AdGuard DNS

The zero-account option. AdGuard's public Default servers block ads, tracking and phishing for anything you point at them, and there is nothing to sign up for. On an Android phone, typing dns.adguard-dns.com into the Private DNS setting covers every app on the device, which makes it the easiest whole-phone fix to set up for a relative. The trade-off is control: the public servers use AdGuard's own choice of blocking, and you get no allowlist or query log of your own, so a broken app means switching DNS off rather than unblocking one domain. Families can swap to the Family servers instead, and the private, account-based version adds per-device settings when you outgrow the public one.