Block YouTube with NextDNS (Complete Setup Guide, 2026)

Block YouTube on every device using NextDNS. Create a profile, add YouTube to the deny list, set up on your router and per-device. Free tier available. Updated for 2026.

Last updated 11 April 2026ยท
Difficulty๐Ÿ”จ๐Ÿ”จ๐Ÿ”จ
Free
Bypass risk๐Ÿน๐Ÿน๐Ÿน๐Ÿน๐Ÿน

What Is NextDNS?

NextDNS is a cloud-based DNS filtering service with a personal dashboard. You get an account, configure exactly which domains to block, and point your devices or router to your private NextDNS DNS addresses. All queries go through NextDNS's servers, which apply your rules before returning results.

Why NextDNS over CleanBrowsing or OpenDNS Family? NextDNS gives you custom domain blocking (add any domain you want), real-time activity logs, per-device profiles, and a mobile app โ€” features the free tiers of alternatives don't offer.

| Feature | CleanBrowsing (free) | OpenDNS Family | NextDNS (free tier) | |---|---|---|---| | YouTube blocking | โœ“ | โœ“ | โœ“ | | Custom domain block | โœ— | Limited | โœ“ | | Activity logs | โœ— | Paid | โœ“ | | Per-device profiles | โœ— | Paid | โœ“ | | Mobile app | โœ— | โœ— | โœ“ |

Free tier: 300,000 DNS queries per month. A typical family uses 50,000โ€“150,000 queries per month โ€” the free tier is sufficient for most households. Paid plan is $19.90/year and removes the query cap.

Step 1: Create Account and Profile

Create a NextDNS account

Go to nextdns.io and sign up with an email address. No credit card required for the free tier.

Note your Configuration ID and DNS addresses

NextDNS auto-creates a profile and assigns a 6-character Configuration ID (e.g. abc123). Under the Setup tab, you'll see your personalised DNS addresses: IPv4 addresses in the format 45.90.28.[id] and 45.90.30.[id], plus DNS-over-HTTPS and DNS-over-TLS addresses. These are unique to your account โ€” keep them private.

Step 2: Block YouTube in the Profile

Add YouTube domains to the Denylist

In your profile, go to the Denylist tab and add the following domains one at a time:

  • youtube.com
  • youtu.be
  • music.youtube.com
  • googlevideo.com โ€” YouTube's video delivery CDN (blocks video playback even if the site loads)
  • ytimg.com โ€” thumbnail CDN
  • yt3.ggpht.com โ€” avatar and channel art CDN

Check Parental Controls tab

Go to Parental Controls in the NextDNS dashboard. A YouTube toggle may be available โ€” enable it if present, as it uses a maintained NextDNS-curated blocklist for YouTube that's kept up to date.

Enable SafeSearch enforcement

In Parental Controls, enable Force SafeSearch. This enforces SafeSearch on Google, Bing, and DuckDuckGo, preventing search results from surfacing YouTube-adjacent content.

Consider YouTube Restricted Mode

If you want filtered YouTube access rather than a complete block โ€” for example, if an older child uses YouTube for homework โ€” enable Force YouTube Restricted Mode in Parental Controls instead of adding youtube.com to the Denylist. This forces YouTube's restricted mode, which filters explicit and age-inappropriate content while keeping access to educational videos.

Step 3: Apply to Your Home Router

Log into your router admin panel

See the generic router guide for your router brand. Most routers are accessible at 192.168.0.1 or 192.168.1.1.

Find DNS settings

Look under WAN Settings, Internet Setup, or Advanced DHCP settings depending on your router model.

Enter your NextDNS IPv4 addresses

Enter your personalised NextDNS addresses from the Setup tab. Primary DNS: 45.90.28.[your-id]. Secondary DNS: 45.90.30.[your-id]. Save and restart the router.

Verify NextDNS is active

On any device connected to your Wi-Fi, go to nextdns.io/test in a browser. The page will confirm whether NextDNS is active and which profile is being used.

Step 4: Apply Per-Device (Off-Network Coverage)

Router configuration covers devices at home. For devices that leave the house โ€” phones, tablets, laptops โ€” you need per-device configuration.

iPhone and iPad

Install NextDNS app

Download the NextDNS app from the App Store. Open it and enter your Configuration ID when prompted.

Enable the profile

Tap Use this configuration, then toggle the switch ON. NextDNS creates a local DNS-routing VPN profile โ€” this is not a real VPN, it's a DNS configuration tunnel. The device routes DNS queries through NextDNS regardless of which network it's on.

Enable Start on demand

In the NextDNS app settings, enable Start on demand so the profile activates automatically when the device connects to any network.

