When I talk to families about securing their home networks, I always ask the same question: have you heard of CIRA Canadian Shield?
Most haven’t. Which is a shame, because it’s free, it’s Canadian, and it takes about five minutes to set up.
What Is CIRA Canadian Shield?
CIRA Canadian Shield is a free DNS firewall service run by the Canadian Internet Registration Authority — the not-for-profit organization that manages the .CA domain. It works by filtering your DNS requests (think of DNS as the internet’s phone book) before they reach your device, blocking connections to known malicious sites before anything bad can happen.
In plain terms: when someone in your household clicks a sketchy link, Canadian Shield steps in and stops the connection before the page ever loads.
It’s blocked over 738 million threats to date and protects more than 3.7 million Canadians.
Why I Recommend It to Every Family I Work With
A few things make it stand out from the crowded security tool market:
It’s actually free. Not “free with a premium tier they’ll push you into.” CIRA is a national not-for-profit. They don’t sell your data, they don’t serve you ads. As they put it plainly on their site: “Free is just free.” That’s rare.
Your data stays in Canada. All DNS queries are resolved on Canadian servers. For families who care about where their data lives — and you should — that matters.
It has a Family mode. Beyond blocking malware and phishing, the Family tier also filters adult content. If you have kids at home, this is a low-effort, no-cost layer of protection that runs quietly in the background.
It uses machine learning to catch new threats. Canadian Shield pulls threat intelligence from feeds both inside Canada and globally, and uses advanced ML to often detect emerging threats before they even go live. You’re not just protected against yesterday’s attacks.
How to Set It Up
There are a few ways to deploy it, depending on how much coverage you want:
- Mobile app (easiest): Available on iOS and Android. Download, accept the VPN access prompt, choose your protection level (Protected or Family), done. Covers that one device wherever it goes.
- Browser extension: Available for Chrome, Firefox, and Edge. Adds a visual indicator — green means safe, red means blocked. Great for older kids learning to browse safely.
- Home router (best coverage): Configure Canadian Shield’s DNS servers directly on your router and every device on your network is protected automatically — phones, laptops, smart TVs, gaming consoles, everything. CIRA has a step-by-step router configuration guide that walks you through it.
For most families, I recommend the router approach if you’re comfortable logging into your router settings, and the app as a backup for devices that leave the house.
What It Doesn’t Replace
Canadian Shield is a strong foundational layer, but it’s not a complete security solution on its own. It won’t replace a good password manager, it won’t protect you if you hand over your credentials voluntarily on a convincing fake site, and it won’t stop malware that’s already on your device. Think of it as one solid lock on one important door — not the whole house alarm system.
That said, for zero dollars and five minutes of setup? It’s one of the highest-value things a Canadian family can do today.
Get Started
👉 https://www.cira.ca/en/canadian-shield/
If you want help configuring it on your home router, or want a broader look at your household’s security posture, that’s exactly what we do. Book a free consultation with UbiSec here.
UbiSec Consulting Inc. is a family cybersecurity firm based in Oshawa, Ontario. We help GTA households stay safe online — in plain language, no jargon.