Yes:

• SafeSearch always enforced on Google, Bing, DuckDuckGo, Yandex and Brave search engines.
  • Non-SafeSearch search engines removed.
• Bad websites continually categorized and removed from your internet.
• Malware sites continually updated and blocked.

The end result is a very clean, fast and error free Internet experience.

Yes, you can easily (once you know how to do it) enable / disable Kibosh Pro from your Portal.

Cancel Pro Subscription -

From your Kibosh Portal > Account > Subscriptions > and cancel your Pro subscription.

NOTE: This will turn off your all Internet Filtering and Parental Controls - your Portal will show no activity.

But, you will always have access to Portal > Dash > Settings (firewall, wifi, etc).

Re-activate a cancelled Pro Subscription:

From your Portal > Account > Activation

From the Kibosh Device drop down - choose your Kibosh Router ID

Save & Next

Complete Checkout and you will be back online with Pro.

Yes, and Pro blocks TOR, DNS over HTTPS bypass, Apple's Private Relay, and DNS Bypass.

This is a constant battle and part of the firmware updates.

The MT6000 is one of the more powerful WiFi routers on the market today.

If you are struggling with WiFi range issues we recommend WiFi range extenders:

Netgear WiFi range extender ($40)

TP-Link WiFi range extender ($90)

These are easy to install and troubleshoot.

Watch the Kibosh VPN Setup video located here. 

Then review the Kibosh Mobile Quick Start Guide. 

Kibosh Pro will:

1. Block Malware infected websites
2. Show you that a Malware site has been blocked
   • Your Kibosh Portal HUD will show that Malware has been detected & blocked
   • You can drill into the Device > Settings and go to Malware to see exactly what site was blocked
     • Most of the time it's ad tracking - look up the domain to find the source.

You do not need to take any action, Kibosh has already blocked it.

However, if you feel a particular device has a Malware infection, then you'll want to take some action.

For example, we all have devices that get Malware hits here and there for mostly ad related trackers being blocked. No big deal and in fact the ad trackers being blocked will tell you a lot about where the user has been browsing.

But let's say you have a device with a hundred malware blocks in a 24 hour period - this device most likely has a Malware infection, and if you do not address this ASAP it might spread to other devices - which your Kibosh Portal HUD will show you.

Go to the Support-Center > Malware for handling detailed instructions.

Any mobile device with Cellular Data must have the KiboshVPN installed in order to control it from your Kibosh Portal.

Otherwise it will just switch to Cellular data if WiFi get's turned off.

On a Kibosh-internet:

1.  one cannot search for bad content because bad terms are not allowed (SafeSearch enforced)
2. there are no bad images in image search results (SafeSearch enforced)
3. if one tries to go directly to a bad website it's blocked (Web Filtering Engine)

The end result is that 'searching' for bad content on a Kibosh-internet is impossible, so one could only go directly to a bad website, assuming it's not blocked which is rare.

If a bad website has not been pre-detected by Kibosh, and is accessed - that website will be listed in the history of a device, and all other websites.

Go to Dash > Devices > [device] > History.

Why do some devices periodically show up in Portal / Devices with a different IP address?

Because of MAC Randomization by apple, google, microsoft.

Solution: disable Private WiFi on each device having this issue.

You only have to do it once.

How To turn off Wi-Fi MAC address randomization

Jump to:

• Apple
• Android
• macOS

On Apple: iPhone / iPad

Settings > Wi-Fi, tapping the "i" icon next to the network, and toggling off "Private Address".

And say Yes to the Tracking Warning. 

NOTE: The Kibosh infrastructure is actually private and secure - and Apple can't see what you're doing which is why they use the "privacy warning" scare tactic.

macOS: System Settings > Wi-Fi > Kibosh's WiFi (or whatever you have re-named it to be) > Details > Private WiFi Address = Off

Apple will then show a 'privacy warning'

A privacy warning from Apple? Hilarious, and can be disregarded.

