BlockMyself - Profile builder

Read this first: what a profile can and cannot do.

On an iPhone or iPad you have not supervised, a profile can genuinely block: it filters every app, works on mobile data, and applies to pages opened inside other apps. What it cannot do is stop you from removing it, or from switching DNS back to Automatic. Those settings exist but Apple restricts them to supervised devices, which means erasing the phone first. See Lock the DNS profile.

So this is worth doing, and it is not a lock. Pair it with a Screen Time passcode someone else holds, which is protected as long as the Apple Account entered at the passcode-recovery prompt is the trusted person's or the prompt is skipped, and with a record someone else can see, so that removing this is visible rather than silent.

Watch this: Apple's developer documentation marks the DNS Settings profile payload as deprecated from iOS 27 and macOS 27. It still works and still installs today, but Apple has put it on notice, and the replacement is delivered by device management rather than by a profile you tap. Re-test this profile after updating to iOS 27, and expect the route to narrow over time.

Build your profile

1. Which device is this for?

iPhone and iPad support Apple's built-in content filter, so you get DNS filtering and site blocking together.

2. Filtered DNS

3. How should sites be filtered?

Apple's own adult-content filter, plus your additions. This is the sensible default.

4. Sites to block optional

One per line. Just the domain — no https:// needed. Be aware there are no wildcards, so subdomains you do not list may still load.

6. A name for this device optional

Only used to label the profile so you can tell it apart later.

Your profile is ready

Download the profile

On an iPhone, if tapping that does nothing, try this link instead.

Now install it

Tap Download the profile above, in Safari. Other browsers on iPhone do not hand off to Settings reliably. Tap Allow when asked.
Open the Settings app. A Profile Downloaded row appears near the top, above your name.
Tap it, then Install, and enter your device passcode. You will tap Install more than once.
If that row is missing, look under General -> VPN & Device Management.

Three things that stop this working, none of them obvious.

A downloaded profile is deleted after about eight minutes if you have not installed it, so download it when you have a moment rather than in advance. If Stolen Device Protection is on and you are somewhere unfamiliar, Apple may refuse to install the profile until you are at a familiar location or temporarily turn the protection off, so do this at home. And if Lockdown Mode is on, profiles cannot be installed at all until you turn it off.

It will say "Not Signed", and that is expected. This page builds the profile on your own device and never sends it anywhere, which also means there is nothing to sign it with. Read it yourself below if you want to check what it does — that is the trade, and it is a reasonable one.

See exactly what you are installing

This is the whole file. No tracking, no identifiers, nothing phoning home.

What this does not cover

Other devices. A profile applies to the device you install it on. Do this on each one.
Apps that are not browsing. Content inside a feed you have allowed is untouched. See Shrink the window.
Your own determination. You can remove this. On iPhone that is the honest limit, and it is why a trusted person matters more than any setting on this page.
Windows, Android and Linux. They have no equivalent to Apple profiles. Set up filtered DNS covers those.