10 min read

Phone and Browser Setup for a Muslim Who Wants Out

A free, step-by-step guide to locking down your phone, DNS and laptop — who should hold the passcode, and the gaps no filter can close.

Let us start by taking one thing off your shoulders: needing a lock on the door does not make you weak.

Many of us carry the idea that a real believer should be able to face anything and choose correctly on willpower alone. So we refuse the filter and treat every night as a fair fight. It is not a fair fight. And when we lose, we read it as proof that our iman is broken, when often what was broken was the setup.

Allah tells us plainly that He does not burden a soul beyond its capacity (translation of the meaning, Quran 2:286). Part of respecting your capacity is not walking into a test you already know you tend to fail. Putting distance between yourself and the door is wisdom, and it is what lowering the gaze looks like when the street is in your pocket (Quran 24:30).

Everything below is free, and most of it takes thirty minutes.

A filter is a fence, not a cure

A filter will not purify your heart, remove the desire, or do your tawbah for you. Anyone who promises that is selling something.

What it does is add friction. It turns a two-second slip into a ten-minute project, and that gap is where you get to be a Muslim again — where you can say A’udhu billah, put the phone down, or just go to sleep. When Jarir ibn Abdullah, may Allah be pleased with him, asked the Prophet ﷺ about the sudden glance, he was told to turn his eyes away (Sahih Muslim 2159). The instruction lives in that one second after. A filter’s whole job is to give you that second back. So aim for friction, not a perfect wall — it does not exist, and we will name the gaps ourselves further down.

Step 1: Find the person who holds the key

This is the step that holds up everything else, and almost every guide leaves it out.

Every filter you can set, you can unset. If you set your own restrictions with your own passcode, you have built a door and left the key in your pocket. On an iPhone it is worse than that: Apple lets you reset a forgotten Screen Time passcode using your Apple Account, so a filter you set for yourself can be undone in about a minute.

So before you touch a single setting, find one trustworthy person — an older brother, your father, a cousin, a friend from the masjid, your wife or husband. Someone who will not shame you.

You do not owe them your history. Keep it this short: “I’m cleaning up my phone so I stop wasting time on things I regret. Can you set the passcode and not tell me what it is?” Most people say yes without asking a single question.

Their job is specific:

  • They type the passcode. You look away. You never learn it.
  • They are the recovery route, not you. On iPhone, do not link Screen Time passcode recovery to your own Apple Account. On Android, the recovery account should be theirs.
  • They should expect you to ask for it eventually. Agree now, while you are calm, that the answer is “not tonight, ask me tomorrow.” Tomorrow-you is a much better Muslim than 1 a.m.-you.

If there is genuinely nobody, set it up anyway with a long random passcode you never read — generate one, seal it in an envelope and post it to yourself. Weaker, but far better than an open door.

Step 2: iPhone and iPad

Apple’s filter is called Screen Time, and it covers third-party apps that choose to use it, not only Safari.

Open Settings → Screen Time → Content & Privacy Restrictions, turn it on, then go to App Store, Media, Web, & Games → Web Content and choose Limit Adult Websites. For a tighter fence, choose Approved Websites Only and add only the sites you need. On the same screen, add your own known triggers by name under Never Allow.

Then close the side doors:

  • In the App Store and purchases section, set Installing Apps to Don’t Allow. Otherwise a fresh browser is one download away.
  • Delete every browser except Safari, then hide Safari too if you do not need it — the toggle is under Other Features (called Allowed Apps & Features before iOS 27).
  • In the EU, Brazil and Japan, also set App Marketplaces to Don’t Allow; Apple notes that alternative marketplaces can carry apps distributing pornography.
  • Finally, have your partner set the lock: Settings → Screen Time → Manage Screen Time → Lock Screen Time Settings. Without it, everything above is one tap from undone.

One honest note: Apple reorganised and renamed parts of Screen Time in iOS 27 (September 2026). The settings all still exist, but if a label has moved on your device, read the section names under Content & Privacy Restrictions rather than hunting for an exact path.

Step 3: Android

Good news, and it is recent. Since Android 17 (June 2026) you no longer need a parent account or a second Google account to lock your own device down.

Go to Settings → Parental controls → Set up Parental controls PIN. Your partner types the PIN and sets the recovery account to their email. Then, under web content filters, turn on Block explicit sites and Filter explicit search results. App blocking, downtime and Play Store age filters live in the same place.

Two limits Google states openly: the web filter covers Chrome and the Google app, not Firefox, Samsung Internet, Brave or Opera — so block those under Blocked apps and install no more. And it cannot be turned on if your device has a work profile or Private Space active.

On older Android versions, the nearest equivalent is Play Store → profile icon → Settings → Family → Content restrictions, with your partner setting the PIN. It only governs installs, which is why the next step matters more for you.

