CleanBrowsing Configuration Guide

Beginner 20-30 minutes

Complete tutorial for setting up CleanBrowsing DNS filtering with free family filters or custom paid plans, including DNS-over-HTTPS and DNS-over-TLS configuration.

Prerequisites:

  • • Access to router admin panel OR device network settings
  • • Internet connection
  • • Email address (for paid plan only)
  • • Basic understanding of DNS filtering concept

What is CleanBrowsing?

CleanBrowsing is a DNS-based content filtering service specifically designed for families and schools. Unlike general DNS services, CleanBrowsing was built from the ground up for content filtering, offering three free filter levels and paid custom options. This tutorial covers setup for all options, including modern encrypted DNS (DNS-over-HTTPS and DNS-over-TLS).

Why CleanBrowsing? Purpose-built for families, excellent customer support, offers both free and affordable paid tiers, supports modern encrypted DNS protocols.

🎯 Choosing Your Filter Level

Security Filter (Free)

Best for: Basic malware protection, minimal content filtering

Blocks:

  • Malware and phishing sites
  • Viruses and spyware

DNS Addresses:

  • Primary: 185.228.168.9
  • Secondary: 185.228.169.9

Adult Filter (Free) - Recommended

Best for: Most families wanting basic content filtering

Blocks:

  • Security threats (malware, phishing)
  • Adult content (pornography)
  • Proxy and VPN sites

DNS Addresses:

  • Primary: 185.228.168.10
  • Secondary: 185.228.169.11

Family Filter (Free)

Best for: Families with young children, stricter filtering

Blocks:

  • Security threats
  • Adult content
  • Proxy/VPN sites
  • Mixed adult content
  • Abused TLDs

DNS Addresses:

  • Primary: 185.228.168.168
  • Secondary: 185.228.169.168

Custom Filter (Paid)

Cost: $5/month

Best for: Want complete control, custom block/allow lists, detailed logs

Features:

  • All free filter features
  • Custom allow/block lists
  • Choose specific categories to block
  • Detailed logging and analytics
  • Multiple filter profiles

⚙️ Router-Level Setup (Protects Whole Network)

Step 1: Choose Your Filter

Decide which filter level from above. For most families, start with Adult Filter.

Step 2: Access Router Admin Panel

  1. Open web browser
  2. Type router IP address: Usually 192.168.1.1 or 192.168.0.1
  3. Enter admin username and password (check router sticker if unknown)

Step 3: Find DNS Settings

Location varies by router brand:

  • Netgear: Advanced → Setup → Internet Setup → DNS Servers
  • TP-Link: Network → WAN → Primary/Secondary DNS
  • Linksys: Connectivity → Internet Settings → Static DNS
  • Asus: WAN → Internet Connection → DNS Server
  • Google WiFi: Network & General → Advanced Networking → DNS

Step 4: Enter CleanBrowsing DNS Addresses

For Adult Filter (Recommended):

Primary DNS: 185.228.168.10

Secondary DNS: 185.228.169.11

Step 5: Save and Restart

  1. Click "Save" or "Apply"
  2. Reboot your router
  3. Restart devices or disconnect/reconnect from WiFi

Step 6: Test It's Working

  1. Visit a test site (appropriate test domain)
  2. Should see CleanBrowsing block page
  3. Test normal sites work fine

📱 Device-Level Setup

iPhone/iPad (iOS) - Standard DNS

  1. Settings → WiFi
  2. Tap (i) next to network name
  3. Scroll down → Configure DNS
  4. Tap "Manual"
  5. Remove existing DNS servers (tap red minus)
  6. Add Server: 185.228.168.10
  7. Add Server: 185.228.169.11
  8. Tap "Save"

Android - Private DNS (DNS-over-TLS) - Recommended

Android 9+ supports encrypted DNS that works on cellular too:

  1. Settings → Network & Internet (or Connections)
  2. Private DNS
  3. Select "Private DNS provider hostname"
  4. Enter based on filter level:
    • Security Filter: security-filter-dns.cleanbrowsing.org
    • Adult Filter: adult-filter-dns.cleanbrowsing.org
    • Family Filter: family-filter-dns.cleanbrowsing.org
  5. Tap "Save"
Advantage: Android Private DNS works on WiFi AND cellular data, providing consistent protection everywhere!

