Learn · Home network
Block malware sites for the whole house with Cloudflare DNS
15 min · recommended
· HomeOS can check this for you
Why this matters. Every time a device visits a website, it first looks up the address (DNS), like looking up a number in a phone book. Cloudflare's free 1.1.1.1 for Families phone book refuses to give out the addresses of known malware and phishing sites, so a mis-click or bad link just doesn't load. Set it on the router and every device in the house is covered, including TVs and gadgets that can't run antivirus.
1
Choose a level
Malware + adult content blocking: 1.1.1.3 and 1.0.0.3. Malware blocking only: 1.1.1.2 and 1.0.0.2. Families with children usually pick the first.
2
Put them in your router
Open your router's app or admin page, find the DNS or Internet settings, and replace the automatic DNS with the two addresses. If there's an IPv6 DNS setting too, use 2606:4700:4700::1113 and 2606:4700:4700::1003 (malware-only: ::1112 and ::1002).
Router › Internet › DNS
DNS mode
Primary DNS
Replace the automatic DNS
Secondary DNS
Save
Some internet-provider routers don't let you change DNS. If yours doesn't, set it on each device or in the browser (next guide).
3
Test it
Restart a device (or turn Wi-Fi off and on), then visit malware.testcategory.com. If protection is working, the page won't load.
Check your understanding
Why set this on the router instead of each device?
Every device in the house uses the router's DNS, including TVs and gadgets that can't run antivirus.
Does this replace antivirus?
No. It's an extra layer that stops known bad sites from loading. Keep Defender or XProtect on too.
Want a checklist that tracks this for your whole family? Sign in to HomeOS.
Checked against:
Cloudflare: Introducing 1.1.1.1 for Families · Cloudflare: Set up 1.1.1.1 (router and devices) · Cloudflare: Set up 1.1.1.1 on a router
· last reviewed 2026-09