Step 4: DNS — the layer that covers every app

This is the highest-value twenty minutes in the article, and it is free.

DNS is the phone book your device uses to look up websites. Point it at a filtering provider and adult domains stop resolving — in every app and every browser at once, not just the one you configured. Any of these cost nothing:

  • CleanBrowsing Family: 185.228.168.168 and 185.228.169.168
  • Cloudflare for Families: 1.1.1.3 and 1.0.0.3
  • AdGuard Family Protection: 94.140.14.15 and 94.140.15.16
  • Kahf Guard, built by Muslims for Muslim households, whose core filtering is free: use the hostname high.kahfguard.com

On Android, go to Settings → Network & internet → Private DNS → Private DNS provider hostname and enter a provider’s hostname (for example family-filter-dns.cleanbrowsing.org, family.cloudflare-dns.com, family.adguard-dns.com or high.kahfguard.com). This is the good path: it covers mobile data as well as Wi-Fi.

On iPhone, typing DNS servers into one Wi-Fi network protects only that network — step onto mobile data and the filter is gone. For device-wide coverage you need a small DNS configuration profile; CleanBrowsing has a free generator at cleanbrowsing.org/apple-dns. The profile can be removed from Settings, which is exactly why Step 1 exists.

Step 5: Laptop and desktop

Set the same DNS on your laptop, or on your router so the whole house Wi-Fi inherits it.

On macOS, open System Settings → Screen Time → Content & Privacy → App Store, Media, Web, & Games and set web content to Limit Adult Websites or Allowed Websites Only. Then, as a separate step on the main Screen Time page, turn on Lock Screen Time Settings — easy to miss, and without it the filter is one click from off.

On Windows, Microsoft Family Safety includes web filtering at no extra charge with a Microsoft account: add your partner as an Organizer at account.microsoft.com/family, then turn on content filters for your account. It effectively only covers Edge, so block Chrome, Firefox and Brave by name under app blocking.

Treat browser extensions as speed bumps: two clicks from disabled, and absent in a second browser. Use one if it helps, but never as your only layer.

Step 6: The doors nobody blocks

Most people who do all of the above still relapse, and almost always through one of these. Read the list honestly and decide which ones are yours.

  • Mainstream feeds. Reddit and X permit adult content outright, and Instagram and TikTok carry plenty of borderline material by design. DNS filtering works on whole domains, so it cannot block one subreddit or hashtag and leave the rest working. If a feed is your real doorway, the honest fix is deleting that app, not filtering it.
  • Direct messages. No filter reads your DMs. Mute or leave the groups and accounts that send you things.
  • Browsers hidden inside other apps. A link tapped inside a chat, game or shopping app can open a web view that, as Apple notes, third-party apps are not required to pass through its filter.
  • Private browsing. Incognito is not a hole in a DNS filter, but it is a hole in accountability.
  • Any VPN app. A VPN replaces your DNS and undoes step 4 in one tap. If work does not require one, remove it and block new installs.
  • The other screens. An Xbox ships with a browser. So do most LG and Samsung TVs. So does the old tablet in a drawer. Filter the router, and remember the drawer.

What to do when you find the gap

You will find a way around this setup. Hear that as reassurance, not a warning: the day it happens is the day people usually give up entirely.

The gap is information, not a verdict. Two things, in this order.

First, make tawbah straight away, before you fix anything technical. Do not wait until you have “sorted your phone out” to face Allah — that gets the order backwards, and the shame in between is where people drown. He left the door of return open precisely because He knows we would need it. The longer version is here: what to do after a slip.

Second, tell your partner which door it was and close that one. Not all of them — that one. Then reset your streak on the DeenGuard tracker tonight rather than on Monday.

Your thirty-minute checklist

  1. Ask one trustworthy person to hold a passcode.
  2. Turn on Screen Time or Android parental controls with web filtering — they set the passcode and hold recovery.
  3. Block new app installs; delete every browser you do not need.
  4. Set a filtering DNS: Private DNS on Android, a DNS profile on iPhone, the router for the house.
  5. Do the same on your laptop, and lock the settings.
  6. Delete the one app that is actually your doorway. You already know which one.
  7. Start a streak on the tracker tonight.

If you only manage two of these today, do numbers one and four.

A closing dua

O Allah, You know our weakness better than we do, and You never asked of us more than we can carry. Make these small walls a mercy for us and not a source of pride. Let every barrier we put between ourselves and sin be recorded as an act of turning toward You. Guard our eyes and our hearts on the nights when we are alone with our phones, and when we fail, do not let our failure harden into despair. You promised that whoever fears You, You will make for him a way out and provide for him from where he does not expect (Quran 65:2–3). Make us of them. Ameen.

Thirty minutes today. Start with the message to your partner — the rest is just settings. And if you have not closed the first door yet, start with lowering the gaze.