It helps to picture two doors and a road. Almost everything you’ll hear about comes back to these three.
This is the door for websites — anything you reach by typing an address or tapping a link. A filter can keep the browser to a list of approved sites, or let most things through while blocking explicit content and whole categories automatically.
Apps are installed from the App Store. Here’s the part people miss: most apps are really just websites in a box. Instagram, TikTok, a game — they pull the internet straight in without ever opening Safari. So locking the browser isn’t enough on its own; you also have to control which apps can be installed.
Before a phone loads anything, it quietly looks the address up in a directory called DNS. Whoever controls the DNS can block bad destinations for every app and browser at once. A strong filter forces its own locked DNS that the user can’t swap out or turn off.
What each one is, in a line.
In just a few years sports betting went from a back-room thing to one tap on a phone. It’s legal in most states, advertised during every game, and built right into how people watch sports. A lot of people — including frum men and bochurim — are in it without anyone around them realizing, because nothing looks out of place: it’s just “following the game.”
This is the most useful thing in the whole guide. When a boy says “my phone is filtered” or “I have Screen Time,” that sentence by itself is almost meaningless. Three things decide whether it’s real: how strict it’s set, whether it’s locked, and who holds the password.
Screen Time is the parental-control feature built into every iPhone. It can limit content and apps — but it was made for a parent to manage a young child’s phone, not to stop a determined teenager. Most of the time, when a bochur says “I have Screen Time on,” he set it up himself, which means he knows the code and can turn the whole thing off in about ten seconds. Even when a parent sets it, it’s known to be leaky, and the workarounds are passed around freely.
Certified or “tagged” phones are a real and good thing, but the word covers an enormous range. Certification mostly means a filter is installed and locked — it does not tell you how strict that filter is set. The levels run from extremely tight (no browser at all, a short list of apps) all the way to fairly open. A certified phone can still have streaming, music, even Netflix and movies, if that’s the level that was chosen. So “it’s certified” isn’t the end of the conversation. The real question is which level, and whether the browser and app store are open.
The word stretches across a huge range. At the weak end is a free app or a single setting the boy can delete himself in a moment. At the strong end is a locked, professionally-installed profile that filters every app, forces its own DNS, and can’t be removed. They’re both called “a filter,” and they are worlds apart. When you hear the word, it’s worth a gentle follow-up rather than taking it at face value.
Real control, set to fit the person — locked layers working together, so no single slip leaves the phone open.
A good filter isn’t a dead end. If a person needs a website or app that’s blocked, he asks for it — without ever weakening the filter or getting the password.
The administrator can keep a pre-approved list — certain websites, whole categories (banking, government, work), or sets of apps. If a request matches that list, it’s approved and added instantly, with an email to the administrator as a heads-up. Everything else still waits for a person to review it.