โ„น๏ธ

Always-on off-network protection requires paid plan

The NextDNS free tier applies filtering regardless of your query count. However, always-on protection across all network conditions (including mobile data, roaming, switching networks) works most reliably with the paid plan ($19.90/year). The free tier can drop off when the 300,000 query limit is reached โ€” at that point queries pass through unfiltered.

Android

Two options. First option: go to Settings โ†’ Network & Internet โ†’ Advanced โ†’ Private DNS โ†’ select Private DNS provider hostname โ†’ enter [your-id].dns.nextdns.io. This uses DNS-over-TLS and is always active on all networks. Second option: install the NextDNS app from the Play Store and follow the same steps as iPhone.

Windows

In Windows 11: Settings โ†’ Network & Internet โ†’ your connection (Ethernet or Wi-Fi) โ†’ DNS server assignment โ†’ Edit โ†’ Manual โ†’ enter your NextDNS IPv4 addresses โ†’ enable Preferred DNS encryption (DNS over HTTPS). Alternatively, download the NextDNS Windows client from nextdns.io/download for a simpler setup with a system tray toggle.

Mac

System Settings โ†’ Network โ†’ select your connection โ†’ Details โ†’ DNS โ†’ click + and add your two NextDNS IPv4 addresses. Remove any existing DNS entries. Alternatively, download the NextDNS Mac app from nextdns.io/download.

Step 5: Using the Activity Log

The Logs tab in your NextDNS dashboard shows a real-time feed of every DNS query from every device using your profile:

  • Domain requested
  • Device identifier (IP or device name)
  • Timestamp
  • Whether the query was allowed or blocked

Filter to Blocked queries to see every YouTube access attempt. This is useful both for confirming the block is working and for identifying bypass attempts โ€” a sudden absence of blocked YouTube queries from a device that was previously generating them may indicate a DNS change on that device.

Name your devices for readable logs: in the Settings tab, go to Devices and assign human-readable names (e.g. "Emma's iPhone" instead of 192.168.1.105).

Creating Separate Profiles for Different Family Members

One NextDNS account supports multiple profiles โ€” useful if you want stricter settings for younger children than for teenagers or adults.

Create a second profile

Click your profile name at the top of the dashboard โ†’ New Profile โ†’ give it a descriptive name like "Kids".

Configure the kids profile

Add stricter Denylist entries, enable more Parental Controls categories, and enable YouTube Restricted Mode or a full block.

Note the kids profile's Configuration ID

Each profile has its own unique Configuration ID and DNS addresses.

Point children's devices to the kids profile

Set up children's devices using the kids profile Configuration ID. Your own devices continue to use the main profile. Each profile's logs are separate.

๐Ÿน

How Kids Bypass This

DNS changes on device: Someone who finds their device's DNS settings can switch to Google DNS (8.8.8.8) and bypass NextDNS entirely. On iPhone: lock DNS/VPN management via Screen Time โ†’ Settings โ†’ Content & Privacy Restrictions โ†’ VPN & Device Management โ†’ Don't Allow. On Android: Family Link restricts DNS changes.

Mobile data: When a phone switches to 4G/5G, it uses the carrier's DNS unless NextDNS is configured directly on the device (not just the router). Install and activate the NextDNS app for mobile data coverage.

Browser DNS-over-HTTPS bypass: Chrome and Firefox have their own built-in DoH that can bypass your router's DNS settings. Disable in Chrome: Settings โ†’ Privacy and Security โ†’ Security โ†’ turn off "Use secure DNS". Disable in Firefox: Settings โ†’ General โ†’ Network Settings โ†’ uncheck "Enable DNS over HTTPS". NextDNS supports DoH itself, so if you configure NextDNS at the device level using DoH, this isn't an issue.

VPN apps: Any VPN routes all traffic through its own servers and bypasses NextDNS. Block VPN app installation via Screen Time or Family Link on child devices.

๐Ÿ”จ

Counter-Measures

Multiple profiles give full visibility: The Logs tab captures every DNS query. If YouTube blocking suddenly stops appearing in blocked logs for a device that was previously triggering blocks, investigate the DNS configuration on that device.

Combine with device controls: NextDNS on the router handles all home traffic including smart TVs and consoles. NextDNS on the device handles mobile data. Screen Time or Family Link handles app-level controls and prevents DNS changes. All three together provide comprehensive coverage.

Lock DNS changes on child devices: Screen Time (iPhone) prevents VPN and device management changes. Family Link (Android) prevents most system setting changes. This is the most important countermeasure โ€” without it, the filter is one DNS settings change away from being bypassed.

Free tier is sufficient: Most families with 1โ€“3 children and typical usage stay well under the 300,000 query cap. Check the Analytics tab in NextDNS to see your actual monthly query count before deciding whether to upgrade.

Want a personalised plan?

Answer 5 questions and get a guide for every device your child uses.

Take the Quiz โ†’
Take the Quiz โ†’