Kid-Safe Wi-Fi at the Cottage or Airbnb — Unknown Network, Known Rules

Why vacation Wi-Fi needs a plan

A family from Garrettsville texted me from an Outer Banks rental last summer. Their 10-year-old had hit a website that wouldn't have made it past the home Wi-Fi filter. Nothing terrible, but enough to ruin the morning. The reason: at home the router does DNS filtering. At the rental there was no filter, no parental controls, no nothing. The fix is portable — it travels with the device, not with the router.

Most parents set up a layered system at home — Apple Family Sharing, content filtering, router-level DNS — and assume it follows the kid. It doesn't. The 25-page PDF walks the vacation version: portable DNS filtering, a VPN for hotel and Airbnb Wi-Fi, the hotspot trick that keeps a kid's iPad on your phone's filtered network, and what to disable in unfamiliar places.

Three layers of protection that travel

• 1.1.1.1 for Families — Cloudflare's free DNS filter. Install the app on each device, pick "Families" mode. Blocks malware and adult sites on any network, anywhere.
• VPN on hotel and Airbnb Wi-Fi — encrypts traffic so the rental owner (or the guy in the next room) can't snoop. NordVPN, ExpressVPN, Mullvad are all fine.
• Mobile hotspot from a parent's phone — short trip? Just tether the kid's iPad to your phone instead of connecting to the rental Wi-Fi at all. Your phone has all your filtering already.

Joining unknown networks safely

Ask the host or front desk for the EXACT network name and password. Look for typos — "evil twin" attacks use lookalike network names like "AirBnb_5G" or "Hilton-Free." When you leave, on each device: Settings → Wi-Fi → tap the network → Forget. So the phone won't try to auto-rejoin a network with the same name months later from somebody's parking lot.

The cottage-and-cabin upgrade — a travel router with Wireguard

For families renting a place for a week or two, a GL.iNet travel router ($40–$90) makes a huge difference. You plug it into the rental's Ethernet (or have it connect to the rental's Wi-Fi as a client), it runs Wireguard back to your home router, and every device in the rental thinks it's on your home network — with all your DNS filtering and parental controls intact. About 30 minutes of one-time setup. I install about ten a summer.

DNS filtering is not parental control

1.1.1.1 for Families blocks malware and adult content at the DNS layer. It does NOT prevent a kid from switching to cellular data, doesn't block TikTok or Snapchat, doesn't enforce screen time. It's layer one — the dumb filter. The conversation with the kid is layer two. Don't pretend the DNS does all the work. The PDF covers both layers.

What to disable in unfamiliar places

When you arrive: AirDrop set to Contacts Only (not Everyone — strangers send harassing files). Bluetooth file-sharing off on Android. Auto-Join Wi-Fi off for unknown networks. Find My stays on. When you get home: undo the changes you want undone, forget the vacation Wi-Fi networks on every device, and double-check the home filtering is still on.

What's in the 27-page PDF

• The Garrettsville family at the Outer Banks — why vacation Wi-Fi needs its own plan.
• Joining unknown networks safely — the evil-twin attack and how to spot it.
• Captive portals ("accept terms") — what's normal, what's not.
• Turning off auto-join for public networks — iPhone and Android steps.
• 1.1.1.1 for Families — installing it on every family device.
• Other DNS filters — OpenDNS Family Shield, NextDNS.
• VPN basics — what it does, what it doesn't.
• Three VPNs Bill installs — NordVPN, ExpressVPN, Mullvad.
• The travel router upgrade — GL.iNet running Wireguard back to home.
• When NOT to use a VPN (and why some Wi-Fi captive portals block them).
• The mobile-hotspot trick — keeping the kid's iPad on your filtered phone Wi-Fi.
• Apple Communication Limits and Google Family Link on the road.
• What to disable in unfamiliar places (AirDrop, Bluetooth, auto-join).
• What to undo when you get home.
• Pre-trip Wi-Fi checklist (print this).

Why I wrote this

Most of the vacation Wi-Fi calls I get are after-the-fact — "the kid got into something" or "the iPad is acting weird since we got back from Tennessee." Both are preventable with twenty minutes of setup before the trip. The 25-page PDF is the pre-vacation checklist I leave with families who want one less thing to worry about on the road. — Bill