How to properly define devices in UnveilDNS SaaS

Most DNS filtering services treat your entire network as a single entity. You see aggregate numbers — total queries, total blocks — but you have no idea which device generated what traffic. UnveilDNS takes a different approach. Every device on your network can be individually registered, tracked, and controlled. This guide walks you through how device management works, what the different modes mean, and how to get the most out of per-device filtering.

Why Register Devices?

When you register a device in UnveilDNS, you unlock three powerful capabilities that are simply impossible with a one-size-fits-all DNS setup:

• Per-device analytics — see exactly which device is accessing which domains. Identify which smart TV is phoning home to tracking servers, or which phone is generating the most ad traffic. The Dashboard breaks down queries, blocked domains, and hit counts by device.
• Per-device rules — create schedule-based filtering rules that target specific devices. Block social media on a child's tablet during homework hours while leaving adult devices unaffected. This is the foundation of effective parental controls.
• Easier troubleshooting — when something breaks ("Dad, the internet isn't working!"), you can immediately see which device is affected and whether DNS filtering is the cause. No more guessing.

Every device you register receives a unique 6-character hexadecimal slug — for example, 3f8a1c. This slug is appended to your profile's config ID to form device-specific DNS endpoints. If your config ID is a6823fd00560 and your device slug is 3f8a1c, the device connects using a6823fd00560-3f8a1c as its identifier in DoH, DoT, and DoQ URLs.

Device Types

When you add a device, you select a type. This is a purely visual label — it does not change how filtering works. The type determines the icon displayed next to the device name in your Dashboard, Analytics, and Settings pages, helping you quickly identify devices at a glance.

The available types are:

• PC — desktops and laptops. The most common type for workstations and personal computers.
• Smartphone — iPhones, Android phones, and other mobile devices.
• Tablet — iPads, Android tablets, and similar devices.
• Router — your home or office router. If you configure DNS directly on the router, all traffic from devices behind it flows through that single entry point.
• TV — smart TVs such as Samsung, LG, Fire TV, Apple TV, and Roku.
• Game Console — PlayStation, Xbox, Nintendo Switch, and Steam Deck.
• NAS — network-attached storage devices like Synology and QNAP.
• IoT — smart home devices including cameras, thermostats, smart speakers, and doorbells.
• Other — anything that does not fit the categories above.

Device Modes — Static vs Dynamic

This is the single most important setting when configuring a device. The mode determines how UnveilDNS interacts with the device's IP address and whether automatic linking occurs. Understanding this well saves you confusion down the road.

Static Mode

Static mode is designed for devices that connect directly to UnveilDNS using encrypted DNS — DoH, DoT, or DoQ. When a device in static mode sends a DNS query, UnveilDNS detects the device's public IP address and automatically links it to your profile. This is called Auto IP Linking.

Why does this matter? Because once the IP is linked, the device is also protected on plain DNS (port 53). Many apps and operating system services bypass encrypted DNS and fall back to standard port 53 queries. With the IP linked, those queries are still filtered by your profile. Auto IP has a 5-minute cooldown to prevent rapid changes when multiple devices connect in quick succession.

Static (No Auto-Link) Mode

This mode works identically to Static for encrypted DNS — the device still uses its slug in DoH/DoT/DoQ URLs and appears in per-device analytics. The difference is that it does not automatically update the linked IP address.

Use this mode when your device has a fixed public IP — for example, a home router with a static IP from your ISP, or a server in a datacenter. You set the linked IP once (manually in Settings or via Dynamic DNS), and you do not want a phone connecting from a coffee shop to overwrite it.

Dynamic Mode

Dynamic mode is for devices that access the internet through your router's DNS settings rather than connecting directly to UnveilDNS. These are typically IoT devices, game consoles, or smart TVs where configuring DoH/DoT is not practical. The device is identified by its slug only when using encrypted DNS endpoints. No auto-IP linking occurs.

Comparison

Setting Up a Device Step by Step

1. Navigate to Settings and click the Devices tab.
2. Click Add Device.
3. Enter a descriptive name — for example, "Dad's iPhone" or "Living Room TV". Names accept letters, numbers, spaces, and hyphens.
4. Select the device type (smartphone, TV, game console, etc.).
5. Choose the mode. For most personal devices, Static is recommended.
6. Click Save. The device is assigned a unique 6-character slug (e.g., a1b2c3). This slug is permanent — renaming the device later does not change it.
7. Click the device row to expand it and view the device-specific endpoints:
   • DoH: https://dns.yourdomain.com/dns-query/configid-a1b2c3
   • DoT: tls://configid-a1b2c3.yourdomain.com
   • DoQ: quic://configid-a1b2c3.yourdomain.com
8. A QR code is displayed for each device, making mobile setup effortless — scan it with your phone's camera to copy the endpoint URL.

Per-Device Filtering with Schedules

Once your devices are registered, you can create schedule rules that target specific devices. This is where device management becomes truly powerful for families and small businesses.

For example, you can block social media and gaming services on "Kid's iPad" between 8:00 AM and 3:00 PM on weekdays, while leaving "Dad's Phone" completely unrestricted. Or block all non-essential traffic on office workstations after business hours.

To set this up:

1. Go to Settings and click the Schedule tab.
2. Click Add Rule.
3. Give the rule a name (e.g., "School hours — no social media").
4. Select the target — "Services" to block specific apps, "Categories" for content categories, or "All" for complete blocking.
5. Choose the days and time range.
6. Select which devices the rule applies to.
7. Save. Devices not selected are completely unaffected by the rule.

Schedule rules support timezone-aware evaluation and even handle overnight time ranges (e.g., 10:00 PM to 6:00 AM). You can also temporarily pause all filtering for a device using the Pause feature in the Schedule tab — handy for quick exceptions without deleting rules.

Device Discovery Tool (Windows)

Registering devices one by one is fine for a handful of devices. But if you have a dozen smart home gadgets, multiple computers, and a few phones, the process gets tedious. That is where the Device Discovery tool comes in.

Available as a Windows executable (download link in Settings, Devices tab), the tool:

• Scans your local network using ARP to find all connected devices.
• Auto-identifies device types by looking up the manufacturer from the MAC address. Apple and Samsung devices are tagged as smartphones, Sony and Nintendo as game consoles, Synology as NAS, and so on.
• Lets you select and register multiple devices in one click. Choose which ones to add, edit names if needed, and they are pushed to your profile instantly.
• Filters duplicates — devices already registered in your profile are hidden automatically.

Best Practices

• Name devices clearly. Include who uses them: "Mom's Laptop", "Kids Tablet", "Office Printer" — not "Device 1", "Device 2". Your future self will thank you when reviewing analytics.
• Use Static mode for personal devices (phones, laptops). Auto IP linking keeps plain DNS protection working even when you switch between Wi-Fi networks or mobile data.
• Use Static No Auto-Link for your router. If your router has a static IP from your ISP, you do not want a phone connecting from a different network to overwrite the router's linked IP. Set the IP once and lock it.
• Use Dynamic for IoT devices that cannot be configured with DoH/DoT. They will be filtered through the router's DNS settings, and you can still identify them by slug if you ever set up encrypted DNS on them.
• Review devices periodically. Remove old phones, retired laptops, and devices no longer on your network. A clean device list makes analytics more meaningful.
• Remember: slugs are permanent. Renaming a device does not change its slug or break any existing configuration. You can rename freely without reconfiguring endpoints on the device.