Block YouTube with DNS Filtering (All Devices, Home Network)

Use DNS filtering to block YouTube on every device connected to your home Wi-Fi — including smart TVs, game consoles, and anything else. Free options available.

Last updated 11 April 2026·
Difficulty🔨🔨🔨
Free
Bypass risk🐹🐹🐹🐹🐹

What Is DNS Filtering?

When your child types youtube.com into a browser, their device asks a DNS server to translate that name into an IP address — like a phone book lookup. Normally this returns YouTube's real IP.

A filtering DNS server works differently. When asked for youtube.com, it returns either nothing, or a "blocked" page IP. The device never reaches YouTube — because it never gets the address.

The key advantage: change the DNS on your router once, and every device in your home is blocked — phones, tablets, smart TVs, game consoles, laptops. You don't need to configure each device individually.

📡

What DNS filtering blocks and doesn't block

Blocks: YouTube on home Wi-Fi — regardless of device, browser, or app.

Doesn't block: YouTube on mobile data (4G/5G). The phone bypasses your home DNS entirely when off Wi-Fi. For mobile data coverage, combine with device-level controls (Screen Time, Family Link).

Option 1: CleanBrowsing Family Filter (Free, Easiest)

CleanBrowsing is a free DNS filtering service. The Family Filter blocks adult content and YouTube by default.

DNS addresses:

  • Primary: 185.228.168.168
  • Secondary: 185.228.169.168

How to Set It On Your Router

Log into your router admin panel

Open a browser and go to 192.168.0.1 or 192.168.1.1. If neither works, check the sticker on your router. Log in with your admin username and password (often printed on the router sticker).

Find DNS settings

Look for WAN Settings, Internet Setup, or Advanced → DHCP. The exact location varies by router brand. Common paths:

  • ASUS: Advanced Settings → WAN → DNS Server
  • TP-Link: Advanced → Network → Internet → DNS
  • Netgear: Advanced → Setup → Internet Setup → DNS
  • D-Link: Setup → Internet Connection → DNS Servers

Enter CleanBrowsing DNS addresses

Replace the existing DNS entries:

  • Primary DNS: 185.228.168.168
  • Secondary DNS: 185.228.169.168 Save and restart your router.

Test it

On any device connected to your Wi-Fi, open a browser and try youtube.com. It should either fail to load or show a blocked page.

Option 2: OpenDNS FamilyShield (Free, No Account Needed)

OpenDNS FamilyShield is pre-configured to block adult content and YouTube without any sign-up required.

DNS addresses:

  • Primary: 208.67.222.123
  • Secondary: 208.67.220.123

Set these on your router using the same steps as Option 1.

ℹ️

OpenDNS FamilyShield vs OpenDNS Home

FamilyShield (the addresses above) is preconfigured — no account needed. OpenDNS Home is a more customisable version that requires a free account and lets you choose exactly which categories to block. For most parents, FamilyShield is all you need.

Option 3: NextDNS (Free tier + Paid, Most Customisable)

NextDNS gives you a personal DNS filtering service with a dashboard to customise exactly what's blocked. The free tier handles up to 300,000 DNS queries per month (plenty for a family).

Create a NextDNS account

Go to nextdns.io and create a free account. You'll be assigned a unique configuration ID (e.g. abc123).

Add YouTube to your block list

In the NextDNS dashboard:

  • Go to Denylist → Add youtube.com and youtu.be
  • Or go to Privacy → enable YouTube under the Streaming category if available

Copy your NextDNS DNS addresses

In the NextDNS dashboard under Setup, you'll see your personalised DNS addresses:

  • Primary: 45.90.28.[your-id]
  • Secondary: 45.90.30.[your-id] (Exact addresses shown in your dashboard)

Set on your router

Enter your NextDNS addresses in your router's DNS settings using the same steps as Option 1.

Optionally link devices individually

For devices that leave the home network, install the NextDNS app on their phone/tablet. This keeps filtering active on mobile data too (requires paid plan for full benefit).

Setting DNS Per-Device (Without Touching the Router)

If you can't or don't want to change the router, you can set filtering DNS on each device individually.

iPhone / iPad

Settings → Wi-Fi → tap your network name → Configure DNSManual → add CleanBrowsing or OpenDNS addresses.

Android

Settings → Network & Internet → Wi-Fi → long-press your network → Modify Network → Advanced options → DHCPStatic → enter DNS addresses.

Alternatively, Android 9+ supports Private DNS (DNS over HTTPS): Settings → Network & Internet → Advanced → Private DNS → enter family-filter-dns.cleanbrowsing.org (CleanBrowsing) or doh.opendns.com (OpenDNS).

Windows PC

Settings → Network & Internet → Ethernet or Wi-Fi → Edit DNS → enter filtering DNS addresses.

Mac

System Settings → Network → your connection → DetailsDNS → add filtering addresses.

🐹

How Kids Bypass This

Switching to mobile data: DNS filtering only works on your home Wi-Fi. On 4G/5G, their phone uses their carrier's DNS — not yours. Solution: use device-level controls (Screen Time or Family Link) for mobile data coverage.

Manually changing DNS on the device: If they find the DNS settings, they can switch back to Google DNS (8.8.8.8). On routers, you can block outbound DNS queries to all servers except your filtering DNS — this is an advanced step but effective.

VPNs: A VPN bypasses DNS filtering entirely by encrypting all traffic. Block VPN app installation via Screen Time or Family Link, and consider blocking common VPN protocols on your router.

HTTPS and DNS-over-HTTPS (DoH): Some browsers (Chrome, Firefox) have their own DNS-over-HTTPS settings that bypass your router's DNS. Disable DoH in browser settings, or use NextDNS which supports DNS-over-HTTPS filtering.

🔨

Counter-Measures

Block external DNS at the router: Advanced routers (ASUS, Ubiquiti, pfSense) let you create a firewall rule that blocks all outbound DNS (port 53) except to your chosen filtering server. This prevents anyone from manually switching to 8.8.8.8.

Combine with device-level controls: DNS filtering + Screen Time/Family Link is a significantly stronger combination than either alone. One blocks at the network, the other blocks at the device — including on mobile data.

Use NextDNS for visibility: NextDNS gives you a log of every DNS query made on your network. You can see exactly what sites were visited, from which device, and at what time.

Want a personalised plan?

Answer 5 questions and get a guide for every device your child uses.

Take the Quiz →
Take the Quiz →