Haven
Get Haven

← Devices

Protect this Windows computer

Pick whichever path feels right — they all end in the same place: a verified boundary, with search and video safety locked on.

Have it done for you — $100, one time

You don't have to touch a thing. Here's how it works:

  1. Pay once, securely
  2. A CROS technician calls you within one business day
  3. You approve a secure remote session and watch the whole time
  4. They set up protection and don't hang up until the verification check says Protected
Set it up for me — $100

Windows computers only for now. If we can't get your device protected, you get your money back. Want every device covered, all year? See the House Call retainer →

Already use an AI assistant on this computer?

If you have an AI app that can control your computer — Claude Cowork, or a similar assistant — you don't need to follow any steps. Copy this and ask it:

Please protect this computer with family-safe DNS. Set the DNS servers on all active network adapters to 1.1.1.3 and 1.0.0.3 (IPv4) and 2606:4700:4700::1113 and 2606:4700:4700::1003 (IPv6), then flush the DNS cache. When you're done, open https://haven.jer-f84.workers.dev/protect/windows and click "Check my protection" to verify it worked.

Do it yourself — four clicks on Windows 11

  1. Open Settings → Network & internet, click your connection (Wi-Fi or Ethernet)
  2. Click Hardware properties, then next to "DNS server assignment" click Edit
  3. Choose Manual, turn on IPv4, and enter 1.1.1.3 as Preferred and 1.0.0.3 as Alternate
    If you see "DNS over HTTPS", choose On (automatic template)
  4. Save, then verify below

Or paste one command

Right-click the Start button → Terminal (Admin) → paste this and press Enter:

irm https://haven.jer-f84.workers.dev/protect/windows/haven-protect.ps1 | iex

Prefer files? Download haven-protect.ps1 (and haven-revert.ps1 to undo). The script only changes DNS settings — nothing is installed.

Rather have someone talk you through it?

The Haven Guide will walk you through every tap and click, out loud, at your pace — and wait for you between steps.

Starting it loads a voice widget from ElevenLabs, which means your browser connects to them. Nothing on this page contacts them until you press the button.

Verify this device

Haven will try to reach two harmless test destinations that protective DNS should refuse. Nothing is downloaded.

Stuck already, or the check will not run? The likely causes are written out — no connection to Haven needed to read them.