Mamori / Guides

How to Block Porn on Your Home Wi-Fi

Updated

On this page
  1. What a router DNS filter covers
  2. Step 1: Choose a filter
  3. Step 2: Find your router's admin page
  4. Step 3: Change the DNS settings
  5. Step 4: Test it
  6. If your router will not let you change DNS
  7. What a router filter misses
  8. Making it harder to undo
  9. FAQ
  10. Where Mamori fits

Short answer: You can change the DNS setting on your router to a family-filter service, and every device on that Wi-Fi then asks a DNS server that refuses to resolve adult sites. Cloudflare for Families (1.1.1.3 and 1.0.0.3) and CleanBrowsing both offer this for free, and both publish router instructions. It only covers devices on your Wi-Fi: phones on mobile data, devices set to their own DNS, and VPNs all go around it.

Version note: Checked on 21 Oct 2026 against Cloudflare's router and setup pages (updated May 2026) and CleanBrowsing's router and bypass pages. Router menus differ by maker and firmware, so this guide uses the labels the providers themselves give and does not invent exact paths. Use your router's manual for the rest.

What a router DNS filter covers

When a device opens a website, it asks a DNS server to turn the name into an address. Cloudflare's router page says: "Configuring 1.1.1.1 on your router applies the DNS setting to every device on your network. You do not need to change DNS settings on individual phones, computers, or other devices."

CleanBrowsing says the same of its filters: any device that uses DHCP, which it describes as the default for almost all consumer devices, inherits the router's DNS, including phones, tablets, laptops, smart TVs, gaming consoles and guest devices. It lists one exception: devices manually set to a different DNS server.

The filter only sees domain names, so a new or unlisted site can get through. CleanBrowsing's own guide says content filters "are not absolute solutions", and should be seen as "deterrents and complementary controls."

Step 1: Choose a filter

Both services are free to use for this. Pick one and use only that one on the router.

  • Cloudflare, Block malware and adult content with 1.1.1.1 for Families. IPv4: 1.1.1.3 and 1.0.0.3. IPv6: 2606:4700:4700::1113 and 2606:4700:4700::1003. Do not use 1.1.1.2 or 1.0.0.2 for this: those block malware only.
  • CleanBrowsing Adult Filter. IPv4: 185.228.168.10 and 185.228.169.11. IPv6: 2a0d:2a00:1::1 and 2a0d:2a00:2::1. CleanBrowsing says it blocks adult, pornographic and explicit sites, sets Google and Bing to SafeSearch, and does not block proxies, VPNs or mixed-content sites.
  • CleanBrowsing Family Filter. IPv4: 185.228.168.168 and 185.228.169.168. IPv6: 2a0d:2a00:1:: and 2a0d:2a00:2::. It also blocks proxy and VPN domains and mixed-content sites.

CleanBrowsing's free filters are described on its own page as "Throttled Service" with "No Support." For other options, see our DNS guide: DNS to Block Porn: Free Family DNS on Android, Step by Step.

Step 2: Find your router's admin page

  1. Find your router's gateway address. CleanBrowsing gives this command for Windows, in Command Prompt: ipconfig | findstr /i "Gateway". On Mac or Linux it gives netstat -nr | grep '^default'.
  2. Open that address in a browser. CleanBrowsing lists common addresses such as 192.168.1.1, 192.168.0.1 and 10.0.0.1, and Cloudflare lists http://192.168.1.1 or http://routerlogin.net as typical for some makers.
  3. Sign in with the router's admin username and password. Cloudflare says default credentials are often found under or behind the device, and CleanBrowsing says to check the sticker on the bottom of your router if you have never changed them.

Step 3: Change the DNS settings

Exact menus vary. Cloudflare says to "locate the section where DNS settings are configured," which "may be contained within categories such as WAN and IPv6 (Asus routers), IP (MikroTik routers), or Internet (Netgear routers)" and to consult your router's documentation. CleanBrowsing says to look for a section labeled "WAN," "Internet," "Network Settings," or "DHCP." CleanBrowsing also has guides for 49+ router models.

  1. Write down the DNS addresses that are currently set, in case you want to go back. Cloudflare recommends this.
  2. Switch the DNS from automatic to manual if your router asks, and enter your chosen addresses as primary and secondary.
  3. If there are IPv6 DNS fields, fill them in as well. CleanBrowsing warns that without this step, IPv6-capable devices "may bypass your IPv4 DNS settings entirely."
  4. Save the settings.
  5. Reboot the router. CleanBrowsing says many routers cache earlier DNS answers and a restart clears them.
  6. Allow time for devices to pick up the change. CleanBrowsing says to allow 5 to 10 minutes for DHCP changes to reach all devices, and that turning Wi-Fi off and on speeds it up.

If a wrong address makes the internet seem down, CleanBrowsing's fix is to log back in and correct it or set the DNS back to automatic.

Step 4: Test it

Cloudflare gives two test addresses to open after setup: https://malware.testcategory.com/ for malware, and https://nudity.testcategory.com/ to test whether adult content and malware domains are blocked. CleanBrowsing suggests running a DNS leak test and checking that results show its servers rather than your ISP's.

