The internet is an incredible resource for learning, creativity, and connection. It is also a place where children can stumble onto content that is violent, sexual, exploitative, or simply not age-appropriate. Traditional parental-control apps installed on individual devices are a good start, but they are easy to circumvent and tedious to maintain across every phone, tablet, laptop, and smart TV in the household.
DNS filtering takes a fundamentally different approach. Because every device on your network must resolve domain names before it can load a website, controlling DNS gives you a single chokepoint that covers every device at once, without installing software on each one. This guide walks you through every parental-control feature available through a modern DNS filtering service like UnveilDNS and shows you how to build a layered protection strategy tailored to your family.
The broadest and most effective first line of defense is category-based blocking. UnveilDNS classifies websites into more than 40 content categories maintained by the Toulouse University Blacklist project, one of the most respected open-source classification databases in the world. Categories include:
You enable category blocking with a single toggle in Settings, then check the categories you want to block. The changes take effect across your entire network within seconds. There is no need to maintain your own blacklists or keep up with newly registered domains in each category; the upstream databases are refreshed automatically.
Category blocking is great for broad strokes, but sometimes you want surgical precision. Service blocking lets you block individual apps and platforms by name. UnveilDNS integrates the AdGuard service registry, which currently includes more than 180 services. Some of the most commonly blocked services for families:
Service blocking works at the DNS level, which means it blocks both the website and the app on every device simultaneously. A child cannot bypass it by switching from the TikTok app to tiktok.com in a browser, because both resolve through the same DNS domains.
Even if you allow access to search engines, you probably do not want your child seeing explicit results. UnveilDNS forces Safe Search on the major search engines by rewriting DNS responses at the protocol level:
forcesafesearch.google.comstrict.bing.comrestrict.youtube.com (Restricted Mode)safe.duckduckgo.comThis is enforced via CNAME rewriting in the DNS response. Your child cannot disable it in their browser settings, because the redirect happens before the browser even connects to the search engine. The Safe Search toggle applies to every device on the network.
YouTube deserves special attention because it is both an incredible educational resource and a potential gateway to harmful content. UnveilDNS gives you two options:
For most families, Restricted Mode strikes the right balance. It relies on YouTube's own classification system, community flagging, and machine-learning models to hide content that is violent, sexually suggestive, or otherwise unsuitable for younger viewers.
Blanket blocking is effective but sometimes too rigid. Schedule rules let you apply different filtering policies depending on the day and time. Common patterns include:
Each schedule rule specifies a name, target (all categories, specific services, or specific content categories), days of the week, start and end times, and timezone. Rules support crossing midnight, so a "9 PM to 7 AM" bedtime rule works correctly. You can create as many rules as you need and enable or disable them individually.
Not every family member needs the same level of filtering. UnveilDNS lets you register individual devices, each identified by a unique slug (a 6-character hex code). You can then use device-aware schedules and see per-device statistics on the dashboard.
Device types include PCs, smartphones, tablets, routers, smart TVs, game consoles, NAS devices, and IoT gadgets. You can name each device (e.g., "Emma's iPad", "Living Room TV") and choose its type for easy identification. The device slug is embedded in the DoH, DoT, or DoQ endpoint URL, allowing the DNS server to identify which device is making each query even when multiple devices share the same public IP.
For families, this means you can see exactly which device visited which sites, how many queries were blocked per device, and when each device was last active. The Dashboard shows a breakdown by device with hit counts, blocked percentages, and a click-through to detailed per-device analytics.
Sometimes a parent needs to temporarily allow unrestricted access, for instance when a child needs to research a school project that touches on a blocked category, or when an adult wants to access a site that is normally filtered. The Pause feature provides a temporary bypass lasting from 5 minutes up to 2 hours.
While paused, all filtering rules are suspended for the profile. A visible countdown shows how much time remains, and filtering automatically resumes when the timer expires. This is far safer than disabling rules and forgetting to re-enable them.
Freshly registered domains are disproportionately associated with phishing, scams, and malware. Legitimate businesses rarely operate on domains that are only hours old. The Block NRD (Newly Registered Domains) toggle blocks domains registered within the last 30 days, cutting off a major vector for attacks targeting children through ads, pop-ups, and social engineering.
Similarly, Block Dynamic DNS blocks hostnames from providers like DuckDNS, No-IP, and Dynu. While these services have legitimate uses, they are heavily abused by malware command-and-control servers, phishing kits, and botnets. Blocking them adds another layer of protection.
Knowledge is power. The UnveilDNS dashboard gives you real-time visibility into every DNS query on your network. For parents, the most useful panels are:
You can filter the query log by device name or by blocked-only queries to quickly spot patterns. If you notice a child repeatedly hitting blocked domains in a specific category, it might be time for a conversation rather than just more blocking.
Every family is different, but here are general recommendations based on age:
| Age Group | Recommended Settings |
|---|---|
| Toddler (2-5) | Block ALL categories except educational. Block all services. Enable Safe Search. No schedules needed (device usage should be directly supervised). |
| Child (6-9) | Block adult, violence, gambling, drugs, weapons, hacking. Block social media services. Enable Safe Search + YouTube Restricted Mode. Block gaming after bedtime. |
| Pre-teen (10-12) | Block adult, violence, gambling, drugs. Allow some social media on weekends. Enable Safe Search. Schedule-based gaming limits. Monitor the dashboard weekly. |
| Teenager (13-15) | Block adult, malware, phishing. Allow social media with time limits. Enable Safe Search. Review the dashboard together monthly. Start conversations about online safety. |
| Older Teen (16-17) | Security-only blocking (malware, phishing, scams). Safe Search optional. Monitor but respect growing autonomy. Focus on education over restriction. |
The most effective deployment is at the router level. When your router uses UnveilDNS as its DNS server, every device that connects to your Wi-Fi is automatically protected, including smart TVs, game consoles, and IoT devices that do not support custom DNS apps.
For mobile devices that leave the house, configure DNS directly on the device as well (Android Private DNS for DoT, or an iOS configuration profile for DoH). This ensures protection follows the device even on mobile data or other Wi-Fi networks.
Set up DNS-based parental controls in under 5 minutes. Free plan available with 500,000 queries per month.
Get Started FreeDNS filtering is the most efficient way to enforce parental controls across an entire household. It works silently in the background, covers every device on the network, and cannot be bypassed by simply uninstalling an app. Combined with schedule-based rules, per-device identification, and real-time monitoring, it gives parents the visibility and control they need while respecting the balance between safety and autonomy as children grow.
The key is to start with strong protections for younger children and gradually loosen them as kids demonstrate responsible behavior. Use the dashboard not as a surveillance tool but as a conversation starter. And remember: the goal is not to block the entire internet, but to create a safer environment where children can explore, learn, and grow.