Families seeking to limit children’s exposure to harmful websites can start with network‑level controls built into their internet connection.

Cloudflare offers a “family” DNS resolver that blocks domains associated with malware and adult content, accessible via the IP addresses 1.1.1.3 and 1.0.0.3.

The resolver works by checking each DNS request against Cloudflare’s categorised lists and refusing to resolve requests that match the filtering rules.

To activate the filter, users must change the DNS settings on compatible routers or individual devices to point to the family resolver addresses, following Cloudflare’s configuration guide.

Because the setting applies at the network level, any device that uses the router’s DNS will inherit the filtering without needing separate browser extensions.

The filter is not a full parental‑control suite; it cannot inspect page content, block harmful material on otherwise legitimate sites, or prevent cyberbullying or unsafe interactions.

Parents should verify that devices are actually using the family resolver and be aware that mobile data, alternate Wi‑Fi networks, or apps with custom DNS settings can bypass the filter.

For broader protection, experts recommend combining DNS filtering with age‑appropriate device settings, app‑store restrictions, regular software updates, and open conversations about safe online behaviour.

Cloudflare’s family DNS was highlighted at the Safaricom Cybersecurity Summit 2026, where the company’s Graham Turnbull suggested it as a practical option for households seeking baseline protection.