If your router will not let you change DNS

CleanBrowsing says some ISP-supplied routers lock the DNS fields. Its options are your own router behind the ISP gateway (with the ISP device in bridge mode or DMZ) or DNS set on each device. Your broadband provider may offer its own filter, so it is worth asking. The UK government's Kids Online Safety site lists "settings you can put on your home broadband to stop inappropriate content being accessed on devices connected to your WiFi network" among things to think about, and says instructions come from manufacturers and service providers. We have not tested any provider's filter.

What a router filter misses

  • Mobile data and other networks. The filter lives on your router, so it does not follow a phone to mobile data, a friend's house or a cafe. CleanBrowsing says device-level DNS "travels with the device when it leaves your network."
  • Devices with their own DNS. CleanBrowsing says a user can set a device to a non-filtering resolver, which overrides the router's DNS.
  • Browsers with encrypted DNS. CleanBrowsing says Firefox and Chrome have built-in encrypted DNS that can bypass router-level filtering. Chrome's help page calls the setting Use secure DNS: on a computer, select More > Settings, then Privacy and security > Security, and find it under Advanced. The page says it is on in automatic mode by default and that you can select a custom provider.
  • VPNs. CleanBrowsing says a VPN carries DNS lookups inside the tunnel, "completely bypassing your network's DNS configuration," and says no single solution blocks all VPNs.
  • iCloud Private Relay. Apple describes Private Relay, part of iCloud+, as protecting "web browsing in Safari, DNS resolution queries, and insecure http app traffic", and says a network can block it by returning no answer for two named hostnames.

Making it harder to undo

A router filter is only as firm as the router's admin password. Whoever knows it can switch the DNS back in a minute. A common approach is to have someone you trust set a new admin password that you do not know. For why no blocker can promise to be unremovable, see: Is There a Porn Blocker That Can't Be Turned Off?

CleanBrowsing's way to stop devices from using other DNS servers is a pair of router firewall rules: allow DNS (port 53) only to its servers and block the rest, or redirect it. It notes that many consumer routers do not expose firewall rules in their admin pages, and that these rules only affect standard DNS on port 53, not encrypted DNS. This is advanced: follow CleanBrowsing's "How to Lock DNS Settings" page.

A router filter also affects everyone in the home. In our view, tell the people you share the Wi-Fi with before you change it.

FAQ

Does this block porn on my phone when I am away from home?

No. It only applies while the phone is on your Wi-Fi. For phone-level blocking, see our guides for Android and iPhone: How to Block Porn on Android and Samsung Phones (Free Methods First) and How to Block Porn on iPhone (and Adult Websites on iPad Too).

How do Cloudflare and CleanBrowsing differ?

We have not compared their block lists and do not rank them. Cloudflare's family DNS has one option that blocks adult content. CleanBrowsing has an Adult Filter and a Family Filter, and says both set Google and Bing to SafeSearch.

Will it block adult sites in every language?

Neither provider's router page says anything about language or how many sites its list holds. Use the test links above. If a domain is wrongly allowed, Cloudflare lets you submit feedback on its categorisation, and you can also block a site on the device itself.

Can I undo it?

CleanBrowsing says changing router DNS is "completely safe and reversible": set the DNS fields back to "Automatic" or enter your ISP's addresses.

Where Mamori fits

A router filter covers the Wi-Fi at home. Mamori covers the phone, wherever it is. It is a newer app for iPhone, iPad and Android that blocks 2.5M+ adult sites across the whole phone, not just one browser. On Android it is an on-device DNS filter using Android's VpnService, with no remote VPN server, no browsing logs and nothing uploaded. On iPhone and iPad it uses Apple's Screen Time web content filter plus its own blocklist.

It locks before you can switch it off: a cooldown timer, a random phrase, a PIN or passphrase, and a trusted person can hold the PIN.

Honest limits: Android allows only one VPN at a time, so another VPN or blocker that takes the slot switches Mamori's filter off. No blocker replaces support from people or a professional. Mamori is built for adults blocking for themselves. For a child's device, use Screen Time or Family Link as the base layer. It has no accountability reports.

There is a 7-day free trial on the monthly and annual plans, plus a one-time lifetime option. No account. No tracking.

Related guides

Porn Blockers and VPNs: How They Interact on Android and iPhoneDoes a VPN bypass a porn blocker? It depends on how the blocker works. Android allows one VPN at a time. What that means, plus the iPhone side. How to Block JAV and Hentai SitesHow to block JAV and hentai sites: free SafeSearch, family DNS and Screen Time options, why list coverage matters, and how to add what slips through. Porn Blockers Compared: DNS, Screen Time, Apps and Router FiltersPorn blockers compared: Screen Time, Family Link, DNS filters, VPN-based apps, extensions and router filters. What each covers and how it is undone.

Sources

Last checked 21 Oct 2026. This guide is general information, not medical advice.