Set up 1.1.1.1 for Families

1.1.1.1 for Families adds a layer of protection to your home network, and protects it from malware and adult content. 1.1.1.1 for Families leverages Cloudflare’s global network to ensure that it is fast and secure around the world, and includes the same strong privacy guarantees that we committed to when we launched 1.1.1.1.

1.1.1.1 for Families categorizes destinations on the Internet based on the potential threat they pose regarding malware, phishing, or other types of security risks. When enabled, 1.1.1.1 for Families will block resolution to these destinations.

1.1.1.1 for Families has two default options:

Protect your home against malware

Using the following DNS resolvers will block malicious content:

1.1.1.2
1.0.0.2
2606:4700:4700::1112
2606:4700:4700::1002

Protect your home against malware and adult content

When you change your DNS resolvers to the addresses below, 1.1.1.1 for Families will block malware and adult content.

1.1.1.3
1.0.0.3
2606:4700:4700::1113
2606:4700:4700::1003

Cloudflare will return 0.0.0.0 if the fully qualified domain name (FQDN) or IP in a DNS query is classified as malicious.

Choose one of the options on the left menu to read full step-by-step instructions on how to configure 1.1.1.1 for Families.

DNS over HTTPS (DoH)

If you have a DoH-compliant client, such as a compatible router, you can set up 1.1.1.1 for Families to encrypt your DNS queries over HTTPS. This prevents spoofing and tracking by malicious actors, advertisers, ISPs, and others. For more information on DoH, refer to the Learning Center article on DNS encryption.

To configure an encrypted DoH connection to 1.1.1.1 for Families, type one of the following URLs into the appropriate field of your DoH-compliant client:

If you want to block malware:

https://security.cloudflare-dns.com/dns-query

If you want to block malware and adult content:

https://family.cloudflare-dns.com/dns-query

DNS over TLS (DoT)

1.1.1.1 for Families also supports DoT if you have a compliant client, such as a compatible DoT router. DoT allows you to encrypt your DNS queries, protecting you from spoofing, malicious actors, and others. You can learn more about DoT in the Learning Center article on DNS encryption.

To configure an encrypted DoT connection to 1.1.1.1 for Families, type one of the following URLs into the appropriate field of your DoT-compliant client: