Best Family Safe DNS
Family-safe DNS servers block adult content, malware, and phishing domains at the network level. Set them on your router and every device is protected automatically.
Updated March 2026
Which DNS servers have family safety filters?
| Provider | Primary | Secondary | What it blocks |
|---|---|---|---|
| CleanBrowsing Family | 185.228.168.168 | 185.228.169.168 | Adult content, VPNs, proxies, mixed-content sites |
| OpenDNS FamilyShield | 208.67.222.123 | 208.67.220.123 | Adult content (preconfigured, no account needed) |
| AdGuard Family | 94.140.14.15 | 94.140.15.16 | Adult content + ads and trackers |
| Cloudflare 1.1.1.3 | 1.1.1.3 | 1.0.0.3 | Malware + adult content |
| Quad9 | 9.9.9.9 | 149.112.112.112 | Malware and phishing only (no adult content filter) |
CleanBrowsing Family is the most restrictive. OpenDNS FamilyShield is the simplest to set up. Check any server's privacy properties before using it.
How to set family DNS on your router
- Log in to your router admin panel (usually 192.168.1.1 or 192.168.0.1)
- Find WAN, Internet, or DHCP DNS settings
- Set Primary DNS and Secondary DNS from the table above
- Save and reboot the router
- Every device on your network will now use the filtered DNS
For detailed steps: How to change DNS on your router
How to verify the filter is working
- Open a browser and try visiting a known adult domain — it should be blocked or redirected
- Use our DNS Dig tool to query a blocked domain through your DNS and confirm it returns 0.0.0.0 or NXDOMAIN
- Check your device's DNS settings to confirm the new server IPs are active
Platform-specific DNS guides
- Change DNS on your router — protects all devices
- Change DNS on Windows 11
- Change DNS on iPhone, iPad, and Mac
- Change DNS on Android
- Test DNS speed — find the fastest family DNS for your location
- Best private DNS servers
- Best gaming DNS servers
Frequently asked questions
How does family-safe DNS work?
Family-safe DNS providers maintain blocklists of adult content, malware, and other harmful domains. When a blocked domain is queried, the DNS server returns a safe page or an NXDOMAIN response instead.
Is DNS-level filtering enough?
DNS filtering blocks domains at the network level, which is effective but not foolproof. Determined users can bypass it by changing DNS settings. Combine it with device-level parental controls for stronger protection.
Should I set family DNS on the router or individual devices?
Setting it on your router protects every device on your network, including smart TVs and game consoles. This is the recommended approach for household-wide filtering.
Which family DNS blocks the most categories?
CleanBrowsing Family Filter is the most restrictive, blocking adult content, VPNs, proxies, and mixed-content sites. OpenDNS FamilyShield focuses on adult content. AdGuard Family adds ad-blocking.