How to Block Porn on Wi-Fi: One Router Setting, Every Device
Ten minutes at the router filters the whole house. The off switch is the part nobody plans for.
You can block porn on your Wi-Fi in about ten minutes, for free, with no app on any device.
One change on the router covers every phone, laptop, tablet, and TV that connects to your network. That is the good news.
The filter covers the whole house. The person who set it up can also remove it. If that person is you, read to the end before deciding this is solved.
What changing your router DNS actually does
Every time a device on your network opens a website, it first asks a DNS resolver to translate the site name into an address. Your router decides which resolver every device asks.
Point the router at a family-filtering resolver and adult sites simply stop resolving. The site name gets no address, the page never loads, and this happens for every device on the network without installing anything on them.1
This is the same mechanism behind most paid blockers. The router version is free because public filtering resolvers are free.
Set it up in ten minutes
- Open your router's admin page. On a device connected to your Wi-Fi, visit
192.168.1.1or192.168.0.1in a browser. One of the two works for most home routers. If neither loads, the address is printed on the router's sticker. - Log in. The admin password is on the same sticker unless someone changed it. It is not your Wi-Fi password.
- Find the DNS fields. Look under Internet, WAN, or DHCP settings. Switch DNS from automatic to manual.
- Enter a filtering resolver. Fill the primary and secondary fields with one of the pairs below, then save.
- Reconnect your devices. Turn Wi-Fi off and on again on each device, or reboot the router, so they pick up the new setting.
Three free resolvers do the filtering well:
To confirm it works, reconnect to Wi-Fi, open a private browsing window, and try a porn site you would normally reach. You should get an error or a block page instead.
The four ways router blocking fails
Router filtering is real protection against stumbling onto porn. It is weak protection against someone determined to reach it. Four gaps matter.
1. Mobile data walks around it. The filter lives on your Wi-Fi. Turn Wi-Fi off and the phone browses through its carrier, completely unfiltered. Every phone in the house carries its own exit.
2. Devices can override the router's DNS. Android's Private DNS setting sends queries to any resolver the user types in, encrypted, ignoring the router entirely.4 iPhones with iCloud Private Relay route Safari traffic through Apple's servers instead of your resolver.5 Browsers can do the same with encrypted DNS of their own.6 None of this requires technical skill. Each is one settings screen.
3. You know the admin password. If you set the filter up to stop yourself, you can undo it in under a minute at 1 am, and nobody will ever know. This is the quiet reason most self-imposed router filters die within a month.
4. Other networks exist. The coffee shop, the office, a friend's hotspot. The filter protects one building.
If the person you are blocking is you
Router filtering was designed for parents managing a household. The threat model assumes the person who holds the admin password wants the filter to stay.
When you are blocking for yourself, that assumption is exactly wrong. The 1 am version of you holds the same password as the 9 am version who set it up. A filter you can silently remove is a suggestion, not a boundary.
Two changes close the gap. First, move the filter onto the device itself, so it follows you onto mobile data and other networks. The setup takes minutes on Android, iPhone, and Windows, and the free options are covered in free porn blockers.
Second, make switching the filter off cost something. X Reset runs DNS filtering on the device and adds a self-chosen charge on days you relapse, so removing the block is no longer free and invisible. It is a commitment device, not medical treatment, and you can end the pact at any time.
Set the router up anyway
Ten minutes of setup removes porn from every screen in your house by default, protects guests and kids without touching their devices, and costs nothing.
Just be honest about what it is: ambient protection for the household. If your own habit is the problem, the router is the first layer, and the off switch in your pocket is the part that still needs an answer.
Common questions
Does router blocking work on mobile data?
No. The filter only applies to traffic that goes through your router. On mobile data the phone uses the carrier's DNS, so nothing is filtered. Device-level filtering is the only way to cover both.
Will other people on the network know I set this up?
They will only notice that adult sites stop loading. Free filtering resolvers do not send reports or per-site history to anyone. Blocking happens at the moment of the request.
Does a filtering DNS slow down the internet?
Not noticeably. Cloudflare, OpenDNS, and CleanBrowsing all run large public resolver networks, and a DNS lookup is a few milliseconds of any page load.
Source 1
Cloudflare 1.1.1.1 for Families
Official setup documentation for Cloudflare's family resolver, including the 1.1.1.3 and 1.0.0.3 addresses that block malware and adult content.
Read the setup docsSource 2
OpenDNS FamilyShield
Cisco's official setup guide for FamilyShield, the preconfigured resolver that blocks adult categories at 208.67.222.123 and 208.67.220.123.
Read the setup guideSource 3
CleanBrowsing Content Filters
Official description of CleanBrowsing's free filters, including the Adult Filter resolver addresses and forced safe search behavior.
Read about the filtersSource 4
Android Private DNS
Google's documentation of the Private DNS setting, which lets a device send encrypted DNS to any resolver regardless of the network's configuration.
Read the Android docSource 5
About iCloud Private Relay
Apple's explanation of Private Relay, which routes Safari browsing through Apple's infrastructure instead of the local network's DNS.
Read Apple's overviewSource 6
Firefox DNS over HTTPS
Mozilla's documentation of browser-level encrypted DNS, which can bypass the resolver configured on the router.
Read the Firefox docSources
- Cloudflare. 1.1.1.1 for Families setup documentation.
- Cisco OpenDNS. FamilyShield setup guide.
- CleanBrowsing. Free content filters.
- Google. Use Private DNS with Android.
- Apple. About iCloud Private Relay.
- Mozilla. DNS over HTTPS in Firefox.