Family DNS filtering — for every device, every network
Block ads, porn, gambling, phishing, and malware
on every device in your home
Each of your devices gets its own Private DNS hostname — phones, tablets, computers, smart TVs, and the router itself. No VPN. Optional SafeSearch on Google, Bing, DuckDuckGo, and YouTube. Works alongside Covenant Eyes, Bark, Circle, and other parental-control tools — ArmorDNS blocks the harmful site before it loads; those tools handle accountability and messaging. Better together.
No credit card · $5/mo or $50/yr after 7-day trial · Cancel anytime
- Encrypted DNS (DoT & DoH) supported
- DNSSEC validated
- Uses your device's built-in Private DNS — no VPN
- No data sold, ever
- Optional SafeSearch on Google, Bing, DuckDuckGo, YouTube
Tested and validated on Android, iPhone, Windows, macOS, Linux, and DNS-over-HTTPS in every major browser.
~3.9 million DNS queries filtered per month across 36 protected devices in 13 households. About 1 in 6 gets blocked. · as of August 2026
The stuff that keeps sneaking through
You installed a filter on the router. You put parental controls on the phone. It’s still getting through. Here’s where the leaks usually are — and what ArmorDNS does about each one.
Kids on mobile data
The moment a phone drops off Wi-Fi and onto cellular, your router’s filter stops applying. Everything you blocked at home is back.
ArmorDNS filters over cellular too — Private DNS is set on the device, not the network.
Public Wi-Fi & hotspots
At the coffee shop, at a friend’s house, on hotel Wi-Fi — the filter you set up at home doesn’t follow you. Neither do your filtering rules.
Same Private DNS hostname works on every network the device joins.
Ads and trackers everywhere
Unskippable video ads before every clip. Obnoxious banners on kids' tablet games. Trackers that follow the family across every app and site. Most of it is served from a handful of ad-network domains.
ArmorDNS blocks 625K+ ad and tracker domains device-wide. YouTube and Facebook first-party ads still play — see the FAQ.
DNS bypass tricks
Public DoH endpoints, DNS-over-VPN services, and hardcoded resolvers in individual apps route around most router-level filters.
ArmorDNS blocks known bypass endpoints. Not foolproof against a determined VPN user — see the FAQ.
How It Works
Every time you visit a website or open an app, your device translates the domain name (www.google.com) into a computer-readable address. A DNS sinkhole intercepts those requests and checks them against a list of known bad domains.
If the domain is on the list — an ad server, a malware callback, a phishing site — ArmorDNS returns a dead-end address. The connection never happens. The ad never loads. The tracker never fires.
Because the bad traffic is stopped before it starts, you'll see faster page loads, lower data usage, and fewer distractions — typical users see a 30–50% reduction in traffic just by eliminating the junk.
What It Blocks — and What It Can't
DNS filtering is powerful, but it's not magic. Here's what to realistically expect.
What ArmorDNS blocks
- Third-party ads — banner ads, pop-ups, and video pre-rolls served from ad networks. This is the majority of web advertising.
- Trackers & analytics — cross-site tracking, ad networks, mobile app telemetry, and fingerprinting services.
- Malware & phishing — command-and-control servers, ransomware, credential theft, and cryptojacking.
- Adult content — 610K+ pornography domains blocked across all tiers by default.
- Optional SafeSearch — turn it on per device and Google, Bing, DuckDuckGo, and YouTube are all served in SafeSearch mode. Nobody in the house can turn it off in the browser.
- In-app ads — mobile apps that phone home to ad servers are blocked device-wide, not just in the browser.
Limitations
- YouTube, Facebook, Instagram ads — these platforms serve ads from their own domain. Blocking the domain would break the entire site, so these ads get through.
- Sponsored content — promoted posts, paid search results, and native advertising that live on the same domain as real content.
- Determined bypasses — someone who installs a VPN can route around DNS filtering. ArmorDNS blocks known bypass methods, but it's not foolproof against motivated users.
- Captive portals — hotel, airport, and coffee shop Wi-Fi login pages may not load with Private DNS enabled. You'll need to temporarily disable it to connect, then re-enable.
The bottom line: ArmorDNS eliminates the vast majority of junk traffic. But YouTube pre-roll ads and Facebook sponsored posts will still appear. For those, a browser extension like uBlock Origin is a good complement.
Who ArmorDNS isn't for
I'd rather tell you upfront than take your money and disappoint you.
Enterprises & schools with 500+ devices
The Organization tier tops out at 250 devices. If you need SSO, SCIM, per-OU policies, or MSP-grade admin, use Cisco Umbrella or DNSFilter.
Households where free DNS is enough
If everyone in the house needs the same rules, no per-device settings, no dashboard — Cloudflare's 1.1.1.1 for Families is free and works. Compare.
