KNOWLEDGE
9.9.9.9, AdGuard DNS or AdGuard Home — which one actually protects your family?
Just entering 9.9.9.9 is enough, right? Not quite. Why Quad9, AdGuard DNS Family and AdGuard Home offer three very different levels of protection — and which one is right for your family.
"Enter 9.9.9.9 in the router — then you're protected." You'll find this advice everywhere. It's not wrong. But for families with children, it's not enough. Here's the difference.
The four levels — from unprotected to full protection
Your home network sits on a protection ladder. Most families have no idea which rung they're on.
Level 0 — Unprotected (ISP DNS)
Your internet provider gives you their own DNS server by default. It filters nothing. Advertising, trackers, phishing sites, adult content — everything gets through. This is the starting point for most families.
Level 1 — Basic protection (Quad9 / 9.9.9.9)
Quad9 is a free DNS server operated in Switzerland. It blocks known malware domains and phishing sites — automatically, for all devices, as soon as you enter 9.9.9.9 in your router. That's better than nothing. Much better, in fact.
What 9.9.9.9 does — and what it doesn't
Blocks: Malware downloads, phishing sites, known malicious domains.
Doesn't block: Pornography, violent content, advertising, trackers. Quad9 is not a family filter — it's a security filter.
For adults without children at home: perfectly sufficient. For families with children: a good start, but that's Level 1.
Level 2 — Family protection (AdGuard DNS Family)
AdGuard DNS Family runs on the same servers as Quad9 — free, easy to enter. The difference: it additionally filters adult content, advertising, and trackers.
AdGuard DNS has two different profiles — one with a family filter, one without. Entering the wrong one means no child protection is active. And most people don't notice.
💡 Tip:
The most common mistake: entering AdGuard DNS — but the wrong profile. The standard profile has no family filter. A single wrong digit in the IP address determines whether your child is protected or not. Our Internet Shield shows you which profile you need and how to enter it correctly.
AdGuard DNS Family also offers a dashboard: you can see which domains were blocked. Individually configurable (whitelists, custom blocklists) on the paid plan. The free plan has a fixed family filter.
Level 3 — Full control (AdGuard Home, self-hosted)
AdGuard Home is the same software — but you run it on your own mini PC in your home network. That means:
- Full control over filter lists — you decide what gets blocked
- Per-device profiles — the kids' tablet has different rules than the parents' laptop
- Dashboard with all DNS requests in real time
- No data leaves your network
- No monthly subscription — one-time hardware investment (~€160)
The effort: setup in about 20 minutes with a good guide. Maintenance-free afterwards.
Which level is right for you?
| Situation | Recommendation |
|---|---|
| No children, just want to browse more safely | Level 1: enter 9.9.9.9 |
| Children under 13 at home | Level 2: AdGuard DNS Family — correctly configured |
| Want to know what your child is requesting | Level 3: AdGuard Home on your own server |
| Teens who know what VPN apps are | Level 3 + router firewall against DNS bypass |
The decisive difference
DNS providers like Quad9 and AdGuard are free. What many don't realise: correct configuration is everything. Which AdGuard profile for an 8-year-old? How do you verify the filter is actually active? What to do when the router doesn't hold the setting?
A DNS server is like a doorman without a briefing. You have to tell them who to let in — and then test whether they actually do.
⚠️ Note:
Many routers silently fail to apply custom DNS settings — the filter appears active but isn't. Without a targeted test, you don't know if your child is actually protected. Our Internet Shield shows you how to check this in 2 minutes, step by step.
Summary
- 9.9.9.9 (Quad9) = malware protection, no family filter. Good for adults.
- AdGuard DNS Family = family filter, ads blocked, free. But only effective with the right profile and verification.
- AdGuard Home = full control, own server, per-device profiles. Level 3 for families who want more.
Your Internet Shield: Set up in 15 minutes.
Which settings you need, how to configure them on Fritz!Box, Speedport and other routers, and how to set up protection profiles by age — step by step, no jargon.
Get Internet ShieldMore visibility over your home network?
A local filter in your home network protects all devices at once — smart TVs, consoles, and guest Wi-Fi included.
View NUNIVIA Home Guide