Home Network

NextDNS

The most customisable DNS filtering option available. Block specific apps like TikTok or Instagram at the network level with a single toggle. See every domain every device in your home contacts.

Approach: DNS FilteringDifficulty: MediumCost: Free up to 300,000 queries per month (enough for most families). $19.90 per year for unlimited.Back to network overview
About home network controls

Router and DNS controls apply to every device on your home network simultaneously — phones, tablets, laptops, smart TVs, and gaming consoles — without installing anything on each device. They are the highest-leverage parental control layer available to parents.

⚠️ What network controls cannot do: They do not work when children switch to mobile data (4G/5G) instead of home WiFi. A VPN app on a child's phone bypasses DNS filtering. HTTPS prevents routers from reading page content — they can only block or allow entire domains, not individual pieces of content within a site.

Coverage at a glance

Yes

All WiFi devices

Yes via NextDNS app installed on device

Mobile data

High

Bypass resistance

20–30 minutes

Setup time

What it blocks

  • Adult content, malware, tracking, and advertising through network-wide ad blocking.
  • Specific apps by name such as TikTok, Instagram, Snapchat, and Discord with individual toggles.
  • Phishing, gambling, dating sites, and cryptocurrency mining scripts.
  • Custom domain lists you choose yourself.

What it cannot block

  • Content within allowed HTTPS domains.
  • Manual DNS override on a device if the router does not force DNS.

Step-by-step setup

Complete setup guide

  1. 1

    Create a free NextDNS account

    Go to nextdns.io and create an account. You will receive a unique configuration ID, for example abc123. Keep the dashboard open for the rest of setup.

  2. 2

    Enter your NextDNS addresses in the router admin panel

    Go to 192.168.1.1 → DNS settings. Your exact NextDNS DNS addresses are shown in your dashboard under Setup → Router. Enter them as Primary and Secondary DNS, then save and restart the router.

  3. 3

    Configure Security settings in the dashboard

    In the Security tab, enable Threat Intelligence Feeds, Google Safe Browsing, Cryptojacking Protection, and DNS Rebinding Protection. These activate automatically with no ongoing maintenance.

  4. 4

    Add blocklists in the Privacy tab

    Open Privacy → Blocklists → Add, then add OISD Full and Steven Black Unified. These block millions of known ad, tracking, and harmful domains automatically.

  5. 5

    Configure Parental Controls

    Open the Parental Control tab and use the individual app toggles. You can block TikTok, Snapchat, Instagram, or Discord at the DNS level with one click.

  6. 6

    Enable Logs and review weekly

    Turn on Logs in the Analytics tab. This shows every domain every device in your home contacted, organised by device and time. Use it as a conversation tool rather than covert surveillance.

Tip

The per-app blocking in the Parental Control tab is the feature that makes NextDNS worth the setup time. No TikTok on home WiFi becomes a single toggle instead of an argument about app deletion.

Warning

NextDNS logs every DNS query made by every device on your network. Be transparent with your child that the home network has monitoring. Use it as a conversation tool, not covert surveillance.