Get set up in minutes.

Choose your platform below. All paths end with your DNS traffic routed through Cherubim.

iPhone & iPad

1

Create an account

Sign up with your email and a password. Takes 30 seconds.

2

Add a device

From the dashboard, click + Add a Device, choose iOS, then pick your protection level — standard (removable) or hardcore lockdown (requires supervised mode).

3

Download the profile

Click Download .mobileconfig. Your browser will download a configuration profile tied to your account.

4

Install it on your iPhone

Open Settings → General → VPN & Device Management, tap the Cherubim profile, then tap Install and enter your passcode.

5

You're protected

DNS queries from your iPhone now flow through Cherubim. Head to the Rules & Policies tab in the dashboard to set up blocklists and quiet times.

Want the hardcore lockdown? Choose the Hardcore Lockdown option in the wizard. Instead of installing the profile manually, you will download the Cherubim Mac App. The app automates the complex Apple Configurator process over USB, erasing and locking down the device in just a few clicks. Once locked, it cannot be bypassed without wiping.

Mac

1

Create an account

Sign up if you haven't already.

2

Download the Mac app

Download Mac App (.dmg)
Or add a macOS device from the dashboard and download it there.

3

Sign in

Launch Cherubim, sign in with your account, and click Lock Down. The app installs a DNS profile and configures Chromium-based browsers via managed policy.

4

Manage rules from the web

All rule and schedule management is done from the dashboard. Changes take effect within seconds.

The Mac app is currently in early access. Create an account to get started.

Other Platforms

Android

Go to Settings → Network & Internet → Advanced → Private DNS and enter your device's unique DoH hostname from the Cherubim dashboard.

ℹ  Android support is in early access — enforcement strength varies by device manufacturer.

Linux

Configure systemd-resolved or your local resolver to point DoH queries to your device's unique URL shown in the dashboard.

Windows

Coming Soon

A native Windows app is on the roadmap. Create an account to stay in the loop.