Android: Settings > Network & Internet > WiFi Settings (#1) > Privacy (#2) > Set: Use device MAC (#3)

Updated: 10-5-25

Kibosh Mobile is VPN-layer technology that extends the same family-safe internet and basic parental controls to any Apple or Android device.

This is accomplished by installing a Kibosh developed VPN onto the mobile device, which you do from your Kibosh Portal > VPNs landing page.

Q: Why a VPN?

A: For a few reasons, the main two being 1. it's the only technology available to us today where we can enforce a Family Safe Internet on mobile devices across all sources of Internet: WiFi, Cellular Data, and across all browsers (Chrome, Safari, FireFox, etc), and 2. the inherent data security of the VPN technology ( blocks tracking and hacking).

Once the Kibosh VPN has been installed from your Portal, a family-safe Internet is enforced at all times on this device. Period.

The only way the user can access the Internet is A. through the family safe VPN, or B. they turn off the VPN.

And it is mostly for B that you can monitor from your Portal:

How it works:

1.  Assuming you've already setup your Kibosh Router...go to Dash > VPNs in your Kibosh Portal
2. Add a new VPN ($1.95 mo.)
3. You will now have a new VPN Slot
   • VPN Slots are perpetual in that you can rotate devices in and out, but the VPN Slot (aka license) remains.
4. Now - log into your Kibosh Portal from the mobile device you want to install the VPN on
   • Open the new VPN Slot and Assign this mobile device
   • Choose your devices model O/S
   • Follow the prompts and viola - the KiboshVPN is installed, and this devices internet is secure
     • Note that once the KiboshVPN is installed - the internet on this device will not work unless the VPN is connected. So, the only way the user can access a raw unfiltered internet is to first Turn Off the KiboshVPN.
     • You can monitor the VPN ON / OFF status from your Kibosh Portal
5. Once you have the KiboshVPN in place, then you can monitor this device from your Kibosh Portal and layer on Parental Controls

A high-level overview of how it works:

Not really, we recommend turning it off as it tends to cause more trouble than it solves.

5G is supposed to be faster - maybe it is in a LAB environment, but in every day general usage we've never noticed a difference between 5G and 2.4G.

5G's WiFi is much stronger than 2.5G...so if WiFi radiation is a concern, turn it off.

5G's range is much smaller than 2.4G. So, what happens is that you have two WiFi networks (2.4G and 5G) - when your device is out of range of the 5G, which is most of the time, said device will need to auto-switch to 2.4G, but if it doesn't you'll need to manually do it.

In summary - you can turn it off without causing any problems.

Yes.

When an Internet Schedule triggers - all internet activity will stop working on the Device or Profile.

TIP: always give a 3-5 minute cushion for an Internet Schedule to take affect on the Device / Profile.

Go to Dash > Bandwidth.

Choose the device.

Pick the day.

Look at the Total bandwidth usage chart - this will tell when there was Internet activity for that day.

So, we know the user of MBP-Darling(N) was active on the Internet starting around 15.30 Military Time (which translates to 3.30 pm) on 7-29-25.

We can also know what they were doing by going to History and looking at the sites being accessed during the active times.

See Military Time Chart

Yes.

Q: When I search for 'porn' on Google it still works - why?

A: On a Kibosh-internet Google, Bing, DuckDuckGo, Brave, Yandex and SwissCow are always in SafeSearch ON mode - no matter what device.

SafeSearch ON = no porn related content will be returned: web, images, videos, search terms.

Note however, Google's SafeSearch will still allow searches for terms like 'porn', or 'nude' - for research purposes.

But, on a Kibosh-internet Google will never return pornography for any query. Go ahead and test it.

Google SafeSearch will not allow 'porn nude xxx' for example:

See all Support Options

It's because of Apple / Microsoft Wi-Fi MAC Randomization.

Another useless 'feature' for our protection.

Solution: Simple - you will need to disable Private WiFi on each device having this issue.

You only have to do it once.

How To turn off Wi-Fi MAC address randomization -

On iOS: iPhone / iPad

Settings > Wi-Fi, tapping the "i" icon next to the network, and toggling off "Private Address".

