Block Ads and Malware at the Network Level
DNS filtering blocks the bad domains your devices try to reach — ads, trackers, phishing sites, malware command-and-control servers — before they ever load. Set it once at your router and it covers every device on your network.
How it works
Every website your devices visit starts with a DNS lookup — a question to a server that turns example.com into an IP address. If your DNS server refuses to resolve known-bad domains, the browser just gets back nothing, and the connection never happens. Cleaner than a browser ad-blocker because it works for every app on every device, not just your browser.
Free public DNS servers we recommend
- Cloudflare for Families —
1.1.1.2/1.0.0.2. Blocks malware. Use1.1.1.3/1.0.0.3if you also want to block adult content. - Quad9 —
9.9.9.9/149.112.112.112. Run by a Swiss non-profit; blocks malicious domains, doesn't filter content. - AdFreeDNS (run by Spritz) —
69.164.195.150. Our own AdGuard Home server. Blocks ads, trackers, malware. No logging.
How to set it
Two options:
- Router-wide (recommended): log in to your router's settings page (often
192.168.1.1or192.168.0.1) and look for "DNS" under WAN or Internet settings. Replace whatever's there with one of the IP pairs above. Every device on your network now uses it. Reboot the router for good measure. - Per device: change DNS in your computer or phone's network settings. Useful for laptops you take outside the home.
What you'll notice
Pages load faster (fewer ad domains to resolve), some video ads disappear, and you're slightly less exposed to drive-by malware. Some apps that depend on aggressive ad-tracking may complain — rare, but it happens. If a site or app breaks, you can always switch back temporarily.