2 Apr 2020

Cloudflare DNS-Based Parental Control Service

Cloudflare 1.1.1.1 for families
Cloudflare 1.1.1.1 for families
Cloudflare DNS service (1.1.1.1) is a fast, private, and secure service. It does not sell user data or use it for targeted advertising, and the service does not log full user IP addresses and erases logs every 24 hours.


Cloudflare announced new features to its DNS service called 1.1.1.1 for Families which adds new DNS Server IP addresses and filters to the service to block certain requests automatically to malware and adult content. Cloudflare’s standard 1.1.1.1 DNS server doesn’t perform any filtering.

DNS filtering is the process of using the Domain Name System to block malicious websites and filter out harmful or inappropriate content. IP addresses or domain names that are known to host prohibited content are blacklisted, and users cannot access them. When a device on your network tries to request a malicious or adult site, Cloudflare’s DNS will block the attempt by not responding with the site’s actual IP address. You’ll instead see a DNS error which may include details such as site can't be reached, website's IP address could not be found.

Cloudflare DNS, no blocking:
  • Primary DNS: 1.1.1.1
  • Secondary DNS: 1.0.0.1
  • IPv6 Primary DNS: 2606:4700:4700::1111
  • IPv6 Secondary DNS: 2606:4700:4700::1001

Cloudflare DNS, blocking malware only:
  • Primary DNS: 1.1.1.2
  • Secondary DNS: 1.0.0.2
  • IPv6 Primary DNS: 2606:4700:4700::1112
  • IPv6 Secondary DNS: 2606:4700:4700::1002

Cloudflare DNS, blocking malware and adult content:
  • Primary DNS: 1.1.1.3
  • Secondary DNS: 1.0.0.3
  • IPv6 Primary DNS: 2606:4700:4700::1113
  • IPv6 Secondary DNS: 2606:4700:4700::1003

To use the new parental controls, you’ll need to change your DNS server setting on your computer, wireless access points or router. We recommend changing the DNS server on your router, as that change will apply to every device on your network.

Users who used OpenDNS and some other DNS providers in the past may recall that these providers offered similar services already.