Set up Cloudflare 1.1.1.1 resolver
By default, the DNS server your devices use is provided by your Internet provider. To start using 1.1.1.1 for your DNS queries, you will need to change the DNS settings in your device or router.
Device or router specific guides
You can also set up 1.1.1.1 for Families for an added layer of protection on your home network against malware and adult content. 1.1.1.1 for Families leverages Cloudflare’s global network to ensure that it is fast and secure around the world, and includes the same strong privacy guarantees that Cloudflare committed to when launching 1.1.1.1.
1.1.1.1 for Families
1.1.1.1 for Families categorizes destinations on the Internet based on the potential threat they pose regarding malware, phishing, or other types of security risks.
1.1.1.1 for Families has two default options:
Block malware
Use the following DNS resolvers to block malicious content:
1.1.1.21.0.0.22606:4700:4700::11122606:4700:4700::1002
Block malware and adult content
Use the following DNS resolvers to block malware and adult content:
1.1.1.31.0.0.32606:4700:4700::11132606:4700:4700::1003
Cloudflare returns 0.0.0.0 if the
fully qualified domain name (FQDN) or IP in a DNS query is classified as malicious.
Test 1.1.1.1 for Families
After configuring 1.1.1.1 for Families, you can test if it is working as intended with the following URLs:
- https://malware.testcategory.com/: Use this to test if 1.1.1.1 for Families is blocking known malware addresses correctly.
- https://nudity.testcategory.com/: Use this to test if 1.1.1.1 for Families is blocking known adult content and malware addresses correctly.
DNS over HTTPS (DoH)
If you have a DoH-compliant client, such as a compatible router, you can set up 1.1.1.1 for Families to encrypt your DNS queries over HTTPS. This prevents spoofing and tracking by malicious actors, advertisers, ISPs, and others. For more information on DoH, refer to the Learning Center article on DNS encryption.
To configure an encrypted DoH connection to 1.1.1.1 for Families, type one of the following URLs into the appropriate field of your DoH-compliant client:
Block malware
Block malware and adult content
DNS over TLS (DoT)
1.1.1.1 for Families also supports DoT if you have a compliant client, such as a compatible DoT router. DoT allows you to encrypt your DNS queries, protecting you from spoofing, malicious actors, and others. You can learn more about DoT in the Learning Center article on DNS encryption.
To configure an encrypted DoT connection to 1.1.1.1 for Families, type one of the following URLs into the appropriate field of your DoT-compliant client:
Block malware
Block malware and adult content