Block YouTube with NextDNS (Complete Setup Guide, 2026)
Block YouTube on every device using NextDNS. Create a profile, add YouTube to the deny list, set up on your router and per-device. Free tier available. Updated for 2026.
What Is NextDNS?
NextDNS is a cloud-based DNS filtering service with a personal dashboard. You get an account, configure exactly which domains to block, and point your devices or router to your private NextDNS DNS addresses. All queries go through NextDNS's servers, which apply your rules before returning results.
Why NextDNS over CleanBrowsing or OpenDNS Family? NextDNS gives you custom domain blocking (add any domain you want), real-time activity logs, per-device profiles, and a mobile app โ features the free tiers of alternatives don't offer.
| Feature | CleanBrowsing (free) | OpenDNS Family | NextDNS (free tier) | |---|---|---|---| | YouTube blocking | โ | โ | โ | | Custom domain block | โ | Limited | โ | | Activity logs | โ | Paid | โ | | Per-device profiles | โ | Paid | โ | | Mobile app | โ | โ | โ |
Free tier: 300,000 DNS queries per month. A typical family uses 50,000โ150,000 queries per month โ the free tier is sufficient for most households. Paid plan is $19.90/year and removes the query cap.
Step 1: Create Account and Profile
Create a NextDNS account
Go to nextdns.io and sign up with an email address. No credit card required for the free tier.
Note your Configuration ID and DNS addresses
NextDNS auto-creates a profile and assigns a 6-character Configuration ID (e.g. abc123). Under the Setup tab, you'll see your personalised DNS addresses: IPv4 addresses in the format 45.90.28.[id] and 45.90.30.[id], plus DNS-over-HTTPS and DNS-over-TLS addresses. These are unique to your account โ keep them private.
Step 2: Block YouTube in the Profile
Add YouTube domains to the Denylist
In your profile, go to the Denylist tab and add the following domains one at a time:
youtube.comyoutu.bemusic.youtube.comgooglevideo.comโ YouTube's video delivery CDN (blocks video playback even if the site loads)ytimg.comโ thumbnail CDNyt3.ggpht.comโ avatar and channel art CDN
Check Parental Controls tab
Go to Parental Controls in the NextDNS dashboard. A YouTube toggle may be available โ enable it if present, as it uses a maintained NextDNS-curated blocklist for YouTube that's kept up to date.
Enable SafeSearch enforcement
In Parental Controls, enable Force SafeSearch. This enforces SafeSearch on Google, Bing, and DuckDuckGo, preventing search results from surfacing YouTube-adjacent content.
Consider YouTube Restricted Mode
If you want filtered YouTube access rather than a complete block โ for example, if an older child uses YouTube for homework โ enable Force YouTube Restricted Mode in Parental Controls instead of adding youtube.com to the Denylist. This forces YouTube's restricted mode, which filters explicit and age-inappropriate content while keeping access to educational videos.
Step 3: Apply to Your Home Router
Log into your router admin panel
See the generic router guide for your router brand. Most routers are accessible at 192.168.0.1 or 192.168.1.1.
Find DNS settings
Look under WAN Settings, Internet Setup, or Advanced DHCP settings depending on your router model.
Enter your NextDNS IPv4 addresses
Enter your personalised NextDNS addresses from the Setup tab. Primary DNS: 45.90.28.[your-id]. Secondary DNS: 45.90.30.[your-id]. Save and restart the router.
Verify NextDNS is active
On any device connected to your Wi-Fi, go to nextdns.io/test in a browser. The page will confirm whether NextDNS is active and which profile is being used.
Step 4: Apply Per-Device (Off-Network Coverage)
Router configuration covers devices at home. For devices that leave the house โ phones, tablets, laptops โ you need per-device configuration.
iPhone and iPad
Install NextDNS app
Download the NextDNS app from the App Store. Open it and enter your Configuration ID when prompted.
Enable the profile
Tap Use this configuration, then toggle the switch ON. NextDNS creates a local DNS-routing VPN profile โ this is not a real VPN, it's a DNS configuration tunnel. The device routes DNS queries through NextDNS regardless of which network it's on.
Enable Start on demand
In the NextDNS app settings, enable Start on demand so the profile activates automatically when the device connects to any network.
Always-on off-network protection requires paid plan
The NextDNS free tier applies filtering regardless of your query count. However, always-on protection across all network conditions (including mobile data, roaming, switching networks) works most reliably with the paid plan ($19.90/year). The free tier can drop off when the 300,000 query limit is reached โ at that point queries pass through unfiltered.
Android
Two options. First option: go to Settings โ Network & Internet โ Advanced โ Private DNS โ select Private DNS provider hostname โ enter [your-id].dns.nextdns.io. This uses DNS-over-TLS and is always active on all networks. Second option: install the NextDNS app from the Play Store and follow the same steps as iPhone.
