Private DNS to Block Porn on Android: The Best Hostnames for 2026
To block porn with Private DNS, open Settings, find Private DNS, choose Private DNS provider hostname and type family.cloudflare-dns.com. Adult sites then fail to load in every browser and app on the phone, on Wi-Fi and on mobile data. It is free and built into every Android phone from Android 9 on.
This page lists the hostnames that actually filter porn, what each one blocks, where the setting is on each brand of phone, how to check it works, and what Private DNS can't stop.
What Private DNS Does
Every time you open a website, your phone first looks up its address, a bit like looking up a name in a phone book. Private DNS lets you choose who answers those lookups. A family filter answers normally for most sites and refuses to answer for adult ones, so those pages never load.
Because the lookup happens below the browser, the filter covers Chrome, Samsung Internet, Firefox and apps like Reddit and X all at once. The lookups are also encrypted, so your Wi-Fi provider can't change them.
Private DNS Hostnames That Block Porn
Type the hostname exactly as written. No https://, no slash at the end, and no IP address. The field only takes a hostname.
| Provider | Hostname | What it blocks |
|---|---|---|
 Cloudflare Family | family.cloudflare-dns.com | Adult sites and malware |
 CleanBrowsing Family | family-filter-dns.cleanbrowsing.org | Adult sites, mixed content sites, VPN and proxy sites, malware. Forces SafeSearch. |
| CleanBrowsing Adult | adult-filter-dns.cleanbrowsing.org | Adult sites and malware |
 AdGuard Family | family.adguard-dns.com | Adult sites, ads, trackers, malware. Turns on SafeSearch where it can. |
We checked that each of these hostnames answers on the encrypted connection Android uses, in October 2026.
These do not block porn: dns.google, one.one.one.one, 1dot1dot1dot1.cloudflare-dns.com and dns.adguard-dns.com. They are privacy or ad blocking services with no adult filter. Many guides list them next to the family filters, and people set them up thinking they are protected.
Which One to Choose
- For your own phone: Cloudflare Family. It is fast everywhere, it rarely blocks normal sites by mistake.
- For a child's phone: CleanBrowsing Family. It is the strictest of the four. It also blocks many VPN and proxy sites, which makes the most common way around a DNS filter harder to find.
- If you also want ads blocked: AdGuard Family. Some apps and shopping sites break when their ads are blocked, so expect the odd page that doesn't load properly.
Where Private DNS Is on Each Phone
The setting has the same name on every phone, but each brand puts it in a different menu. If your phone doesn't match, open Settings, tap the search bar and type Private DNS.
Pixel, Motorola and most stock Android phones
Settings, Network & internet, Private DNS. On some phones it is under Advanced.
Samsung Galaxy
Settings, Connections, More connection settings, Private DNS. Full steps are in our Samsung guide.
Xiaomi, Redmi and POCO
Settings, Connection & sharing, Private DNS. On some HyperOS versions it is under More connection options. See our Xiaomi guide.
Tecno, Infinix and itel
Use the Settings search bar and type Private DNS. The menu moves between versions. See our Tecno and Infinix guide.
OnePlus, Oppo and Realme
Settings, Connection & sharing, Private DNS. On older versions the first menu is called Wi-Fi & network. Choose Manual or Designated private DNS provider.
On every phone, once you are in Private DNS, choose Private DNS provider hostname, type the hostname and tap Save.
How to Check It Works
- Close your browser fully and open it again, so it doesn't use an old saved lookup.
- Open an adult site you know. It should fail with an error such as "This site can't be reached".
- Try it on mobile data as well as Wi-Fi. Private DNS should block it on both.
If the site still loads, one of these is usually the reason:
- A VPN is on. A VPN app takes over the phone's lookups and skips Private DNS. Check for a key icon in the status bar.
- Chrome has its own DNS set. In Chrome, open Settings, Privacy and security, Use secure DNS. If a custom provider is chosen, Chrome skips your filter. Leave it on the default.
- Another app is skipping it. Delete browsers and apps you don't use.
Common Private DNS Errors
"Couldn't connect" or "No internet" after saving
First check the spelling of the hostname. One wrong letter and the phone can't reach any site. If the spelling is right, the Wi-Fi you are on may block encrypted DNS. Some school, office and hotel networks do. Try mobile data to confirm. Private DNS will work again when you leave that network.
The Private DNS option is missing
Private DNS needs Android 9 or newer. On an older phone, set a family DNS on your Wi-Fi router instead. Our porn blocker DNS guide has the addresses.
Some normal sites stopped working
Family filters sometimes block a harmless site by mistake. CleanBrowsing Family and AdGuard Family do this more often than Cloudflare Family. If it keeps happening, switch to family.cloudflare-dns.com.
What Private DNS Can't Stop
Private DNS is a good first layer, but anyone holding the phone can undo it:
- It switches off in a few taps. Private DNS has no passcode. Set it to Off and everything loads again.
- A VPN goes straight around it. Any free VPN from the Play Store skips it in about a minute.
- A new browser can skip it. Some browsers send lookups their own way, or come with a VPN built in.
- Nobody finds out. There is no alert or report when it is turned off.
On a child's phone, Google Family Link can stop some of this, because a parent controls what gets installed. On your own phone, nothing stops you switching it off.
When Private DNS Isn't Enough: QuitPorn
With QuitPorn, you choose a lock from 1 day up to 365 days, and it can't be ended early. Our support team can't end it either. It installs from Google Play and works on Samsung, Pixel, Xiaomi, Tecno, Infinix, OnePlus and other Android phones.
During a lock:
- Nobody can switch it off. It can't be deleted until the lock ends.
- A VPN doesn't get around it, and neither does a new browser.
- It ends on the date you chose, by itself.
- There is no passcode. On Android there is nothing to guess, write down or ask for.
One account covers up to 5 devices: Android, iPhone, iPad, Windows and Mac. Plans are $15 a month, $78 for six months, or $120 a year. If you haven't started a lock yet, you can get a refund within 7 days. See the plans.
Frequently Asked Questions
What is the best Private DNS for blocking porn?
family.cloudflare-dns.com for most people. It blocks adult sites and malware and rarely blocks normal sites. For a child's phone, family-filter-dns.cleanbrowsing.org is stricter.
Does Private DNS block porn on mobile data?
Yes. Private DNS works on Wi-Fi and on mobile data. The only exception is a network that blocks encrypted DNS, and then the phone shows a connection error instead of loading sites.
Does Private DNS block porn in apps?
Yes, in most apps, because apps look up addresses the same way browsers do. It does not filter what an app shows from its own servers. Pictures posted on a social app you are allowed to use, for example, still show.
Is dns.google a porn filter?
No. dns.google is Google's normal DNS service. It does not block adult sites. Use one of the family hostnames in the table above.
Can I lock Private DNS so it can't be changed?
Not with Android's own settings. Anyone with the phone can change it. Family Link can limit some changes on a child's phone. On your own phone, QuitPorn gives you a block that can't be switched off until the lock ends.
Does Private DNS slow down my phone?
Not in a way you will notice. Cloudflare, CleanBrowsing and AdGuard all run servers around the world, and your phone saves recent lookups.
For the full picture on Android, read our Android blocking guide or the ranking of the best porn blockers for Android.
This is general information, not medical advice. For help with your own situation, talk to a doctor or therapist.
The QuitPorn Team
