Frequently Asked Questions

Yes, internet filtering is crucial for protecting families from harmful content. Studies show that 95% of children ages 8-16 have encountered inappropriate material online, often accidentally. Filtering provides multiple layers of protection and helps create healthy digital boundaries.

However, filtering should be combined with education, open communication, and trust-building for maximum effectiveness.

There are solutions at every price point:

• Free: DNS filtering (OpenDNS FamilyShield, CleanBrowsing), built-in device controls (iOS Screen Time, Android Family Link)
• $0-50/year: Premium DNS services with custom filtering
• $50-100/year: Filtering software like Qustodio, Net Nanny (5-10 devices)
• $100+/year: Accountability apps (Covenant Eyes), enterprise solutions for institutions

Many families find that combining free DNS filtering with built-in device controls provides excellent protection without any cost.

While no solution is 100% bypass-proof, layered protection makes bypassing extremely difficult:

• Network-level DNS filtering blocks attempts across all devices
• Router-level controls prevent DNS server changes
• Device-level restrictions require passwords to modify settings
• Monitoring software alerts you to bypass attempts

The goal isn't to create an impenetrable fortress, but to make accessing inappropriate content difficult enough that it's not worth the effort. Most importantly, build trust and maintain open communication about why protection exists.

Modern filtering solutions have minimal impact on internet speed:

• DNS filtering: Adds 1-5ms latency (imperceptible to users)
• Software filtering: Uses <2% CPU on modern devices
• Router controls: No noticeable impact with current-generation routers

If you experience significant slowdowns, it's usually due to misconfiguration rather than the filtering itself. Check our slow internet troubleshooting guide for solutions.

Filtering proactively blocks access to inappropriate content before it can be viewed. Think of it like a fence that prevents entry to dangerous areas.

Monitoring tracks and reports internet activity after it happens, allowing you to see what was accessed. Think of it like a security camera recording what happens.

The most effective approach combines both: filtering to prevent most issues, and monitoring to catch what slips through and address patterns of concern.

Age recommendations vary by device type:

• Ages 3-5: Supervised tablet use with dedicated kids' apps only
• Ages 6-9: Supervised computer/tablet use, no smartphone
• Ages 10-12: Basic phone for communication, heavily filtered
• Ages 13-15: Smartphone with strong filtering and monitoring
• Ages 16+: Gradual removal of restrictions as maturity increases

These are guidelines, not rules. Every child develops differently. See our age-appropriate internet guide for detailed recommendations.

Yes, transparency is crucial. Hidden monitoring damages trust and can backfire when discovered.

Instead, frame it positively:

• "We use filtering to protect our family, just like we lock doors and wear seatbelts"
• "These tools help us all make better choices online"
• "As you demonstrate maturity, we'll gradually adjust the restrictions"

Explain that protection exists because you care about their wellbeing, not because you don't trust them.

For minors, parental oversight is responsible guardianship, not privacy invasion. Courts consistently uphold parents' right and responsibility to monitor children's online activity.

However, implement filtering with appropriate boundaries:

• Be transparent about what's monitored and why
• Respect age-appropriate privacy (don't read every text message to a 16-year-old)
• Focus on patterns and red flags, not micromanaging every interaction
• Gradually reduce monitoring as children demonstrate maturity

For adults seeking accountability, voluntary monitoring with a trusted partner is a powerful personal growth tool.

DNS filtering blocks websites by preventing your device from finding their internet address. It works at the network level, protecting all devices automatically.

• Pros: Simple setup, protects all devices, no software to install, free options available
• Cons: Can be bypassed with VPNs, can't filter HTTPS content, all-or-nothing approach

Software filtering installs programs on individual devices to analyze and block content in real-time.

• Pros: Device-specific controls, can filter HTTPS content, includes monitoring features
• Cons: Requires installation on each device, ongoing subscription costs, can impact performance

Best practice: Use both. DNS filtering as your network-wide foundation, plus software filtering on key devices for granular control.