Windows
In Windows 11: Settings โ Network & Internet โ your connection (Ethernet or Wi-Fi) โ DNS server assignment โ Edit โ Manual โ enter your NextDNS IPv4 addresses โ enable Preferred DNS encryption (DNS over HTTPS). Alternatively, download the NextDNS Windows client from nextdns.io/download for a simpler setup with a system tray toggle.
Mac
System Settings โ Network โ select your connection โ Details โ DNS โ click + and add your two NextDNS IPv4 addresses. Remove any existing DNS entries. Alternatively, download the NextDNS Mac app from nextdns.io/download.
Step 5: Using the Activity Log
The Logs tab in your NextDNS dashboard shows a real-time feed of every DNS query from every device using your profile:
- Domain requested
- Device identifier (IP or device name)
- Timestamp
- Whether the query was allowed or blocked
Filter to Blocked queries to see every YouTube access attempt. This is useful both for confirming the block is working and for identifying bypass attempts โ a sudden absence of blocked YouTube queries from a device that was previously generating them may indicate a DNS change on that device.
Name your devices for readable logs: in the Settings tab, go to Devices and assign human-readable names (e.g. "Emma's iPhone" instead of 192.168.1.105).
Creating Separate Profiles for Different Family Members
One NextDNS account supports multiple profiles โ useful if you want stricter settings for younger children than for teenagers or adults.
Create a second profile
Click your profile name at the top of the dashboard โ New Profile โ give it a descriptive name like "Kids".
Configure the kids profile
Add stricter Denylist entries, enable more Parental Controls categories, and enable YouTube Restricted Mode or a full block.
Note the kids profile's Configuration ID
Each profile has its own unique Configuration ID and DNS addresses.
Point children's devices to the kids profile
Set up children's devices using the kids profile Configuration ID. Your own devices continue to use the main profile. Each profile's logs are separate.
How Kids Bypass This
DNS changes on device: Someone who finds their device's DNS settings can switch to Google DNS (8.8.8.8) and bypass NextDNS entirely. On iPhone: lock DNS/VPN management via Screen Time โ Settings โ Content & Privacy Restrictions โ VPN & Device Management โ Don't Allow. On Android: Family Link restricts DNS changes.
Mobile data: When a phone switches to 4G/5G, it uses the carrier's DNS unless NextDNS is configured directly on the device (not just the router). Install and activate the NextDNS app for mobile data coverage.
Browser DNS-over-HTTPS bypass: Chrome and Firefox have their own built-in DoH that can bypass your router's DNS settings. Disable in Chrome: Settings โ Privacy and Security โ Security โ turn off "Use secure DNS". Disable in Firefox: Settings โ General โ Network Settings โ uncheck "Enable DNS over HTTPS". NextDNS supports DoH itself, so if you configure NextDNS at the device level using DoH, this isn't an issue.
VPN apps: Any VPN routes all traffic through its own servers and bypasses NextDNS. Block VPN app installation via Screen Time or Family Link on child devices.
Counter-Measures
Multiple profiles give full visibility: The Logs tab captures every DNS query. If YouTube blocking suddenly stops appearing in blocked logs for a device that was previously triggering blocks, investigate the DNS configuration on that device.
Combine with device controls: NextDNS on the router handles all home traffic including smart TVs and consoles. NextDNS on the device handles mobile data. Screen Time or Family Link handles app-level controls and prevents DNS changes. All three together provide comprehensive coverage.
Lock DNS changes on child devices: Screen Time (iPhone) prevents VPN and device management changes. Family Link (Android) prevents most system setting changes. This is the most important countermeasure โ without it, the filter is one DNS settings change away from being bypassed.
Free tier is sufficient: Most families with 1โ3 children and typical usage stay well under the 300,000 query cap. Check the Analytics tab in NextDNS to see your actual monthly query count before deciding whether to upgrade.
Related Guides
Block YouTube with DNS Filtering (All Devices, Home Network, 2026)
Use DNS filtering to block YouTube on every device connected to your home Wi-Fi โ including smart TVs, game consoles, and anything else. Free options available. Updated for 2026.
By MethodBlock YouTube with OpenDNS (FamilyShield & Umbrella Home, 2026)
Block YouTube using OpenDNS FamilyShield or Umbrella Home. Set up on your router for network-wide blocking on every device. Free. Updated for 2026.
By MethodBlock YouTube with Pi-hole (Self-Hosted DNS Sinkhole, 2026)
Block YouTube on every device in your home using Pi-hole. Complete guide: hardware, installation, YouTube blocklists, network DNS setup, and known gotchas. Updated for 2026.
By MethodHow to Block YouTube with Firewalla (2026)
Block YouTube on every home device using a Firewalla Purple, Gold, or Blue Plus. Hardware-based network security with no monthly subscription. Step-by-step guide. Updated for 2026.
Want a personalised plan?
Answer 5 questions and get a guide for every device your child uses.
Take the Quiz โ