DNS filtering can help protect children online, but parents need more than a filtered connection
Families looking for ways to reduce children’s exposure to harmful websites can start with controls built into their internet connection. DNS filtering can prevent a device from reaching certain domains, including known malware sites and, depending on the service, websites classified as containing adult content. It offers a useful layer of protection, although it cannot determine everything a child will encounter online.
The subject came up during the Safaricom Cybersecurity Summit 2026, where Cloudflare’s Graham Turnbull recommended the company’s family DNS service as one option for households. Cloudflare provides the resolver addresses 1.1.1.3 and 1.0.0.3 for filtering known malware and adult-content domains. The service is a basic network-level control, not a complete parental-control system.
What DNS filtering does
The Domain Name System, or DNS, helps devices find the network address associated with a website’s domain name. When someone enters a web address, the device typically makes a DNS request to find where that domain should resolve. A filtering resolver checks the request against its categories or lists and can block domains that match the selected rules.
Cloudflare’s family resolver is designed to block domains associated with malware and adult content. A household can configure compatible network equipment to use the resolver, allowing supported devices on that network to receive the filtering without having to configure each browser separately. The exact setup depends on the router, operating system and network configuration.
How family filtering services work
Using a family DNS resolver can be one of the simpler ways to add a baseline filter to a home network. Parents should follow the service provider’s configuration instructions and check that devices are actually using the intended resolver. A device may use a different DNS setting when it connects to another network or when software changes how its internet requests are handled.
The same approach can be useful for reducing exposure to known malicious domains. Blocking a domain at the DNS layer can prevent a connection before a user reaches the site, but it depends on the service’s classifications and the domain being recognised. New, altered or incorrectly categorised domains may not be handled as a family expects.
What DNS filtering cannot prevent
DNS filtering does not inspect every page, image, message or interaction a child encounters. It may not block harmful material hosted on an otherwise legitimate website, and it cannot by itself prevent cyberbullying, manipulative conversations, inappropriate messages or the sharing of personal information. Nor should parents assume that every dangerous link will be recognised by a filter.
It is also not a substitute for device security or account controls. Children may use mobile data, another Wi-Fi network or applications that apply their own network settings. Parents should understand how the devices in their household connect to the internet and avoid treating one network setting as a guarantee.
How to build a broader online-safety plan
Families can combine DNS filtering with age-appropriate device settings, app-store restrictions, browser safeguards and controls offered by the platforms children use. Keeping devices and applications updated can also reduce exposure to known security weaknesses. The appropriate combination depends on the child’s age, the devices available and the kinds of online activities involved.
Technical controls work best when children understand why they exist. Parents can discuss suspicious links, requests for personal information, unwanted contact and what to do when content makes them uncomfortable. They should also make it easy for children to ask for help without fearing an automatic punishment for reporting a problem.
DNS filtering can reduce exposure to selected categories of harmful websites with relatively little ongoing effort. Its value comes from treating it as one component of a broader approach that combines technical settings, responsible supervision and open communication.
Real ESG impact doesn’t happen in panels alone, it happens in the rooms where financiers, operators, and policymakers actually align. Our GreenShift Forum 2026 cuts the noise, bringing together the people rewiring Africa’s sustainability and energy frameworks for one focused day in Nairobi. Secure your seat.
Go to TECHTRENDSKE.co.ke for more tech and business news from the African continent and across the world.
Follow us on WhatsApp, Telegram, Twitter, and Facebook, or subscribe to our weekly newsletter to ensure you don’t miss out on any future updates. Send tips to editorial@techtrendsmedia.co.ke