And say Yes to the Tracking Warning. 

macOS: System Settings > Wi-Fi > Kibosh's WiFi (or whatever you have re-named it to be) > Details > Private WiFi Address = Off

Apple will then show a 'privacy warning'

A privacy warning from Apple? Hilarious, and can be disregarded.

FYI: The Kibosh infrastructure is private and secure - and Apple can't see what you're doing.

Windows -

How to troubleshoot Internet issues with ping.

Ping is a wonderful, free, tool that you can use to easily troubleshoot various Internet related issues.

Ping operates by sending Internet Control Message Protocol (ICMP) echo request packets to the target host and waiting for an ICMP echo reply. It measures the round-trip time (i.e. Internet Speed ) from transmission to reception, reporting errors and packet loss.

How to open ping:

• Windows
  • Navigate to the desktop (minimize all other windows) and hit the Windows key + R on your keyboard to open Run, and then type CMD in the Open: box, and then hit enter. This will open a DOS shell in which you simply type ‘ping [IP or domain]’.
• MAC OS
  • Open Applications > Utility > Terminal. Then type ‘ping [IP or domain]’
• IOS & Android
  • You’ll need to install a free Ping utility from the app store.

You will want to run 3 ping sessions:

1. Ping your router – this will tell you if the issues are in your home / office.
   • For Kibosh owners this is: ping 192.168.10.1
2. Ping 8.8.8.8 – this will tell you if your ISP is working.
   • 8.8.8.8 = Google Public DNS
3. Ping test.kibosh.net – this will tell you if Kibosh is working.

⇒ TIP: Start each ping, and leave them running all the time. Whenever you detect or suspect an issue, look at these pings.

1. Ping your router which is 192.168.10.1 (see how to find your router IP if using a non-Kibosh router)

If you receive a Reply from … then your internal network is good, and that is not the issue.

If you receive Request timed out ... then your issue is with your router.

2. Ping 8.8.8.8

If you receive Reply from … then your Internet is up, and your ISP is working correctly.

If you receive Request timed … out then call your ISP because they are having issues.

3. Ping test.kibosh.net

If you receive a Reply from … then your Internet and Kibosh are working fine. Try rebooting your PC, and all routers.

If you receive a Request timed … out then Kibosh is the issue. Reboot your ISPs equipment, the Kibosh router and your PC device and repeat the test. If ping to kiboshdns.com fails please submit a support ticket or call 888-727-3018.

Google DNS to run pings against:

• 8.8.8.8
• 8.8.4.4

Note that any public DNS IP would work.

TIP: note that the ping time=# is your Internet speed. The # should be steady, and low – the lower the faster your Internet is. Anything under 40ms is imperceptible to the human eye, anything over 40ms and you’ll notice the slowness. To see it in action, run a ping session, and then start downloading a large file – you’ll see the time=# go up during the download, then down when completed.

Q: Why do some devices show up as a new device (and losing all filter / schedule settings)?

A: Because of MAC Randomization - you'll want to turn this off on iOS / Android for the Kibosh WiFi only. When you turn it off - the original device will show back in your Portal, along with all the filters and schedules.

----

WiFi Mac address randomization is a, to date, dubious "privacy feature" recently implemented by our friends at Google, Apple, Microsoft.

This new "feature" will cause mobile devices to show up in your Portal with a new IP every 14 days or so, until you turn it off.

1. 1. Open the Settings app and tap Wi-Fi.
   2. Tap the information button next to the Kibosh WiFi (or whatever you renamed it too)
   3. Toggle the Private Wi-Fi Address setting to Off.

1. 1. Open the Settings app and go to Network & internet > Internet.
   2. Tap the gear icon next to the Kibosh WiFi (or whatever you renamed it too)
   3. Tap Advanced > Privacy.
   4. Select Use device MAC instead of "Use randomized MAC". 

