. Think of this as the safety net for your home, not the whole plan.