Setup in 30 Seconds
No technical knowledge required. Three steps and your device is protected.
Create your account
Sign up and add your first device. We generate a unique Private DNS hostname just for you.
Configure your device
Android: Settings → Private DNS. iPhone: download a profile. Windows 11: run a setup script. Mac: install a profile. Router: set your DNS server. Native to each device — nothing extra to install.
Browse with confidence
Ads vanish. Malware blocked. Trackers silenced. Watch it work in real time from your dashboard.
What We Block
Default protection plus optional categories you can toggle per device.
Default Protection
Always blocked to keep your family safe
- Threat Intelligence — phishing, malware, scams
- Ads & Trackers — 625K+ ad and tracking domains blocked
- Malware — 1.3M+ malicious domains
- Pornography — 610K+ adult domains blocked. Turn on Optional SafeSearch to also force Google, Bing, DuckDuckGo, and YouTube into SafeSearch mode.
- Gambling — casinos, betting sites
- Dating — dating apps & hookup sites
- Drugs — illegal marketplaces
- Piracy — torrent & streaming sites
- Newly Registered Domains — domains less than 7 days old, often used for phishing
Optional Categories
Toggle on/off or schedule per device
- Social Media — Facebook, Instagram, TikTok, etc.
- Streaming — Netflix, YouTube, Disney+, etc.
- Gaming — Steam, Epic, Roblox, etc.
- News — major news outlets
- AI Tools — ChatGPT, Claude, etc.
Schedule mode: Allow during homework time, block during bedtime.
Managed vs. Unmanaged Devices
Managed devices inherit your account's protection settings and can't weaken them. Unmanaged devices let each family member customize their own filters. Perfect for giving teens some freedom while keeping younger kids protected.
Full Visibility & Control
See exactly what's happening on your network. Allow or block any domain with one click.
Real-Time Query Log
Watch DNS queries flow in real time. See which domains are blocked and why. Search, filter by device, and one-click allow or block any domain.
Per-Device Management
Add up to 25 devices. Each gets a unique Private DNS hostname. Set different filtering rules per device from your dashboard.
Custom Allowlists
Something blocked that shouldn't be? One click adds any domain to your allowlist. Rules sync to the DNS layer within seconds. Your custom rules always override the blocklists.
Pause Filtering
Need to access something briefly? Pause filtering for 15 minutes, 1 hour, or 4 hours per device. Filtering automatically resumes — no risk of forgetting to turn it back on.
Put on the Full Armor
ArmorDNS is inspired by the Armor of God described in Ephesians 6 — the call to stand firm against the schemes that target our families. I built this because I wanted something that actually works for my own family, in a world where harmful content, scams, and digital temptations are only a click away.
This was born from real need — for families who want to be intentional about what enters their home, online and offline.
I'm Geoff Tidd — a father, a cybersecurity professional in Colorado, and a Christian. I built ArmorDNS after realizing no single tool covered the gap I wanted covered for my own family: block harmful content at the DNS layer, on every device, everywhere those devices go — not just when they're on the home Wi-Fi. Every design decision here prioritizes your family's safety, privacy, and simplicity. I'm also the person who reads the inbox — email geoff@armordns.com or connect with me on LinkedIn.
No ads. No data sales. No third-party tracking.
Your data stays yours. Just protection that quietly does its job.
“Stand firm then, with the belt of truth buckled around your waist, with the breastplate of righteousness in place, and with your feet fitted with the readiness that comes from the gospel of peace.”
Simple Pricing
Protect your family or your whole organization.
For context: family filtering apps like Bark and Aura run $99–144/yr per family, Covenant Eyes-style accountability tools run $16.99/mo per user, and free DNS filters (Cloudflare 1.1.1.1 for Families, OpenDNS FamilyShield) don't give you per-device rules or a query log. ArmorDNS lands in the middle — one flat family price, full dashboard, and it composes cleanly with an accountability tool if you want one.
Family
or $50/year (save $10)
Up to 25 devices · one flat price for the whole household
About $0.20 per device per month for a full family — less than a single stream of most streaming services.
For comparison (list prices):
- Bark family plan — $99–144/yr per family, no DNS-layer filtering
- Covenant Eyes — $16.99/mo per user (~$204/yr for one person)
- Aura Kids — $10/mo, one household, no DNS-layer filtering
Complements the tools your family may already use:
- Covenant Eyes reports what a device did — ArmorDNS blocks it before it loads
- Bark screens messages — ArmorDNS blocks the sites those messages link to
- Router controls work at home — ArmorDNS works on cellular and hotel Wi-Fi too
- All protection categories
- Custom allow/blocklists
- Real-time query log
- Pause filtering
Organization
or $200/year (save $40)
Up to 250 devices · Churches & groups
Less than $0.08 per device per month at 250 devices — cheaper than a single seat of most per-user tools.