1. 1. Go to Settings > Network & Internet > Wi-Fi.
   2. Select Manage known networks, and choose Kibosh WiFi (or whatever you renamed it too)
   3. Click Properties, and turn off the Use random hardware addresses setting. 

1. Open System Settings and click Wi-Fi in the sidebar.
2. Find the Kibosh WiFi (or whatever you renamed it too) and click the three dots or Details button next to it.
3. Set the Private Wi-Fi Address option to Off. 

Updated: 10-5-25

1 x VPN = $1.95 / mo

3 x VPN = $3.95 / mo

10 x VPN = $8.00 /mo

Each VPN is perpetual and can be re-assigned, uninstalled, re-installed as needed.

You can add & remove Kibosh VPN as needed from your Portal > Account > Activation section:

• When you add a new VPN Subscription, a new VPN Slot will appear in your Portal > Mobile which you can then assign & install.
• When you cancel a VPN Subscription, that VPN Slot will go away and the VPN will terminate (if it's being used).
  • If you change your mind - you can re-enable that VPN Slot by going to Account > Activation and choose that VPN from drop-down, and complete checkout.

There is a default 15 minute MT6000 > Portal update cycle.

So, worse case scenario, it takes 15 minutes before your Portal shows a change to your Devices page.

However, you can force immediate updates by logging into your MT6000 Admin: http://192.168.10.1 > Do Full Sync With Server.

New changes will show in your Portal in under 2 min.

Issue: Safari on mobile defaults to using Apple's Private Relay which is essentially a back-door raw internet tor service.

Kibosh blocks Apple's Private relay globally (for everyone) by default (along tor and other back-door raw internet services like Google's DNS over HTTPS) otherwise anyone using an iPhone / iPad would have zero filtering.

Solution(s):

1. You can re-enable the Apple Private Relay on any iPhone / iPad by going to Devices > Filters > Other > enable Apple's Private Relay.
2. Use a different browser like Chrome, FireFox, Edge or Brave.

Yes - if you connect the Google router downstream from the Kibosh MT6000 (Kibosh LAN to Google WAN), your existing Google mesh setup will work like it always has.

Your Kibosh Portal will see the Google Mesh router as a single device that you can manage.

Google's Mesh devices aren't traditional range-extenders. They are tied intimately with your Google Account and will only work with other Google WiFi / Routers.

See Supported Mesh Access Points in this FAQ

Updated: 11-15-25

To block YouTube you would need to block all of Google, because once you're logged into any Google service, like gmail, you have access to all Google services, like YouTube, without having to log in again.  And blocking Google is impractical.

What we can do is enforce YouTube's Moderate or Strict Mode, per device or Profile:

• YouTube Moderate Mode is good at blocking explicit content, and turns off Comments.
• YouTube Strict Mode is very good at blocking explicit content, and tends to overblock.
  • Use this if you want to turn YouTube off.

How to enforce YouTube Strict / Moderate Mode:

From Portal > Devices > [pick device] > Filters > Social > YouTube:

Example Scenario: How to schedule YouTube to shut off (i.e., go into Strict Mode)

1. Log into your Portal
2. Go to Filters > [choose device] > Social > YouTube Strict Mode -> choose Schedules
3. Set the Schedule

NOTE: schedules do not work on mobile devices with VPN.

Bypassing the Kibosh -

PC/ Mobile:

We take much time and effort to research, and block back-door methods of easily bypassing the Kibosh's Internet security: tor is blocked, DNS over HTTPS is blocked, Apple's private relay is blocked, search proxies are blocked, etc.

The end result is that anyone who wants to access bad content is not going to use the Kibosh, it's too difficult.

This includes mobile devices with the Kibosh VPN installed.

Physical Security:

If you are concerned about physical security (i.e., the kids can simply plug into the ISP modem/router LAN port) your options are:

1. Put the ISP modem/router into a lock box
2. Use these ethernet port blockers to secure all open LAN ports
   • These are very effective

Mobile Security:

1. As long as the Kibosh VPN is ON - the internet is safe and cannot be bypassed
2. You can easily monitor the ON/OFF status from your Kibosh Portal
   • You can sign up for email alerts

The Kibosh VPN will secure the internet no matter what browser, or what Internet is being used.

