Free · Open Source · Canada-hosted · No tracking

DNS-SHIELD
Safe internet for every Canadian,
at the network level.

Blocks phishing, malware, scams, adult content, gambling, predatory sites, deepfakes, and sextortion — before they ever load. No app. No account. No tracking. Works on every device, including TVs and game consoles.

How it worksGitHub

iPhone · Android · Mac · Windows · Linux · Any router  ·  100% free

Zero query loggingNo IP storageCanada-hostedPIPEDA compliantOpen sourceCompletely free
How it works

Blocking happens before the page loads

Every time your device visits a website, it first asks a DNS server for the address. DNS-SHIELD intercepts that question — harmful sites never get an answer and never load.

1

You visit a site

Your browser or app tries to load any website on any device.

2

DNS query sent

Your device asks DNS-SHIELD: what is the IP address of this domain?

3

Checked against 8 categories

DNS-SHIELD checks the domain against millions of known harmful sites, updated daily.

4

Safe sites resolve, bad ones block

Clean domains get an answer. Harmful domains get nothing — the page never loads.

Three secure protocols — all supported

DNS over UDP / TCPUniversal
Port 53

The standard protocol. Works with all routers and devices. Recommended for network-wide setup.

DNS-over-TLSEncrypted
Port 853

Encrypts DNS queries so your ISP cannot see which sites you visit. Use this on Android Private DNS.

DNS-over-HTTPSMost private
Port 443

DNS inside HTTPS — indistinguishable from normal web traffic. Used by the iOS and macOS profiles.

8 categories blocked, millions of domains

Blocklists fetched from trusted sources, updated every 24 hours automatically.

Phishing

Fake websites that steal passwords, credit card numbers, and personal information. Includes CRA scams, banking fakes, and government impersonators.

PhishTank · OpenPhish · PhishingArmy

Malware

Domains that distribute viruses, ransomware, spyware, and trojans. Also blocks command-and-control servers malware communicates with.

URLhaus · Hagezi Pro

Scams

Tech support scams, romance scams, fake prize websites, investment fraud, and job offer scams specifically targeting Canadians.

ScamBlocker · Custom Canadian feeds

Adult Content

Pornographic websites and adult platforms. Critical for family households, schools, and any environment where minors may be present.

StevenBlack Adult · CleanBrowsing

Gambling

Online gambling sites, sports betting platforms, and casino websites — including offshore sites not licensed under Canadian law.

Gambling Block List

Predatory Sites

Websites used to contact, isolate, or exploit minors — including unmonitored chat platforms and grooming-adjacent services.

CleanBrowsing Family

Harmful AI

Sites offering non-consensual deepfake generation or AI-generated intimate imagery — an emerging threat with no coverage on other public DNS.

DNS-SHIELD Community List

Sextortion

Domains actively used in sextortion campaigns — including email infrastructure, threat delivery networks, and payment collection sites.

DNS-SHIELD Community List

Connect in under 2 minutes

No account. No app. No App Store. Pick your device.

iPhone & iPad
One-tap install via Apple Configuration Profile
1

Download the profile on your iPhone or iPad

2

Allow and install

iOS will show a prompt — tap Allow, then go to Settings → General → VPN & Device Management → DNS-SHIELD → Install.
3

Done — active on Wi-Fi and cellular

DNS-SHIELD is now filtering all DNS queries on your device. All eight categories are blocked automatically.

Remove / Return to default DNS

Go to Settings → General → VPN & Device Management → DNS-SHIELD → Remove Profile. Your DNS returns to automatic immediately.

Your privacy is the whole point

Existing DNS filters either track you, sell your data, or are hosted in the US. DNS-SHIELD was built as an alternative that takes none of those shortcuts.

Zero query logging

We never record which domains you or your family visit — not in aggregate, not per user, not ever.

No IP storage

Your IP address is never written to disk. Requests are processed in memory and immediately discarded.

Aggregate stats only

We track total blocked and allowed query counts. We never log individual requests, sessions, or users.

Canada-hosted

All infrastructure runs in Canadian data centres. Your data never leaves Canadian jurisdiction.

PIPEDA compliant

Designed from the ground up to comply with Canada's Personal Information Protection and Electronic Documents Act.

Open source

Every line of code is public on GitHub. Any researcher, auditor, or citizen can verify exactly how DNS-SHIELD works.

Open source & built for Canada

DNS-SHIELD is completely free. Set it up once — it works silently in the background forever.

View on GitHub

Not affiliated with any government agency · Blocklist sources credited on GitHub

Common questions