For comparison (list prices):
- Cisco Umbrella — enterprise pricing, typically $2–3/user/mo (250 users ≈ $500–750/mo)
- DNSFilter — $1.16/user/mo entry (250 users ≈ $290/mo)
- Covenant Eyes — $16.99/mo per user, doesn't scale to org tiers
Fills the DNS-layer gap most tools leave open:
- Consumer parental tools (Bark, Circle, Aura) don't have organization tiers
- Accountability tools like Covenant Eyes work per user — ArmorDNS covers every device on the org account
- Layer with your firewall and endpoint security for defense-in-depth
- Everything in Family
- Shared device management
- Priority support
Which plan fits?
| Family | Organization | |
|---|---|---|
| Devices | Up to 25 | Up to 250 |
| Who it's for | One household | Churches, ministries, small orgs |
| All protection categories | ✓ | ✓ |
| Custom allow/blocklists | ✓ | ✓ |
| Real-time query log | ✓ | ✓ |
| Managed vs unmanaged devices | ✓ | ✓ |
| Shared admin seats | ✓ | ✓ |
| Priority support | — | ✓ |
| Monthly / annual | $5 / $50 | $20 / $200 |
7-day free trial · No credit card required · Cancel anytime
Payments processed securely by Stripe · 256-bit TLS · PCI-DSS Level 1
- Visa
- Mastercard
- American Express
- Discover
- Apple Pay
- Google Pay
No data sold, ever · Cancel from your dashboard in one click · Email geoff@armordns.com with any billing question
Families using ArmorDNS
Frequently Asked Questions
- Will this block YouTube and Facebook ads?
- Not most of them. YouTube, Facebook, and Instagram serve ads from their own domains — blocking those domains would break the sites entirely. ArmorDNS blocks the vast majority of third-party ads (banner ads, pop-ups, in-app ads), but first-party ads on major platforms will still appear. For those, a browser extension like uBlock Origin is a good complement.
- Why not just use free DNS filters like Cloudflare 1.1.1.1 for Families or OpenDNS FamilyShield?
- You can, and for many households it's enough. Free DNS filters block one policy for your whole network — good enough if everyone needs the same rules. ArmorDNS is worth paying for when you want per-device rules (different for the 9-year-old and the 16-year-old), a dashboard that shows real-time queries, one-click overrideswhen a legitimate site gets blocked, optional SafeSearch on YouTube (not just Google), and schedule mode (gaming blocked during homework). Full comparison: ArmorDNS vs free DNS filters.
- Does ArmorDNS replace Covenant Eyes?
- No — different jobs. Covenant Eyes is an accountability tool: it watches what a device is doing and reports it to a trusted person. ArmorDNS is a filtering tool: it blocks the bad domain at the DNS layer so it never loads. Most households benefit from both — one catches the leak, the other lets someone you trust see the pattern. ArmorDNS also lets you share account access with a spouse or trusted ally so they can see the full traffic view across devices. Full comparison: ArmorDNS vs Covenant Eyes.
- How much of my traffic actually gets blocked?
- Most users see 30–50% of DNS queries blocked, depending on their apps and browsing habits. That translates to faster page loads, less data usage, and significantly fewer distractions. Your dashboard shows your exact block rate in real time.
- What devices are supported?
- Any device that supports Private DNS (DNS-over-TLS) or DNS-over-HTTPS. This includes Android 9+, iOS 14+, macOS, Windows 11, and most modern routers. Setting up on a router protects every device on your network — and setting Private DNS on the phone follows it onto cellular and public Wi-Fi.
- Can my kids bypass the filtering?
- DNS filtering can be bypassed by someone with technical knowledge, such as installing a VPN. ArmorDNS blocks known DNS bypass methods (public DoH endpoints, DNS-over-VPN services) to make this harder. For younger children, it provides strong protection. For teens, pair it with device-level parental controls for defense in depth.
- What if a legitimate site gets blocked?
- Your dashboard shows every blocked query in real time. One click adds any domain to your allowlist, and it syncs to the DNS layer within seconds. You can also temporarily pause filtering per device.
- Do you log my browsing history?
- ArmorDNS retains aggregated query data for your dashboard (domain, count, blocked/allowed). Query logs are retained for 7 days and automatically purged. We don't sell data, serve ads, or share your information with third parties. All DNS traffic is encrypted with TLS and validated with DNSSEC.
- How is this different from a browser ad blocker?
- Browser extensions only protect that one browser. ArmorDNS filters all DNS traffic from the entire device — every app, every browser, every background connection. It catches things extensions miss, like in-app ads, smart TV telemetry, and malware callbacks. The two work well together: ArmorDNS for network-wide protection, a browser extension for the first-party ads it can't catch.
Protect Your Family Today
Start your free trial in under a minute. No credit card required.
Start Free Trial