Four layers, in this order: content restrictions on each device, filtered DNS, router-level filtering for the home wifi, and accountability software that reports to a person. Then give every password away. The passwords are the whole thing. A block you can lift yourself at midnight is a block you've already agreed to lift.
Why the layers exist
You've probably done one of these already and watched it fail. The tool was probably fine. Each layer covers one route and leaves the others open.
A phone restriction doesn't touch your laptop. A browser extension doesn't survive you opening a different browser. DNS filtering does nothing on 4G. Router filtering ends at your front door. None of it covers an app that delivers content without you visiting a website at all.
So aim for coverage rather than one perfect wall. Set one layer today if that's what you've got in you.
The stack
| Layer | What it blocks | How it gets defeated | Setup | |---|---|---|---| | Device restrictions (iOS Screen Time, Android Family Link) | Adult sites system-wide on that device, plus app installs | You know the passcode. A device you forgot you own | 10 minutes, free | | Browser filtering and extensions | Sites in that one browser | A second browser. Uninstalling the extension | 5 minutes, free | | Filtered DNS on the device | Domain lookups across every app and browser on it | Changing the setting back. A VPN. Apps using their own encrypted DNS | 15 minutes, free tiers exist | | Router-level filtering | Every device on the home wifi, including ones you don't administer | Mobile data. Guest networks. The router admin password | 20 to 40 minutes, harder on old routers | | Accountability software | Nothing. It reports what you did to a named person | Uninstalling it, which that person sees | 15 minutes plus one honest conversation | | Age assurance on the sites | Under-18s, by law in the UK | Not designed for you. A floor you don't control | Nothing to do |
Work down it and stop when you're covered. The biggest single gain sits in the third column: hand every passcode to somebody else.
Setting it up without a whole evening
- **Phone first.** Turn on content restrictions in your device settings, switch on the adult-content filter, and lock the settings behind a code. Do it on the phone you actually use in bed.
- **Have someone else set the code.** Hand them the phone, look away, and don't ask for it back on a bad night. If nobody's available, use a long random code and post it to yourself. Slow beats clever.
- **Old devices, in a drawer, right now.** The tablet, the work laptop, the previous phone still on wifi. This is where the second-week rebuild happens almost every time.
- **Point your devices at a filtering DNS resolver.** Several services run family-filter resolvers with free tiers. You set two addresses in your network settings and it filters at the domain level, covering apps as well as browsers.
- **Then the router.** Set the same filtering DNS for the whole network in your router's admin page, plus any parental controls it ships with. Change the router password afterwards and give that away too.
- **Last, add a person.** Accountability software reports what you accessed to someone who agreed to receive it. It blocks nothing, and that's the design.
If you'd rather not administer six settings pages, [Shield](/shield) is the part of Renovyn that runs this across phone and laptop with someone else holding the off switch. A friend and a paper envelope do the same job for nothing.
Where it leaks
Go through this honestly, because the gap you're not naming is the one that'll get used.
- **The second device.** A work laptop, a games console, a smart TV browser, a phone in a drawer with wifi on.
- **Mobile data.** Router filtering only covers your wifi. On 4G you're outside it, which is why device restrictions matter more than the router does.
- **Guest networks and other people's wifi.** Your router's guest network often bypasses your own filtering rules.
- **A VPN.** Installing one routes around DNS filtering in ninety seconds. Block VPN installs at the device level if that's your move.
- **Private and incognito windows.** They defeat some extensions. They don't defeat DNS filtering. Test yours instead of assuming.
- **Any password you set yourself.** The big one, and not a technical problem. You'll remember it at exactly the hour you least want to.
- **Content that arrives without a search.** Social feeds, messaging apps, forums. A site blocklist has nothing to say about a direct message.
What blocking can and can't do, honestly
This is where most content in this space overclaims, so here's the real state of the evidence.
The best study we have on filtering tested it on teenagers. A preregistered study of 1,004 British adolescents and their caregivers, alongside an analysis of 13,176 EU respondents, found that caregivers' internet filtering had ["inconsistent and practically insignificant links with young people reports of encountering online sexual material."](https://pubmed.ncbi.nlm.nih.gov/29995533/) That should make you sceptical of any product promising a sealed environment.
Be precise about what it shows, though. It measured filtering imposed on adolescents by somebody else, in households where the young person had every reason to work around it. It did not test an adult choosing friction for themselves and handing the key to a friend. Nobody has tested that. So the honest claim is a modest one: friction buys you time and removes the easy path, and anyone selling you a permanent wall is selling you something.
There's a legal floor now too. Ofcom requires that ["all services which allow pornography must have highly effective age assurance processes in place by July 2025 at the latest"](https://www.ofcom.org.uk/online-safety/protecting-children/age-checks-to-protect-children-online/), and it has ruled that self-declaration of age doesn't count as highly effective. That matters for children. It isn't a tool you control.
One more thing, because blocking can quietly turn into a verdict on yourself. Filters are a practical decision about access. They say nothing about your character or your sexuality, and the ICD-11 criteria are explicit that distress ["entirely related to moral judgments and disapproval about sexual impulses, urges, or behaviours is not sufficient"](https://www.findacode.com/icd-11/code-1630268048.html) to constitute a disorder. Set the blocks because you want your evenings back. That's reason enough.
The ten minutes after the block
Here's the part people skip. Friction puts time between the urge and the access, and that time has to contain something.
Decide now what happens in it. Leave the room. Message the person who already knows. Pick it while you're calm, because you will not invent it at 1am. [Getting through the urge without watching](/guides/pornography/getting-through-the-urge-without-watching) has a routine you can run in ten minutes flat.
And when a block comes down and something happens anyway, read it as data about which layer leaked. Close that route. Keep going. [You watched again, what now](/guides/pornography/you-watched-again-what-now) covers the hour afterwards.
Common questions
**How do I block adult sites permanently?** You can't, and that word is what most products are quietly selling. What you can do is block at four layers and give every password away, which turns "permanently" into "not without an awkward phone call". That's usually enough.
**Does DNS filtering block porn on apps as well as websites?** Mostly yes, because apps still resolve domain names. It won't catch content inside an app hosting its own media, and it does nothing on a network you haven't configured, which includes mobile data.
**Is free accountability software any good?** Free tools exist and share the same honest limit: they report, they don't block. The value is in the person receiving the report, so pick someone who'll read it and mention it, and pair it with device restrictions.
**Can I block adult sites on my router?** Usually, either through the router's own parental controls or by setting a filtering DNS so every device inherits it. It covers your home wifi and nothing on mobile data, so treat it as one layer.
**Won't I just find a way around all of this?** Sometimes, yes. Friction works by delay, and a delay you can't undo alone survives a bad night. If you're rebuilding access most weeks, add a person or professional support rather than another app. [How to stop using porn](/guides/pornography/how-to-stop-using-porn) covers what that looks like in the UK.
Sources
- [Preregistered internet filtering study, Cyberpsychology, Behavior and Social Networking, 2018](https://pubmed.ncbi.nlm.nih.gov/29995533/). Internet filtering had inconsistent and practically insignificant links with young people encountering online sexual material.
- [Ofcom, age checks to protect children online](https://www.ofcom.org.uk/online-safety/protecting-children/age-checks-to-protect-children-online/). Highly effective age assurance required by July 2025, and self-declaration of age is not enough.
- [ICD-11 compulsive sexual behaviour disorder entry](https://www.findacode.com/icd-11/code-1630268048.html). Distress arising only from moral disapproval does not meet the diagnostic threshold.
