How to Block Adult Sites on Android: Free DNS + 4 Ways (2026)

Short answer: the fastest free fix is Private DNS. On your child's phone open Settings → Network & internet → Private DNS (on Samsung: Connections → More connection settings → Private DNS), pick Private DNS provider hostname, enter family.cloudflare-dns.com and tap Save. Adult sites stop loading on Wi-Fi and mobile data — until someone switches it off.

That last part is the catch with every free method. For a filter your child can't turn off, it has to run on the phone and be locked by you.

Block it in 2 minutes →

Your child doesn't have to be clever

Five ordinary taps get around almost every free filter:

1. Open a different browser. A filter set up in Chrome never sees Firefox, Opera or Samsung Internet.
2. Open an incognito tab. Private browsing ignores most blocklists by design.
3. Turn off Wi-Fi. On mobile data a filter set on your home router simply isn't there. (Private DNS on the phone itself closes this one.)
4. Install a free VPN. One tap in the Play Store routes around any network-level filter.
5. Tap a link. A link in WhatsApp skips search entirely, so SafeSearch never sees it.

That's the whole problem. Every free tool closes one or two of these doors and leaves the rest open — which is why so many parents set up SafeSearch, feel covered, and still find something in the history a month later.

Step by step: a free family filter with Private DNS

Private DNS is built into Android 9 and later. Set it on the child's phone and it filters on every network — home Wi-Fi, school Wi-Fi and mobile data.

1. On your child's phone, open Settings.
2. Tap Network & internet → Private DNS. Can't see it? Search Settings for "Private DNS". On some phones it sits under Advanced. On Samsung, see the next section.
3. Choose Private DNS provider hostname.
4. Type one of the family-filter hostnames below exactly as shown.
5. Tap Save.

Pick one; you can't stack them. CleanBrowsing's Family Filter is the strictest, and it also blocks Reddit. Cloudflare's is the lightest.

Sources: Google Android Help, Cloudflare, AdGuard DNS, CleanBrowsing.

Samsung Galaxy phones and tablets

Samsung puts Private DNS in a different place:

1. Open Settings → Connections.
2. Tap More connection settings → Private DNS.
3. Choose Private DNS provider hostname, type one of the hostnames above, and tap Save.

The steps are the same on Galaxy phones and Galaxy tablets (Samsung support).

Tablets, including Wi-Fi-only ones: Private DNS is set per device, so set it on each tablet your child uses. On a shared family tablet it filters everyone who uses it, adults included.

Samsung Internet: set Private DNS as above, then open an adult domain in Samsung Internet to confirm it's blocked there too, not just in Chrome.

Other Android tablets (Lenovo, Xiaomi, Realme and others): search Settings for "Private DNS". Menu names vary by brand.

What the free tools actually cover

Do these anyway. They cost nothing and they raise the floor:

• Private DNS on the phone — free, built into Android 9 and later, and works on Wi-Fi and mobile data (steps above). Known adult domains stop loading in every browser that uses the phone's DNS. Anyone who opens Settings can switch it off.
• Lock SafeSearch — in Family Link, open your child's profile → Controls → Content restrictions → Google Search. This strips explicit images and videos out of Google results and your child can't switch it back off. It covers Google only, and only searches.
• Family DNS on your Wi-Fi — point your router at CleanBrowsing Family or OpenDNS FamilyShield. Known adult domains stop loading on every device in the house. It covers your house only.
• Family Link site blocking — approve or block sites one at a time, in Chrome only. There are no content categories, so it can't keep pace with millions of adult domains.

The ceiling is the same for all of them. They protect a search engine, a place or a single app — or, with Private DNS, the whole phone, but only until someone changes one setting. None of them can stop your child switching them off or installing a VPN.

*Unless the browser uses its own secure DNS or built-in VPN — see "Why free methods stop working" below.