The Kibosh VPN will prevent another VPN from being used.

For an even more family safe mobile environment, we recommend layering on additional parental controls provided by Apple / Google - mainly to monitor / approve what apps can be installed.

Follow this guide to apply an additional layer of Parental Controls on iOS / Android.

 

NOTE: Most WiFi range extenders support bridge mode, allowing them to connect to your Kibosh via an Ethernet cable and create an extended WiFi network managed from your Kibosh Portal.

Range extender / Mesh AP Setup - two options:

1. WiFi range extender / mesh Access Point (AP) systems in their standard setup will work fine with your Kibosh, but you cannot see or manage any of the devices using the APs for internet access.
   • You can however monitor, manage and control the WiFi range extender / Mesh AP (just not each device using said AP).
2. The same WiFi range extender / mesh Access Point (AP)s can be put into Bridge Mode and attached to your Kibosh via Ethernet cable or Wireless Bridge (point to point).
   • Each WiFi range extender / Mesh AP must be connected to the Kibosh via Ethernet cable or Wireless Bridge
   • Each WiFi range extender / Mesh AP will have it's own WiFi SSID: (Kibosh, Kibosh_ex1, Kibosh_ex2, etc).
   • In this setup you will be able to monitor, manage and control every device from your Kibosh Portal

Question: I'm unable to run an Ethernet cable to the WiFi range extender / Mesh AP - what can I do?

Answer: For those runs where an Ethernet cable is not possible, use a Point to Point Wireless Bridge (we use this one) - they are very stable and can be placed outdoors.

Step-by-step (updated as we test each mesh system):

How to setup TP-Link Deco (10/25):

1. Attach your Deco AP (example) to the Kibosh LAN via Ethernet cable
   • power cycle both Deco & Kibosh
2. Install the Deco app from App Store
3. Follow the standard Deco setup guide to connect the app to the Deco AP
4. Once you have the Deco working...
   1. From the app go to Advanced and set the following:
      • Operation Mode: Access Point
      • Smart DHCP: Disabled
      • Fast Roaming: Disabled
      • Beamforming: Disabled

Now, you will have the Deco WiFi, whatever name you set it to in the Deco App, and you will have the Kibosh WiFi (configured in Portal > Advanced > Settings > WiFi Settings) - but you will still see all devices (+ the deco AP) and be able to manage them.

So you will still have two WiFi (Kibosh + Kibosh-2 for example):

Kibosh = MT6000

Kibosh-2 = Deco AP

Final Step: be sure to turn off MAC Randomization (rotating MAC) settings on the Kibosh-2 WiFi (see FAQ for instructions).

------

Google Mesh: coming soon

Updated: 10-26-25

Once you have your Kibosh up and running - the final step is to disable the old WiFi network.

If you're replacing a privately owned WiFi router with the Kibosh MT6000 - then you're all set.

If you were using your ISP modem/router for WiFi - then you DO need to complete this step.

How to turn off the old WiFi on ISP modem/router:

There are 2 ways to do this:

1. 1. Easy: put the Modem into Bridge Mode
      • Call your ISP's tech support and ask them to put your (their) modem into Bridge Mode
        • This is a common request and they will know what to do
        • They need to put the modem into Bridge Mode, you cannot do this
      • When they are done, reboot the Modem and the Kibosh
   2. Moderate: Manually log into the ISP's Modem/Router and disable WiFi
      1. GENERAL STEPS:
         • TIP: Search DuckDuckGo for 'how to turn off WiFi [modem model & isp name]' to find specific instructions
      2. Connect your PC to your old WiFi (just like you've always done).
      3. Go into your PC's WiFi network settings and locate the IP address - and write down the gateway / router IP
         • Usually one of these: 192.168.1.1 / 192.168.0.1 / 10.0.0.1 / 192.168.254.254
         • TIP: Search DuckDuckGo for 'how to find my ip address ios' for example, you'll find many guides
      4. Enter this Gateway IP into your browser (ex: http://192.168.1.1) and you will get your ISP modem/router login page
         • Now you need to login
           • Look under the ISP modem/router for the login ID and password
           • You may need to call your ISP support # and ask then for it
      5. Once logged in, look for WiFi settings - and there will be an option to disable
         • Save changes.
      6. (optional) Log to your Kibosh Portal
         1. Rename 2.4Ghz WiFi to be same as the old one
         2. Save Changes