This is the most common filtering issue. Common causes:

1. DNS cache: Your device is still using old DNS information. Flush your DNS cache
2. Multiple DNS settings: DNS set on both router AND device (device wins). Check device settings
3. VPN or proxy: Some apps bypass your DNS settings. Check for VPN apps
4. DNS over HTTPS (DoH): Browsers may bypass system DNS. Disable DoH in browser settings
5. Mobile data: DNS only works on WiFi. Mobile data uses carrier DNS

See our complete DNS troubleshooting guide for step-by-step solutions.

VPNs are a common bypass method, but can be blocked:

• Router level: Block known VPN ports (1194, 500, 4500) and protocols
• Device level: Restrict app installation (iOS Screen Time, Android Family Link)
• DNS level: Some DNS services (NextDNS, OpenDNS) can block VPN domains
• Monitoring: Software like Bark alerts you when VPN apps are installed

For iOS devices, prevent VPN profile installation by enabling "Screen Time" and disallowing "VPN & Device Management" configuration changes.

Yes! Mesh systems (Google WiFi, Eero, Orbi, etc.) fully support filtering:

• DNS filtering: Set custom DNS on the primary router/gateway (covers all mesh nodes)
• Built-in controls: Many mesh systems include parental controls (Eero Secure, Google WiFi Family WiFi)
• Guest networks: Create separate filtered networks for kids' devices

The mesh system acts as one unified network, so DNS changes on the main unit protect all connected devices automatically.

DNS over HTTPS (DoH) encrypts DNS requests, preventing DNS filtering from working. Modern browsers like Chrome, Firefox, and Edge increasingly enable DoH by default.

How to disable DoH:

• Chrome: Settings → Privacy → Security → Use secure DNS → Off
• Firefox: Settings → Privacy → Enable DNS over HTTPS → Off
• Edge: Settings → Privacy → Security → Use secure DNS → Off

Advanced option: Use router firewall rules to block DoH providers (Cloudflare 1.1.1.1, Google 8.8.8.8) and force traffic through your filtering DNS.

YouTube filtering is challenging but achievable:

1. YouTube Kids: Separate app with curated content (ages 3-12)
2. Restricted Mode: Built-in filter (imperfect, but free). Lock it with account supervision
3. Supervised accounts: Create child accounts under Family Link (Android) or Screen Time (iOS)
4. Browser extensions: Video Blocker, DF YouTube blocks recommended videos
5. Software filtering: Bark, Qustodio can block specific YouTube channels/keywords

Complete guide: YouTube Filtering Methods

DNS filtering only works on WiFi because you can't control your mobile carrier's DNS servers.

Solutions for mobile data protection:

• Device-level controls: iOS Screen Time and Android Family Link work on both WiFi and cellular
• Carrier family plans: Verizon Smart Family, AT&T Secure Family add filtering to mobile data
• Filtering apps: Qustodio, Net Nanny, Bark filter on both WiFi and cellular
• VPN-based filtering: NextDNS or CleanBrowsing VPN profiles filter all traffic

No, almost any router can implement DNS filtering by changing its DNS server settings. However, routers with built-in parental controls offer additional convenience:

• Basic routers: Can use DNS filtering (requires manual setup)
• Mid-range routers: Often include basic scheduling and device blocking
• Advanced routers: ASUS AiProtection, Netgear Armor, TP-Link HomeCare provide comprehensive filtering
• Enterprise routers: pfSense, OPNsense offer professional-grade filtering

If you're buying a new router, look for models with built-in parental controls for easier management.

Yes! Layered protection is recommended for maximum effectiveness:

• Layer 1: Network-level DNS filtering (protects all devices)
• Layer 2: Router parental controls (scheduling, device restrictions)
• Layer 3: Device-level controls (iOS Screen Time, Windows Family Safety)
• Layer 4: Software filtering on key devices (detailed monitoring)
• Layer 5: Browser extensions (additional protection)

Each layer catches what others might miss. If one fails, others provide backup protection.

