DNSAFE Consumer Guide
DNSAFE protects every device on your network by filtering DNS queries before they reach harmful, distracting, or unwanted sites — no software installs required. This guide walks you through setting up your account, pointing your devices at DNSAFE, and getting the most out of your plan.
Create an Account
Sign up at my.dnsafe.net. A free account is created instantly — no credit card required. You can upgrade to a paid plan any time from your dashboard.
Register
Visit my.dnsafe.net and enter your email and a password. You'll be taken directly to your dashboard.
Point your DNS
Configure your device or router to use DNSAFE's DNS servers. See DNS Setup below.
Add your device
Go to Devices and register your public IP address. This links your DNS traffic to your account so your custom rules apply.
Start filtering
DNSAFE's global blocklist is active immediately. Add your own block or allow rules from the Rules page.
DNS Setup
Choose the method that works best for your device or router. All three methods route your queries through DNSAFE's filtering engine.
3.12.124.91
https://api.dnsafe.net/dns-query
api.dnsafe.net:853
How to set DNS by platform
Windows
Settings → Network & Internet → your connection → Edit DNS → Manual → enter 3.12.124.91 under IPv4.
Note: Edge browser has its own DNS setting. Go to Edge Settings → Privacy, search, and services → Security → Use secure DNS and either disable it or set a custom provider using the DoH address above.
macOS
System Settings → Network → your connection → Details → DNS → click + and add 3.12.124.91.
iPhone / iPad
Settings → Wi-Fi → tap your network → Configure DNS → Manual → add 3.12.124.91. For cellular, use DoH via a DNS profile (Settings → General → VPN & Device Management).
Android
Settings → Network → Wi-Fi → long-press your network → Modify → Advanced → IP settings: Static, then set DNS 1 to 3.12.124.91. For Private DNS (DoT): Settings → Network → Private DNS → enter api.dnsafe.net.
Router (whole network)
Log into your router's admin panel (usually 192.168.1.1 or 192.168.0.1), find the DNS or DHCP settings, and set the primary DNS server to 3.12.124.91. Steps vary by router model — consult your router's manual if needed.
Add a Device
DNSAFE uses IP-based device mapping. When your device queries DNSAFE's DNS server, the server checks whether your public IP is registered — and if so, applies your personal block/allow rules and logs your queries.
Find your public IP
Visit api.ipify.org or search "what is my IP" to find your current public IP address.
Add it on the Devices page
Go to my.dnsafe.net/devices, click Add Device, enter the IP and a friendly label (e.g. "Home Router"), and save.
Verify in Query Logs
After a minute of browsing, check Query Logs. If your device is registered correctly, you'll see DNS queries appearing in real time.
| Plan | Device Limit |
|---|---|
| Free | 1 device |
| Personal | 5 devices |
| Family | Unlimited |
| Pro | 25 devices |
Compare Plans
All plans include DNSAFE's global threat and malware blocklist. Paid plans add extra devices, more custom rules, and advanced features.
- 1 device
- 5 custom rules
- Global blocklist
- Query logs
- 5 devices
- 25 custom rules
- Ad blocking
- Extended logs
- Add-ons available
- Unlimited devices
- 100 custom rules
- Parental controls
- Ad blocking
- All add-ons
- 25 devices
- 500 custom rules
- API access add-on
- Priority support
Upgrading Your Plan
You can upgrade at any time from the Billing page at my.dnsafe.net/billing. Upgrades take effect immediately and are billed monthly.
To manage your subscription, cancel, or update your payment method, click Manage Subscription on the Billing page. This opens the Stripe billing portal.
Add-ons
Add-ons are optional monthly extras available to paid plan subscribers. Add or remove them any time from my.dnsafe.net/addons.
Custom Rules
Custom rules let you add your own block or allow entries on top of DNSAFE's global blocklist. Rules are applied per-account, so they only affect devices registered to your profile.
Block rules
A block rule prevents your devices from resolving a specific domain. Use this to block distracting sites (social media, streaming) or any domain you don't want accessed on your network.
Example: Adding tiktok.com as a block rule returns 0.0.0.0 for any query to that domain from your registered IPs.
Allow rules
An allow rule forces a domain to resolve normally, even if it appears on DNSAFE's global blocklist. This is useful if DNSAFE is over-blocking a site you legitimately need.
Example: If DNSAFE blocks ads.example.com but you need it for work, adding it as an allow rule will bypass the global block for your account only.
Rule limits by plan
| Plan | Rule Limit |
|---|---|
| Free | 5 rules |
| Personal | 25 rules |
| Family | 100 rules |
| Pro | 500 rules |
Adding a rule
Go to my.dnsafe.net/rules.
Enter the domain (e.g. reddit.com) and choose Block or Allow.
Click Add Rule. The rule takes effect within seconds — no restart needed.
Query Logs
The Query Logs page shows every DNS query made from your registered devices, along with the action taken (allowed, blocked, or passed).
| Action | Meaning |
|---|---|
| allowed | Query resolved normally — domain is not blocked. |
| blocked | Query was blocked — domain matched the global blocklist or one of your block rules. |
You can filter logs by action, search by domain, and export for your records. Logs are tied to devices registered to your account — if a device isn't registered, its queries won't appear here.
Referrals
Share your personal referral link from my.dnsafe.net/referrals. When someone signs up using your link and subscribes to a paid plan, you both receive a credit applied to your next billing cycle.
Frequently Asked Questions
No. DNS filtering adds microseconds of latency, which is imperceptible in normal browsing. DNSAFE's resolvers are optimized for speed.
DNSAFE operates at the DNS layer, not at the packet level. It blocks a domain by returning an empty address — your browser never makes the TCP connection. HTTPS encryption is not inspected or broken.
Update your IP on the Devices page whenever it changes. Alternatively, use the DoH or DoT address — those don't require IP registration and some browsers support per-profile DoH settings.
Go to Rules and add the domain as an Allow rule. Allow rules override the global blocklist for your account.
Check these things in order:
1. Your device's DNS is actually set to 3.12.124.91 (some browsers override system DNS).
2. Your current public IP is registered on the Devices page.
3. The domain you entered matches exactly — rules don't cover subdomains automatically.
Currently, rules match the exact domain you enter. Blocking reddit.com does not automatically block old.reddit.com. Add each subdomain as a separate rule if needed.
Go to Billing and click Manage Subscription. This opens the Stripe billing portal where you can cancel, update payment info, or download invoices.
Go to Settings and scroll to the danger zone. Account deletion is permanent and removes all your devices, rules, and logs.
Contact & Support
Can't find what you're looking for? Reach out and we'll get back to you within one business day.
Email Support
support@dnsafe.net
In-App Support
Submit a ticket directly from your dashboard — we can see your account details and respond faster.