Apple DNS Configuration Profile

Generate a .mobileconfig profile to enable CleanBrowsing DNS filtering on your iPhone, iPad, Mac, or Apple TV. Uses encrypted DNS over HTTPS (DoH).

Family
Blocks adult content, mixed content, malware. Forces SafeSearch.
Adult
Blocks adult content and malware. Does not block mixed content.
Security
Blocks malware and phishing only. No adult content filtering.
Paid / Custom
26+ filters, per-device analytics, full control.

Free filters work for everyone. Paid accounts unlock 26+ configurable categories, custom policies, and device-level analytics.

Complete all steps to download your profile:

○ Account code verified
○ Device type selected
○ Device name entered

Find your code in the CleanBrowsing Dashboard under Your Network.

A label to identify this device in your DNS logs and analytics, e.g., "Kids iPad" or "Living Room Apple TV".

Device name and type are added to the DoH URL as query parameters so queries from this device are identifiable in your dashboard.

CleanBrowsing Family Filter (DoH)

Identify Your Devices

Paid/custom filter profiles support device identification. When you provide a device name and type, they are added as query parameters to the DoH URL. This lets you identify individual devices in your Analytics and Logs.

DNS-over-HTTPS (Custom Filters)

Device name and type are added as query parameters. For example:

https://doh.cleanbrowsing.org/doh/custom-filter/CODE/?devicename=Kids_iPad&devicetype=ipad

Free filters (Family, Adult, Security) do not support device identification since they are shared public resolvers with no per-device tracking.

Installation Guides

Download the profile above, then follow the instructions for your device:

  • iPhone & iPad
    iOS 14+ required. Install via Settings > Profile Downloaded.
  • Mac
    macOS Big Sur+ required. Install via System Settings > Profiles.
  • Apple TV
    tvOS 15+ required. Push from a device sharing the same Apple ID, or use Apple Configurator.
About This Profile
  • Uses DNS over HTTPS (DoH) for encrypted DNS queries on port 443.
  • Works system-wide on all networks (Wi-Fi, cellular, VPN).
  • Captive portal exceptions for hotel and airport Wi-Fi login pages.
  • Includes plaintext DNS fallback to CleanBrowsing servers, so blocks remain active even if iOS triggers a DNS failover.
  • Profile can be removed at any time from device settings.
  • No app installation required.
Related Guides

Need more control? Paid accounts offer 26+ configurable filter categories.

View Pricing