Why is DNS blocking alone not enough to stop porn?
Published 27 August 2026 - last updated 13 October 2026
Because DNS filtering on a router or in a setting gets around in minutes: mobile data, a changed setting, a browser with its own encrypted DNS, or any VPN. Tabaa puts the filtering inside Android itself through Device Owner rights, locks the setting and bans VPNs, so the protection goes wherever you go.
What does DNS blocking do?
DNS is the internet’s address book: when you type a site’s name, the phone asks a DNS server for its address. DNS filtering means the server refuses to give out the addresses of porn sites. The idea is sound; the problem is where it sits. If the filtering lives on a network or in a setting anyone can change, its key is in the hand of the person you are trying to protect.
Five ways ordinary filtering breaks in minutes
- Mobile data instead of Wi-Fi: router filtering disappears the moment the phone leaves the house or turns off Wi-Fi.
- Changing the private DNS setting: it sits open in Android’s settings for anyone to type in another server.
- A browser with built-in encrypted DNS: it asks its own server, and the filter never sees it.
- Any VPN app: all of the phone’s traffic passes through an encrypted tunnel, away from any filter.
- A second space or another user: the blocking tool is not even present inside the new space.
None of these takes skill: they are all in the first search result, and any motivated teenager or adult will find them.
How Tabaa shuts all of these doors
Tabaa installs with Device Owner rights, Android’s highest administrative privilege, and uses them to put the filtering inside the system itself and lock every door around it:
| Bypass | Ordinary DNS filtering | Tabaa |
|---|---|---|
| Mobile data instead of Wi-Fi | Fully bypassed | Filtering works on both, with any SIM |
| Changing the DNS setting | Bypassed | The setting is pinned and locked |
| A browser with encrypted DNS | Bypassed | You can block the browser itself |
| A VPN or proxy app | Bypassed | Banned, and the VPN setting is locked |
| A second space or another user | No blocking inside it | Locked |
| A page opening inside an app or game | Depends on the network | Always filtered |
| Removing the blocking tool | Change one setting | Not available on the phone |
| Factory reset from Settings | Available | Locked |
Filtering that reaches everywhere
Most content today does not open in a browser: it opens in a small browser inside a social or gaming app. Because Tabaa’s filtering lives in the system, every request on the phone goes through it: the browser, the pages inside apps, and apps running in the background. No app has to work with Tabaa to be filtered.
And all of it without the Accessibility permission that reads the screen, and without a VPN on the phone. Your privacy is kept, and banking and wallet apps run as normal.
Pick the protection that fits
- For your children: Tabaa Children, controlled by you from the supervisor app.
- For yourself: Tabaa Adults, with no supervisor and a commitment that holds.
- For the computer: Tabaa Desktop, with filtering on three layers.
All prices are on the pricing page.
Common questions
- So router filtering is pointless?
- It is useful as a first layer for every device in the house. But it ends at the front door, and anyone can get around it by changing one setting. Real protection has to live on the device itself.
- Doesn't Tabaa itself use DNS filtering?
- It does, but pinned in the system: the private DNS is set to Tabaa's filtering server, the setting is locked so it cannot change, and it is re-checked every few seconds. Under it sits a full VPN ban.
- What if someone opens a second space or clones an app?
- Those doors are locked: adding a new user, second space, work profiles, cloned apps and the private space. No corner of the phone escapes the protection.
- And on a computer?
- Tabaa Desktop for Windows filters on three layers: inside the browsers, in the network settings, and in the Windows firewall, which blocks any DNS other than Tabaa's server. On top of that, Windows' built-in VPN is locked.