Family protection settings: a practical online-safety setup for your home
A practical guide for Quinte families: child accounts, app settings, safer home Wi-Fi and Canadian DNS filtering—without pretending one tool can solve every online risk.
The strongest family online-safety setup is not one app, one filter or one difficult conversation. It is a set of practical layers that reduce avoidable risk and make it easier for a child to get help early.
Start here
- Give children their own account instead of unrestricted access through an adult account.
- Review who can contact them, what apps can access and where reporting tools are located.
- Add DNS filtering to home Wi-Fi, then protect key mobile devices away from home.
- Use settings to reduce exposure—not as a substitute for supervision, trust or clear family rules.
Accounts & devices
Control recovery, app installs, purchases, permissions and updates.
Apps & contact
Limit strangers, private messages, voice chat and public exposure.
Home network
Use DNS filtering to block many known scam, malware and adult-content domains.
Start with the right expectation
Family settings can reduce exposure to known adult-content sites, malicious links, phishing, scam pages, unwanted purchases and contact from strangers. They cannot make every game, group chat, social platform, AI tool or video app safe by themselves.
A child can still face pressure through a friend, a private message, a screenshot, cellular data, another Wi-Fi network or a service that does not use the same protections. Pair settings with an environment where a child can ask for help without fear of getting in trouble.
Layer 1: Give children their own account
Avoid giving a child unrestricted access through an adult’s primary phone, email address, app-store account or social-media account. Where the device supports it, use a child or teen account and keep the adult account in control of the recovery and safety settings.
Keep adult control of
Passwords, recovery email, payment methods, app-install approval and security alerts.
Review permissions
Location, camera, microphone, contacts and photos should not be automatically available to every app.
Keep devices current
Automatic updates and a strong device passcode reduce avoidable account and device risk.
This is not about reading every message or removing all privacy. It is about being able to recover an account, remove a risky app, stop a purchase or respond when something goes wrong.
Layer 2: Check the apps where contact happens
The higher-risk setting is often inside a game, social app, video app or group-chat service a child already uses. Sit down together and identify where someone can make contact.
Open each active app and check:
- Who can send messages, friend requests or invitations?
- Is voice chat, livestreaming or private messaging enabled?
- Is the account public, and can strangers comment or follow?
- Can the child be found through a phone number, email address or contact list?
- Do they know where the block and report tools are?
“Where can someone you do not know contact you in this app?”
Children should know how to block and report an account without being asked to keep replying, collect evidence themselves or decide whether the other person is dangerous.
Layer 3: Add safer DNS to your home Wi-Fi
DNS is the system that helps a device find a website when someone types in a name such as example.com. A family DNS filter can block a device from reaching many domains associated with malware, phishing, scams and adult content.
CIRA Canadian Shield Family
A free Canadian DNS protection service operated by the Canadian Internet Registration Authority. Family adds adult and sexual-content blocking to protection against malware, phishing, botnets and scams.
Cloudflare 1.1.1.1 for Families
A free DNS option that blocks known malware, phishing and adult-content domains. It is a straightforward no-account baseline for a home router or individual device.
On some devices, the Canadian Shield app may ask for permission described as a VPN connection. It uses that operating-system mechanism to apply device-level DNS protection; it is not a conventional privacy VPN that encrypts all internet traffic.
Where should the DNS filter go?
- A
Home router: the best first move.
Router setup protects devices connected to household Wi-Fi, including phones, tablets, computers, consoles and smart TVs. Before changing settings, take a photo of the existing DNS entries and test ordinary services afterward.
- B
Child’s main device: protection away from home.
Device-level protection matters when a child uses cellular data, school Wi-Fi, a friend’s network, public Wi-Fi or a hotspot. CIRA provides current setup instructions and apps for supported devices.
- C
Both: the practical family setup.
Use router-level filtering for household coverage, device-level protection for a primary phone or tablet, and app/account settings on every device.
What DNS filtering can—and cannot—do
It can help with
- Known phishing, malware and scam domains
- Known adult-content domains
- A safer default across household devices
- Reducing accidental exposure
It cannot reliably stop
- Harmful conversations inside apps or games
- Group chats, screenshots or forwarded images
- Grooming or sextortion by an approved contact
- AI-generated images or content reached through another network
It is a useful safety net, not a wall. Apps and browsers that use their own DNS service, another VPN, cellular data or a different Wi-Fi network may not be covered by router-only filtering.
Keep the family rules as clear as the settings
Settings work better when children know what to do.
Make disclosure safe. Address bad choices directly without making secrecy the easier option.
- 01
We do not keep serious online problems secret from safe adults.
- 02
We do not send images, passwords, location or personal information because someone online asks.
- 03
We do not move to another app just because someone tells us to.
- 04
We do not create, alter, save, forward or help spread sexualized, humiliating or deceptive images.
- 05
Asking for help comes before punishment.
Review the setup every three months
Review settings when a child gets a new device, starts a new game or social app, begins using direct messages or voice chat, or has an account problem. A short check-in prevents a one-time setup from becoming outdated.
Ask these four questions
- What are you using now that you were not using three months ago?
- Where can people message you in that app?
- Do you know how to block and report someone?
- Is there anything online you would be worried to tell me about?
If something gets through
A filter not blocking something does not mean a child did anything wrong. If a child sees something upsetting, receives a sexual message, is pressured to send an image or is threatened: stay calm, do not forward intimate material, preserve usernames and threats, and use the correct reporting route.
NeedHelpNow.ca helps when an intimate image involving someone under 18 has been shared or threatened. Report suspected online child sexual exploitation to Cybertip.ca. Call 911 for immediate danger and call or text 9-8-8 for emotional crisis or suicide risk.
Sources and further reading
- CIRA Canadian Shield
- CIRA Canadian Shield configuration guide
- Cloudflare 1.1.1.1 for Families
- ProtectKidsOnline.ca
- Cybertip.ca reporting
Quinte Protects explains sourced information for prevention and community awareness. It does not investigate active cases or replace police, Cybertip.ca, victim services, crisis care or specialist organizations.