Windows 10/11

  1. Settings → Network & Internet
  2. Click your connection (WiFi or Ethernet)
  3. Click "Edit" next to IP assignment
  4. Select "Manual" and enable IPv4
  5. Preferred DNS: 185.228.168.10
  6. Alternate DNS: 185.228.169.11
  7. Click "Save"

macOS

  1. System Settings (or System Preferences)
  2. Network
  3. Select connection → Details (or Advanced)
  4. DNS tab
  5. Click + button
  6. Add: 185.228.168.10
  7. Add: 185.228.169.11
  8. Click OK, then Apply

🔒 DNS-over-HTTPS (DoH) Setup

Modern encrypted DNS prevents ISPs from seeing which sites you visit. Requires browser or system configuration.

Firefox Browser

  1. Settings → Privacy & Security
  2. Scroll to "DNS over HTTPS"
  3. Enable "Use DNS over HTTPS"
  4. Select "Custom"
  5. Enter based on filter level:
    • Security: https://doh.cleanbrowsing.org/doh/security-filter/
    • Adult: https://doh.cleanbrowsing.org/doh/adult-filter/
    • Family: https://doh.cleanbrowsing.org/doh/family-filter/

Windows 11 (System-Wide DoH)

  1. Settings → Network & Internet
  2. Your connection → Edit DNS settings
  3. Manual → IPv4 ON
  4. Preferred DNS: 185.228.168.10
  5. DNS over HTTPS: On (automatic)
  6. Save

💎 Paid Custom Plan Setup

When to Upgrade to Paid ($5/month)

  • Need to allow specific blocked sites
  • Want to block additional categories (social media, gaming, etc.)
  • Need detailed usage logs and analytics
  • Want multiple filter profiles (school vs home)
  • Manage multiple locations

Setup Process

  1. Go to cleanbrowsing.org/pricing
  2. Choose "Family" plan ($5/month or $54/year)
  3. Create account with email
  4. Complete payment
  5. Log in to dashboard
  6. Click "Add Filter"
  7. Configure custom categories to block
  8. Add allow/block lists
  9. You'll receive unique DNS addresses for your custom filter
  10. Use those addresses instead of the free filter addresses

Custom Features

  • Block/Allow Lists: Add specific domains to always block or always allow
  • Category Control: Enable/disable 20+ content categories
  • Usage Logs: See what devices accessed, what was blocked
  • Multiple Filters: Different settings for different networks/times
  • SafeSearch Enforcement: Forces safe search on Google, Bing, YouTube

❓ Troubleshooting

Issue: Filtering not working

  • Verify DNS addresses entered correctly (easy to mistype)
  • Restart router after DNS change
  • Flush DNS cache on device or restart device
  • Check if device has custom DNS configured (overrides router)
  • Some devices cache DNS for hours - patience or restart

Issue: Legitimate sites blocked

  • Free plan: Try less restrictive filter (Security instead of Family)
  • Paid plan: Add site to allow list in dashboard
  • Report miscategorization to CleanBrowsing support
  • Consider if site actually has mixed content

Issue: Slow internet speeds

  • CleanBrowsing has servers worldwide - should be fast
  • Try alternate DNS addresses (secondary as primary)
  • Use DNS-over-TLS on Android for better performance
  • Check your actual internet speed (might not be DNS)

Issue: Works on WiFi but not cellular (mobile devices)

  • Android: Use Private DNS (works on cellular)
  • iOS: Need to configure DNS per network, or use DNS profile/VPN app
  • Consider mobile filtering app for iOS cellular protection

📋 Quick Reference

CleanBrowsing Free DNS Addresses

Security Filter

Primary: 185.228.168.9 | Secondary: 185.228.169.9

Adult Filter (Recommended)

Primary: 185.228.168.10 | Secondary: 185.228.169.11

Family Filter

Primary: 185.228.168.168 | Secondary: 185.228.169.168

DNS-over-TLS Hostnames (Android Private DNS)

  • Security: security-filter-dns.cleanbrowsing.org
  • Adult: adult-filter-dns.cleanbrowsing.org
  • Family: family-filter-dns.cleanbrowsing.org

DNS-over-HTTPS URLs

  • Security: https://doh.cleanbrowsing.org/doh/security-filter/
  • Adult: https://doh.cleanbrowsing.org/doh/adult-filter/
  • Family: https://doh.cleanbrowsing.org/doh/family-filter/