No single method wins. Device controls follow the child everywhere but need setup per device. Router filters cover everything on home Wi-Fi but not mobile data. Family DNS is easy and free but can be switched off. Apps add reports. The strongest setup combines device controls with a router filter and app approval.
The four ways to block adult sites
Parents who search for how to block xHamster find a confusing mix of advice. In reality there are four main methods: controls built into the device, filters on the home router, a family-safe DNS service, and third-party apps. Each works in a different place and has different weak spots.
Understanding where each one operates makes the choice much easier, because you can see which gaps remain.
It also helps to list every place your child goes online. School laptops, library computers, a grandparent's tablet and a friend's console all count, and you may be able to talk to the adults who run them about their own filters.
Device controls
Tools such as Screen Time, Family Link and Family Safety live on the phone, tablet or computer. They apply wherever the device goes: at home, at school, on mobile data or at a friend's house. They can also control app installs and purchases.
The downside is that each device needs its own setup, and a child who uses another person's device sits outside your control. Settings must also be protected with a passcode the child does not know.
Remember to include the less obvious devices. Smart TVs, handheld consoles, e-readers with browsers and old tablets in a drawer can all open websites, and they are often forgotten when parents set up controls on the main phone.
Parents of younger children often find a device-level setup is all they need for a long time. Once a child has a phone of their own, and starts to go out alone, the other layers become more useful.
Router filters
Many home routers include parental controls or accept a filtering service. Once set, they cover every device connected to the Wi-Fi, including games consoles, smart TVs and visitors' phones. They are a good safety net for younger children.
Their limit is range. Mobile data bypasses the router entirely, and a teenager who knows the router admin password can change settings. Write the password down in a safe place and change the default one.
On the upside, router settings are usually done once and then forgotten, which suits busy households. Check that the filter survives router restarts and firmware updates, because some reset themselves.
Family DNS services
DNS is the address book of the internet. Family-safe DNS services, such as Cloudflare for Families, OpenDNS FamilyShield and CleanBrowsing, refuse to look up addresses in categories like adult content. You can set them on a router or on an individual device.
They are usually free and quick to set up. Their weakness is that a technical child can change the DNS setting on a device, and private DNS features on some phones may skip the router setting. Pair DNS with device controls and app approval.
If you choose a DNS service, read the setup help from its maker, because steps differ between routers, and keep a note of what you changed so that you can undo it if something stops working. After the change, test with a harmless adult-category check to confirm it works.
Third-party apps
Dedicated parental control apps combine filtering with reports, alerts and location sharing across platforms. They suit families with mixed devices or teens who need supervised independence. They usually cost a subscription, and they raise privacy questions that are worth reading about.
| Method | Follows the child? | Cost | Main gap |
|---|---|---|---|
| Device controls | Yes | Free | Per device setup |
| Router filter | Home Wi-Fi only | Often free | Mobile data |
| Family DNS | Where set | Usually free | Easy to change |
| Paid app | Yes | Subscription | Privacy, cost |
Watch for subscriptions that quietly renew, and keep your own records of what you installed on which device. A tidy list makes later changes, like a new phone, much quicker to handle.
The best combination
For most families the best answer is layers. Start with device controls on every child device and a passcode only you know. Add a router filter or family DNS for home Wi-Fi. Switch on safe-search in browsers and video apps, and require approval for new apps so that VPNs and spare browsers do not slip in.
Then add the part no tool can supply: a regular, calm chat. Review the setup every few months, because children change phones, accounts and habits.
Finally, accept that no setup will be perfect. The aim is to make accidents rare, deliberate bypassing awkward and honest conversation easy. That is a realistic standard, and meeting it is a good outcome.
Key takeaways
- Device controls follow your child; router filters protect home Wi-Fi.
- Family DNS is free and simple but can be changed on a device.
- Paid apps add reports and cross-platform control at the cost of privacy trade-offs.
- Layer methods and require approval for new apps.
- Review settings every few months and keep talking.
Frequently asked questions
This article is general information, not legal, financial or medical advice. Details about third-party services are based on public information and may change.