Excellent free options exist that provide solid protection:

• OpenDNS FamilyShield: Pre-configured DNS filtering, blocks adult content
• CleanBrowsing: Three free filter levels (Security, Adult, Family)
• iOS Screen Time: Built-in content restrictions, app limits, communication controls
• Android Family Link: Device management, app approval, activity tracking
• Windows Family Safety: Web filtering, screen time, activity reports
• Google SafeSearch: Filters search results (can be enforced via DNS)

Combining OpenDNS FamilyShield with built-in device controls provides excellent protection at zero cost.

Regular maintenance ensures continued effectiveness:

• Weekly: Review activity reports from monitoring software
• Monthly: Check for router firmware updates, review blocked site logs
• Quarterly: Audit all device settings, ensure filters are still active
• Yearly: Re-evaluate age-appropriate restrictions, update family media agreement
• Immediately: After getting new devices, OS updates, or discovering bypass attempts

This depends on maturity level, not just age. Consider these factors:

• Can they follow rules about device usage?
• Do they demonstrate good judgment with screen time?
• Are they responsible with current devices?
• Is there a genuine need (safety, staying in touch)?
• Are they prepared for social pressures and peer dynamics?

Alternatives to full smartphones:

• Basic phones for calls/texts only (Gabb Phone, Light Phone)
• Smartwatches with limited functionality (Gizmo Watch, Apple Watch with Family Setup)
• Heavily locked-down smartphones (Bark Phone, Pinwheel)

If you do provide a smartphone, implement strong filtering from day one. It's much harder to add restrictions later.

Gradually shift from protection to guidance as maturity increases:

• Ages 6-10: Full monitoring justified, minimal privacy expectations
• Ages 11-13: Continue monitoring but with more transparent communication
• Ages 14-16: Shift to spot-checking and trust-but-verify approach
• Ages 17+: Focus on accountability rather than monitoring

Have explicit conversations: "At 16, we'll reduce monitoring to weekly check-ins. At 18, we'll transition to optional accountability if you want it."

No filter is perfect. When this happens:

1. Stay calm: Your reaction sets the tone for future conversations
2. Talk about it: Ask what they saw, how they felt, whether they sought it out
3. Don't shame: Curiosity is normal; focus on healthy boundaries
4. Update filters: Report the site, add it to block lists
5. Reinforce values: Discuss why certain content isn't healthy or appropriate

View these moments as teaching opportunities rather than failures.

American Academy of Pediatrics recommendations:

• Under 18 months: No screen time except video chatting
• Ages 2-5: 1 hour/day of high-quality programming
• Ages 6-12: 1-2 hours/day of recreational screen time
• Ages 13-18: 2 hours/day, with flexibility for homework/creative projects

Quality matters more than quantity. Educational content, video calls with family, and creative projects are different from passive scrolling. See our screen time management guide for implementation strategies.

This is ethically complex. Consider this framework:

Do monitor:

• Who they're communicating with (contact lists, friend requests)
• Patterns of usage (late-night messaging, excessive use)
• Red flags (conversations with strangers, requests for photos/personal info)

Don't monitor:

• Every message with known friends (micromanaging damages trust)
• Conversations without good reason (random spot-checks feel invasive)
• Secret monitoring (always be transparent about what you review)

Use AI-powered tools like Bark that alert you to concerning language rather than showing you every message.

This is challenging but manageable:

1. Communicate your values: Explain to your child WHY you have rules
2. Connect with like-minded families: Build a community with similar standards
3. Talk to other parents: Share your approach (they may not have considered it)
4. Compromise appropriately: Distinguish non-negotiables from flexibility
5. Offer alternatives: Host kids at your house where rules apply

Frame it positively: "We're not against technology, we're for healthy technology use."

Behavioral red flags to watch for:

• Sudden secrecy about device use
• Quickly closing screens when you approach
• Increased device use late at night
• Changes in behavior, mood, or sleep patterns
• Withdrawal from family activities
• Age-inappropriate sexual knowledge or language
• Increased anxiety or depression
• New "friends" they can't or won't explain

If you notice these signs, have a gentle conversation. Professional help may be needed for significant exposure to harmful content.

