Every device. One install.

Cover every screen in your house with one tap.

PureGuard DNS is the easiest install we offer. One profile on your iPhone or your home router and every device that connects — phones, iPads, smart TVs, your kid’s tablet, your guest’s phone, every Roku, every Apple TV — gets filtered automatically.

No app to install on the TV. No setup on each device. No developer mode. Just one config profile or one router setting.

iPhone & iPad — one tap

Install the PureGuard profile

From Safari on your iPhone, tap the green button below. iOS will offer to open the file in Settings. Tap Allow, then Install. Done. Every app on your phone now uses PureGuard DNS.

Install for iPhone / iPad →

What you’ll see, step by step

Tap the green button (must be opened in Safari, not Chrome).
iOS shows: “This website is trying to download a configuration profile. Do you want to allow this?” → tap Allow.
iOS shows: “Profile Downloaded” → close that, open the Settings app.
At the very top of Settings, you’ll see “Profile Downloaded” — tap it.
Tap Install in the top-right (you’ll see the description and a warning that the profile is unsigned — that’s normal for self-distributed profiles).
Enter your iPhone passcode if asked. Tap Install again. Done.
Test: try visiting a known adult site in Safari — you’ll get a “page can’t be loaded” error. PureGuard is working at the network layer.

To remove later: Settings → General → VPN & Device Management → PureGuard Filter → Remove Profile.

Mac — one tap

Same pattern. Open Safari on your Mac, tap the link, macOS opens System Settings → Profiles, click Install.

Install for Mac →

Home router — covers everything in your house

Change one setting on your home router and every device on your Wi-Fi — TVs, smart speakers, gaming consoles, kids’ tablets, every guest’s phone — uses PureGuard DNS.

In your router’s admin page, find the “DNS” setting and set:

Primary DNS

1.1.1.3

Secondary DNS

1.0.0.3

These are Cloudflare 1.1.1.1 for Families — the same family-safe DNS service that backs many parental-control products. We use them as our upstream until our own anycast DNS network is ready (coming this summer). The address-book / blocklist behavior is similar but not identical to PureGuard’s direct DoH endpoint above; for the strongest protection, install the iPhone/Mac profiles AND change router DNS.

How to find your router’s admin page

In any browser on a device that’s connected to your Wi-Fi, type one of these addresses in the bar:

192.168.1.1 — most common
192.168.0.1 — Comcast / Xfinity
10.0.0.1 — Cox, some others
router.asus.com — Asus routers
tplinkwifi.net — TP-Link

Login is usually printed on a sticker on the router. If you can’t find it, email letsgo@pureguard.ai with your router brand and we’ll walk you through it.

Smart TV directly (if you can’t change the router)

Most TVs let you set custom DNS in network settings. Use the same Cloudflare 1.1.1.1 for Families addresses (1.1.1.3 / 1.0.0.3) above.

Roku: Settings → System → Advanced system settings → Network → Static IP → set DNS
Apple TV: Settings → Network → Wi-Fi or Ethernet → Configure DNS → Manual
Fire TV: Settings → Network → long-press your Wi-Fi network → Advanced settings
Samsung Tizen: Settings → General → Network → Network Status → IP Settings → DNS Setting → Enter manually
LG webOS: Settings → All Settings → Network → Wi-Fi Connection → Advanced Wi-Fi Settings → DNS server
Google TV / Android TV: Settings → Network → Network & Internet → long-press your network → IP Settings

Windows & Android phones

Windows 11: Settings → Network & Internet → Wi-Fi (or Ethernet) → click your network → DNS server assignment → Manual → turn on IPv4 → Preferred DNS 1.1.1.3 — Alternate 1.0.0.3 — DNS over HTTPS: On (Manual template https://family.cloudflare-dns.com/dns-query)
Android (private DNS): Settings → Network & internet → Private DNS → Private DNS provider hostname → family.cloudflare-dns.com

Once our PureGuard-branded DNS is live (coming weeks), these instructions point at pureguard.ai/dns-query instead of Cloudflare’s. Until then, Cloudflare for Families covers the same threat with a slightly different blocklist.

What DNS catches and what it doesn’t

DNS-level filtering blocks a device from connecting to known adult-content domains. It catches: explicit sites typed into a browser, ads loading from blocked ad servers, apps that try to fetch from known adult-CDNs.

It does not catch: a suggestive ad served from Instagram’s own CDN (because cdninstagram.com hosts both your friend’s vacation photo and the lingerie ad — same domain). For that you need the per-device apps’ AI scanning layer that runs on top of DNS. The two layers stack: DNS catches the obvious 95%, the AI scanner catches the gateway 4% that slips through, and you handle the last 1% with your own discipline.

Ready for the per-device apps too?

For the AI-scanning layer (catching the suggestive content DNS can’t see) install the browser extension or per-device app from the install page.

See per-device installs →