ISP Guides -----------

• Comcast Xfinity - how to turn off wifi guide. 

Updated: 12-8-25

You will need the Starlink ethernet adapter.

1. Log into your Starlink app
2. Go to Main Router
3. Go to Settings
4. Choose Router (not Starlink)
5. Go to Bypass Mode
6. Slide to Bypass
7. Run Ethernet cable: 1 end into the Starlink ethernet adapter, the other end into the Kibosh MT6000 WAN port
8. Power-cycle reboot (pull power chord) on BOTH the Starlink router and the Kibosh router.
9. In about 2-4 minutes you should be online - the Kibosh MT6000 is now your main WiFi router.

How to factory reset by router (i.e., restore to normal) your Starlink Router.

Updated: 10-14-25

How to block TLD globally:

1. Log into your Portal
2. Go to Filters
3. Choose All
4. Choose Custom
5. Enter the TLD as follows - one per line:
   • .ru
   • .es
   • .online

By putting your eero AP(s) into bridge mode you will be able to see and manage your network through your Kibosh Portal.

The only caveat is that bridge mode requires that one eero remain hard-wired into a Kibosh MT6000 LAN port.

How to bridge your eero’s

1. Create your eero network: Follow the setup flow in the eero app.
2. Connect the main eero to an open Kibosh MT6000 LAN port.
3. If you already have an eero network, open the eero App and tap the Settings tab.
4. Tap Network settings.
5. Under Network services, select DHCP & NAT.
6. Switch your selection from Automatic to Bridge.

Eero Bridge Guide

You need to re-link your MT6000 to your Portal:

Updated: 10-16-25

The first thing to check - what does your Portal > Home page say your Internet speed is?

If it's Excellent or Good you should be all set.

Questions to answer:

• How are you coming to the slow conclusion?
• How is it impacting your Internet experience?
• Can you replicate it on every device?

As per the Kibosh Router Setup Guide - did you reboot your PC + the ISP modem/router + Kibosh?

Still need help - Kibosh Support Options

We will us a simple persistent ping command.

Before installing the Kibosh MT6000:

Open a command prompt on Windows, and Terminal on Linux.

Run: ping bing.com -t

Take a snapshot

Now install the Kibosh MT6000 (setup guide):

Reboot your PC

Open a command prompt on Windows, and Terminal on Linux.

Run: ping bing.com -t

Take a snapshot

Compare the two: time=24.xxx ms

Look on your Portal > Home and click Internet to see a speed chart.

LEGEND:

• A Mesh device is essentially a WiFi router, also called an Access Point, or Range Extender.
• Multiple Access Points broadcasting the same SSID = a Mesh Network.
• SSID = WiFi network name

All existing Mesh Systems & Range Extenders will work with your Kibosh.

TIP: for long physical connections (from house to barn for example) use a WiFi point-2-point Wireless Bridge. They are easy to setup and work very well even in inclement weather.

Example WiFi Bridge: TP-Link Omada Point 2 Point Outdoor Bridge ($120)

START HERE: 

If you do not already have a TP-Link Deco Mesh System - any of them will work.