Why free methods stop working (and what to check)

If you set something up and adult sites still open, it's almost always one of these:

1. Private DNS was switched off or changed. Open Settings → Private DNS and check your hostname is still there. It takes a few taps to undo, and nothing tells you when it happens.
2. Chrome is using its own secure DNS. Chrome has a "Use secure DNS" setting (Chrome → Settings → Privacy and security → Use secure DNS) where anyone can pick a different provider. Google says the setting isn't available when parental controls are on, so a Family Link–supervised child can't change it (Chrome Help).
3. Another browser with its own DNS or a built-in VPN. Some browsers route around the phone's DNS. If the problem only happens in one browser, that browser is the cause.
4. A VPN app. A VPN sends traffic, DNS included, through its own servers, so a DNS filter never sees it. CleanBrowsing's Family Filter blocks known VPN and proxy domains, but new ones appear all the time.
5. The filter is on the router, not the phone. A router filter stops at your front door. On mobile data or at a friend's house it isn't there. Private DNS on the phone fixes this.
6. SafeSearch only covers search results. A link sent in a chat never goes through Google Search, so SafeSearch never sees it.

Free tools fail quietly. You find out from the history, not from an alert. A device-level filter that your child can't switch off is the only fix for 1, 3 and 4.

What closes all five

Two things have to be true: the filtering has to run on the phone rather than on the network, and your child must not be able to turn it off. That's what ParentalEdge is built to do.

• Every browser, including incognito. It reads the address as the page opens — Chrome, Samsung Internet, Firefox, a private tab — and blocks it before it loads.
• 11 harmful categories blocked at every age from the first minute — adult content, gambling, violence, dating and more — plus social media, messaging and forums for under-16s, out of 31 you can control, updated as new sites appear.
• SafeSearch forced on Google, Bing, DuckDuckGo and Yandex, and re-applied if your child turns it off.
• Works on mobile data, because it isn't a network filter.
• VPN and proxy apps blocked, so that escape route closes too.
• Can't be uninstalled on Android without your PIN.

Setup takes about two minutes. You pick your child's age and adult content, gambling and violence are blocked from the first minute — there's no blocklist to build by hand.

Start your 7-day free trial →

Frequently asked questions

Does blocking adult content work in incognito mode?
Most methods fail in incognito — that's the point of private browsing. ParentalEdge is an exception: it reads the address being opened in any browser, private tabs included, and blocks the page before it loads.

Can my child bypass the filter with a VPN?
A free VPN is the most common way kids get around DNS and router filters. ParentalEdge blocks VPN and proxy apps, so that route is closed.

Will my child know it's installed?
Yes, and that's deliberate. This isn't a spy app — there's no hidden mode. Your child knows the filter is there, and the daily report exists so you can have a calm conversation about what came up, not run surveillance.

Does this work on an iPhone too?
Yes, web filtering also works on iPhone and iPad. But Apple's restrictions mean no app on iOS — ours or anyone's — can report which apps your child used or what they searched. For blocking and visibility, Android is the more complete platform.

Is there a completely free way to do this?
Not a complete one. Private DNS, SafeSearch, router DNS and Family Link are all free and worth setting up, but your child can switch Private DNS off or route around it with a VPN, and the others leave second browsers and incognito open. ParentalEdge is ₹999/year + GST in India, with a 7-day free trial and no upfront payment.

How do I block adult websites on my phone permanently?
No free setting is permanent. Private DNS, SafeSearch and router DNS can all be undone in Settings by anyone who knows where to look, and a VPN app walks around all of them. For a block that stays on, use a filter that runs on the phone and needs your PIN to remove. ParentalEdge works that way on Android, and covers every browser including incognito.

How do I block adult content on a Samsung Galaxy tab?
Open Settings → Connections → More connection settings → Private DNS, choose Private DNS provider hostname, enter a family filter such as family.cloudflare-dns.com, and tap Save. It works the same on Galaxy phones and tablets, on Wi-Fi and mobile data. Then check that an adult site is blocked in Samsung Internet as well as in Chrome.

I set up a DNS filter and it stopped working. Why?
Usually one of three things. Private DNS was switched back to Automatic or Off, a browser is using its own secure DNS, or a VPN app is installed. Check Settings → Private DNS first, then the browser's own DNS setting, then the app list for VPNs.

One thing worth saying plainly

Blocking adult content isn't about catching your child at something. It's about making sure a curious ten-year-old doesn't get shown something they can't unsee, on a phone you gave them. Set the floor, tell them it's there, and you can stop patrolling.

Block adult content on your child's Android →