Many parents find personal filtering helpful:

• Model healthy habits: Kids imitate what they see
• Prevent accidental exposure: Protects you from unwanted content
• Accountability: Voluntary monitoring strengthens personal integrity
• Consistency: Rules work better when applied family-wide

Adults can use accountability apps like Covenant Eyes or Accountable2You with a trusted friend or spouse. See our personal accountability guide.

Gaming requires specific protections:

• Console parental controls: Set age ratings, disable voice chat, restrict purchases
• Communication limits: Disable chat with strangers or all chat initially
• Privacy settings: Make profiles private, disable friend requests from strangers
• Time limits: Set daily or weekly play time limits
• Supervised play: Keep gaming devices in common areas

See our comprehensive gaming safety guide for platform-specific instructions.

Effective online safety education includes:

• Start early: Begin conversations before giving devices
• Ongoing dialogue: Regular check-ins, not one-time talks
• Age-appropriate info: Tailor discussions to developmental level
• Practical scenarios: "What would you do if..." questions
• Emphasize reporting: Create safe space to report uncomfortable situations
• Teach critical thinking: How to evaluate sources, spot manipulation

Consider attending our community education workshops or hosting one at your school/religious institution.

Consult legal counsel for your jurisdiction, but generally:

• Good faith effort: Implementing filtering shows due diligence
• Acceptable Use Policy: Clear written policies protect your organization
• User acknowledgment: Have users agree to terms before using network
• No guarantees: Clearly state that filters aren't perfect
• Incident response plan: Document procedures for addressing violations

Providing filtered access is generally less risky than providing unfiltered access. See our policy templates to get started.

Costs vary based on size and approach:

Small institutions (1-25 users):

• Free DNS filtering + standard router: $0-200
• Mesh WiFi with parental controls: $300-500
• Annual monitoring software (optional): $300-1,000

Medium institutions (25-100 users):

• Business-grade router with filtering: $500-1,500
• Premium DNS service: $200-500/year
• Enterprise filtering software: $1,000-3,000/year

Large institutions (100+ users):

• Firewall appliance: $2,000-10,000
• Managed filtering service: $5,000-20,000/year
• IT support (if needed): varies

See our institutional WiFi guide for detailed recommendations.

Create a clear process for handling false positives:

1. Establish a review committee: 2-3 trusted individuals
2. Create request form: Users submit specific sites for review
3. Response timeline: Commit to 48-hour review turnaround
4. Document decisions: Keep records of what was unblocked and why
5. Whitelist categories: Pre-approve common legitimate sites (banks, government, healthcare)

Communicate that filtering protects the entire community and occasional inconvenience serves the greater good.

This is a balance between hospitality and values:

Option 1: Single filtered network

• Simpler management
• Consistent values
• May frustrate visitors with legitimate needs

Option 2: Filtered + guest network

• Filtered primary network for community members
• Separate guest network with lighter filtering
• More complex but accommodating

Option 3: Filtered + exception process

• Single filtered network
• Passcode-protected unfiltered access for specific cases
• Requires oversight

Most institutions find Option 2 provides the best balance. See guest network setup.

Effective community education includes:

• Regular workshops: Quarterly sessions on current topics
• Parent panels: Experienced parents share strategies
• Resource library: Curated guides and printouts
• Open Q&A sessions: Safe space for questions
• Youth education: Age-appropriate programs for kids/teens
• Expert speakers: Bring in professionals (law enforcement, therapists)

We provide complete workshop outlines you can use directly.

Address resistance through education and dialogue:

• Present data: Share statistics on internet dangers
• Share testimonials: Stories from affected families (with permission)
• Invite feedback: Collaborative policy development increases buy-in
• Start gradually: Pilot program before full rollout
• Offer alternatives: Those who object can opt not to use institutional internet
• Leadership example: Leaders should model healthy digital habits

Frame filtering as protection, not punishment; as support for families, not distrust of community members.