You already have TP-Link Deco mesh system:

1. 1. First, turn off your Deco Mesh APs, and then setup your Kibosh Router per this setup guide -
      • DO NOT RENAME THE KIBOSH SSID (step 6 in setup guide)
      • DO NOT RENAME THE TP-LINK MESH SSID
   2. Take the TP-Link Deco - Main AP and attach it to the Kibosh MT6000 - (Deco AP: WAN port to MT60000: LAN port)
   3. Put the TP-Link Deco - Main AP into Access Point Mode (see how)
   4. Power cycle both the MT6000 and TP-Link Deco - Main AP
      • Wait until you see two WiFi: 1. Kibosh, 2. whatever your TP-Link Deco Mesh WiFi is
   5. From your PC - connect to the TP-Link Deco Mesh WiFi

• • NOTES:
    •  You can optionally turn off the Kibosh Router WiFi and use the TP-Link Deco WiFi exclusively
    •  All devices connected to your Kibosh via the TP-Link Deco System will show up as 'lan' devices

Mesh Systems that work with Kibosh:

• TP-Link Deco in Access Point / Bridge Mode
  • Search this FAQ for setup instructions
• Orbi in Access Point / Bridge Mode
  • Known to work, but no setup guide yet (search web)
• Eero - search this FAQ for instructions
• Unifi in Access Point / Bridge Mode
  • Known to work, but no setup guide yet (search web)

Wireless Range Extenders that do NOT support Access Point. /Bridge Mode:

• Google Mesh (because the Google Mesh does not support Access Point / Bridge Mode)

How to configure a TP-Link Deco - Main AP:

1. Attach your Deco AP (example) to the Kibosh LAN via Ethernet cable
   • power cycle both Deco & Kibosh
2. Install the Deco app from App Store
3. Follow the standard Deco setup guide to connect the app to the Deco AP
4. Once you have the Deco working...
   1. From the app go to Advanced and set the following:
      • Operation Mode: Access Point
      • Smart DHCP: Disabled
      • Fast Roaming: Disabled
      • Beamforming: Disabled

Back To Top

Updated: 12-9-25

Kibosh is an Internet Security Service that has been in production for 15+ years, and it will block and expose any bad stuff resident on your network.

Which means, if you have any form of malware present on any of your devices, these will be blocked and exposed - usually by causing HTTPS browsing issues. Maybe best explained via an anecdote...

Issue:

Skylar installed a Kibosh Router and was very happy with the new internet overall.

However, on Sklyar's PC using the Chrome Browser, ever since Kibosh was installed accessing certain websites stopped working - always giving the annoying the 'Your connection is not private' error:

Skylar opened a Help Desk Ticket -  asking why the Kibosh Router is blocking these sites? And included the URL of one of the sites that stopped working: htps://search.yahoo.com/search?fr=mcafee&type=E210US714G0&p=chem+made+clear

Resolution:

Skylar was asked to check Chrome to see what the default search engine was set to - and Skylar found that it been changed from Google to a shopping site - Skylar changed it back to Google, and then all the sites worked fine.

In other words, Skylar's Chrome had a browser-hijacker malware that Kibosh was now blocking - which was causing all the 'Your connection is not private' browsing errors.

Skylar was asked to install a second browser FireFox, and try to access  those the same sites - and they all worked fine. More confirmation Chrome has been hijacked.

About iCloud Private Relay

Q: Why does Kibosh Block iPR by default?

A: Because any Apple device using iCloud will always use iPR by default when browsing the Internet. Thereby exposing the user to a raw internet, even with a Kibosh in place. Therefor, iPR must be blocked - but you can easily turn it back on, turn it off, or use a different browser to make the annoyance go away.

How to turn iCloud Private Relay off on your Apple device - so that A. Safari will stop being slow, and B. Apple will not see all your data:

On iPhone or iPad:

1. 1. Open the Settings app.
   2. Tap your Apple ID (your name) at the top.
   3. Select iCloud.
   4. Tap Private Relay.
   5. Toggle the switch to turn it off.
   6. Confirm by tapping Turn Off Private Relay.

How to selectively enable iPR on any device from your Kibosh Portal:

1. Log into your Portal
2. Go to Filters
3. Choose your Apple device from the drop-down
4. Select Other
5. Scroll to bottom and select Enable Apple Private Relay

Updated: 11-20-25