Router or phone? Where to actually block adult sites.
Almost every parent starts with the router because it feels comprehensive. It isn't — it's comprehensive in one place. Here's the honest trade-off between the two layers.
What router filtering actually does
Changing your router's DNS server (or enabling its built-in parental controls) filters every device that connects to your home Wi-Fi: phones, tablets, laptops, consoles, smart TVs, the lot. You set it once and it covers hardware you'll never think to configure individually.
Where it's strong
- Coverage breadth. A games console or a smart TV can't run a filtering app. The router is the only place to filter them.
- Zero per-device work. New device joins the Wi-Fi, it's filtered.
- Nothing to uninstall. There's no app on the phone for your child to find.
Where it fails
- Cellular data. The moment your child's phone drops off Wi-Fi, the router is irrelevant. This is the big one — most teens spend most of their screen time on cellular.
- Every other network. School, friends' houses, cafes, libraries.
- Hotspots. A phone with its own data plan can create a hotspot and put a tablet or laptop straight onto unfiltered internet, inside your house.
- Manual DNS override. On most devices, a child can change the DNS server in Wi-Fi settings and walk past the router filter without touching the router.
- DNS-over-HTTPS. Modern browsers can encrypt DNS to their own resolver, bypassing your router's DNS entirely. Chrome and Firefox both support it and it's a setting, not a hack.
What phone filtering actually does
Filtering installed on the device applies wherever the device goes — Wi-Fi, cellular, hotspot, another country.
Where it's strong
- It travels. The filter is the device's, not the network's.
- Survives network changes. Switching Wi-Fi, going to cellular, joining a hotspot — all filtered.
- Survives DNS-over-HTTPS, because the filtering happens at the system DNS layer the browser resolves through.
- Per-child rules. A 15-year-old and a 7-year-old can have different blocklists on the same home network, which a router cannot do without per-device rules most consumer routers don't offer.
Where it's weaker
- You install it per device. Five devices, five installs.
- It's visible. Your child knows it's there. That's a conversation, not a technical problem, but it is real.
- It can't cover a console or smart TV. Those need the router.
Get the phone layer without the privacy cost
Defenras filters on-device across Wi-Fi and cellular, and never logs a single domain your child visits.
Get Defenras free →The honest answer: layer them
| Device | Router filter | On-device filter |
|---|---|---|
| Kid's phone | Home Wi-Fi only | Everywhere — use this |
| Kid's tablet | Home Wi-Fi only | Everywhere — use this |
| Family laptop | Home Wi-Fi only | Use browser extension |
| Games console | Only real option | Not possible |
| Smart TV | Only real option | Not possible |
| Guest devices | Only real option | Not practical |
The pattern that works: router as the floor, device filtering as the actual protection. The router catches the hardware you can't install on and anything a visitor brings into the house. The device filter is what protects your child when they leave.
Setting the router layer up
- Open your router admin page (usually
192.168.1.1or192.168.0.1). - Find DNS settings — often under WAN, Internet, or Advanced.
- Replace the ISP-provided DNS with a filtering resolver.
- Reboot the router and confirm a known-blocked site fails to load.
- Change the router admin password. Most are still the default printed on the sticker.
Whichever layer you set up, verify it. Turn Wi-Fi off on your child's phone and try a blocked site over cellular. If it loads, you have a router-only setup and you should know that rather than assume otherwise.
Frequently asked questions
Can my child change the DNS setting on their phone to get around the router?
On most devices, yes — DNS is a per-network Wi-Fi setting and it isn't hidden. This is the single most common way router filtering gets bypassed, and it's why on-device filtering matters.
Does a VPN defeat both layers?
A VPN defeats router filtering completely. On-device filtering can block VPN app domains and, on Android, the app itself. Blocking VPN installation is part of any serious setup.
Do I need to pay for router filtering?
No. Several free filtering DNS resolvers exist and work fine at the router level. The paid tier usually buys per-device rules and reporting.
Will filtering slow down my internet?
Not measurably. You're changing which server answers DNS lookups, not routing your traffic through anything. A lookup is a few milliseconds.
Defenras blocks all of this — without collecting your child's data.
One app, every device, every browser. Adult content, gambling, vaping, scams, malware, social media — all blocked. PIN-locked. Free version available, no credit card.