Windows App Setup Guide

Step 1: Download the App

Download the latest version of the CleanBrowsing Windows Desktop App:

Download CleanBrowsing v1.7.6 (64-bit)

The app requires Windows 10 or Windows 11 (64-bit). No additional software or runtime downloads are needed.

Deploying across a fleet? The installer supports silent deployment with command-line parameters for pre-configuring accounts, PINs, and hardening. See the Intune / MSP Deployment Guide.

Step 2: Install

Run the downloaded installer. Windows will ask for administrator permissions — click Yes to allow it.

If you have a previous version installed, the installer will automatically:

• Stop the running app and DNS proxy service
• Restore your DNS settings to their defaults
• Remove any browser hardening policies
• Install the new version cleanly

Follow the on-screen prompts and click Install. When finished, check Launch CleanBrowsing and click Finish.

Step 3: Enable a Filter

The home screen shows three filter options:

• Family Filter — Blocks adult content, mixed content, malware, and phishing. Best for families.
• Adult Filter — Blocks adult content and malware. Allows social media and mixed-content sites.
• Custom Filter — Uses your CleanBrowsing Dashboard settings. Requires a paid plan.

Click Enable on any filter card. The status bar at the top turns green when filtering is active.

The app automatically configures DNS on all your active network interfaces (Wi-Fi, Ethernet, etc.).

Step 4: Set a Password (Recommended)

To prevent unauthorized changes, set a local PIN:

1. Go to Settings in the navigation bar
2. Click Set Password
3. Enter your chosen PIN and confirm

Once set, the PIN is required to change filters, reset settings, toggle hardening features, and uninstall the app.

Step 5: Enable Hardening (Optional)

For stronger protection, go to Harden in the navigation bar. Three features are available:

• Application Uninstall Protection — Prevents removal through Add/Remove Programs
• Block Network Settings — Blocks access to DNS and network configuration in both the legacy Control Panel and the Windows 10/11 Settings app (Network & Internet pages). Prevents users from manually changing DNS servers to bypass filtering.
• Browser Secure DNS Hardening — Disables DNS-over-HTTPS in Chrome, Edge, Brave, and Firefox so browsers can't bypass your DNS filtering

Click Enable on each feature you want to activate. These are especially useful when setting up a shared computer or a child's computer.

Step 6: Verify Filtering is Working

After enabling a filter, verify it's working:

1. Open a browser and visit the CleanBrowsing DNS Leak Test
2. The results should show CleanBrowsing as your DNS provider
3. Try visiting a site that should be blocked — you should see a block page

The app also monitors your network continuously. If you switch Wi-Fi networks or plug in an Ethernet cable, it automatically re-applies your DNS settings.

If you connect to a captive portal network (hotel, airport), the app will temporarily pause filtering, let you authenticate, and then automatically resume protection.

If the app loses connectivity to CleanBrowsing's resolvers for any reason, it pauses filtering gracefully rather than blocking traffic, and automatically resumes once connectivity is restored. If a PIN is set, the connection dialog will offer an option to keep filtering disabled — but that option requires the PIN, so it can't be triggered accidentally.