Why this matters:How to recognise this workaround on your side, and what closes it on your side — without telling you how to do the workaround.
How common it is: Private DNS is a system setting on Android 9 and later. Specific misconfiguration rate among Family Link households is not established.
Detection
The Android device’s Private DNS setting is on and points to a resolver the household has not configured; the family DNS resolver receives no queries from the device.
Fix (technical)
On a Family Link supervised device, set the system Private DNS to the family resolver and verify that the device cannot change it without parent approval. Where Family Link does not lock the setting on the current OS version, document the gap and rely on account-level controls.
Fix (relational)
Frame Private DNS as part of the device review, not as a finding. The setting is one tap and most children who change it have not heard of it.
Residual risk
Application-level DoH and browsers with their own resolver are separate surfaces and require their own checks.
Sources
-
google-android-android-private-dns
-
rfc9490-mten
Why trust this page?
Belief-disclosure in plain language. Everything the page claims is sourced; instructions are tested against the software version stated above; nothing is bought or affiliate-linked.
- Standing of evidence
- Primary (first-hand or regulatory source)
- Last verified
- 2026-08-20
Sources used on this page, in the order they appear:
- No external sources were cited.