Parental Controls Setup Guide
Router-based parental controls protect every device in your home — phones, tablets, gaming consoles, and smart TVs — without installing anything on each device. This guide covers every major router brand and the best free DNS-based options.
Why Router-Level Controls Work Better
Most parents start with device-level parental control apps — screen time settings on an iPhone, Google Family Link on Android, or parental controls in Windows. These work for the specific device, but a child who picks up a different tablet, connects a gaming console, or uses a friend's hotspot bypasses all of them instantly.
Your router sits between every device in your home and the internet. Anything connecting through your Wi-Fi goes through the router first. When you configure parental controls at the router level, the rules apply to every device on your network automatically — the smart TV, the PlayStation, the old laptop, and any new device that joins the network. A child cannot work around router controls just by switching browsers or reinstalling an app.
Block entire categories of content — adult sites, violence, gambling, social media — based on constantly updated databases. Some services block at the DNS level before the page even loads.
Set daily time limits or specific allowed hours per device or per family member. Internet goes off at bedtime automatically, without arguments.
See which sites and apps each device is accessing. Many systems generate weekly reports. Useful for starting conversations about online activity rather than confronting it cold.
Instantly pause internet access for a specific device or the entire household. Useful during homework, family meals, or when a device is being used past bedtime.
The US Federal Trade Commission notes that no technical filter is perfect. The most effective online safety for children combines technical controls with regular conversations about internet use. Visit FTC's Net Cetera guide for age-specific conversation starters.
Quick Setup: DNS Filtering (Works on Any Router, Free)
If you want parental controls running in under two minutes without touching each device individually, DNS filtering is the fastest approach. Change your router's DNS servers to a family-safe service and every device on your network immediately gets filtered — no apps, no accounts required.
Steps
- Log in to your router admin panel. Go to http://192.168.1.1 (or your router's IP). Enter your admin credentials. Check the sticker on the router if you haven't changed them.
- Find DNS settings. Look under WAN, Internet, or Advanced Network settings. You're looking for Primary DNS and Secondary DNS fields. These may be in a different section than the LAN settings.
- Enter family-safe DNS servers. Choose one of the options below and enter those IP addresses. Save the settings.
- Test immediately. On any connected device, try navigating to an adult site. It should be blocked.
| Service | Primary DNS | Secondary DNS | What It Blocks | Cost |
|---|---|---|---|---|
| Cloudflare for Families | 1.1.1.3 | 1.0.0.3 | Adult content + malware | Free |
| OpenDNS FamilyShield | 208.67.222.123 | 208.67.220.123 | Adult content categories | Free |
| OpenDNS Home (customizable) | 208.67.222.222 | 208.67.220.220 | Customizable categories | Free (custom account) |
| Quad9 Family | 9.9.9.9 | 149.112.112.112 | Malware + some adult | Free |
| CleanBrowsing Family | 185.228.168.168 | 185.228.169.168 | Adult content + proxies | Free tier available |
DNS filtering blocks by domain name, not by content within a site. A search engine set to Safe Search is bypassed if a child navigates directly to an adult domain. For more comprehensive filtering, combine DNS with the router's built-in controls below. Also note that children using mobile data (not your Wi-Fi) are not covered by router-level controls.
Built-In Parental Controls by Router Brand
Most modern routers include parental control features in their admin panels or companion apps. Quality varies significantly between brands. Here is what each major brand offers:
| Brand / Feature | Platform | Content Filtering | Time Scheduling | Per-Device Profiles | Usage Reports | Cost |
|---|---|---|---|---|---|---|
| Netgear Circle Smart Parental Controls |
Router + Nighthawk App | Categories + custom block list | Daily budgets and bedtimes | Yes (per family member) | Weekly summaries | Basic free, Circle Premium ~$10/mo |
| TP-Link HomeCare / Tether App |
Router + Tether App | Category filtering (Trend Micro) | Daily schedules | Yes (per device) | Basic log | Free for life on supported models |
| Asus AiProtection (Trend Micro) |
ASUSWRT + Asus Router App | Category filtering, malware blocking | Access time scheduling | Yes (per device) | Traffic stats | Free for life on RT-series |
| Linksys Linksys Shield |
Linksys App | Category filtering | Screen time limits | Yes (per device) | Activity reports | Subscription required |
| D-Link EAGLE PRO AI / mydlink |
mydlink App | AI-powered (McAfee) | Schedule per device | Yes | Alerts and logs | Included on EAGLE PRO AI models |
| Google Nest Family Wi-Fi (Google Home) |
Google Home App | SafeSearch + content filtering | Bedtime schedules | Yes (per family member) | Screen time reports | Requires Google One subscription for full features |
| Starlink | Starlink App | None built-in | Device pause only | Limited | None | Use DNS filtering as supplement |
Setting Up Parental Controls: Step by Step
Netgear (Circle)
- Log in at routerlogin.net or 192.168.1.1. Navigate to Parental Controls.
- Enable Circle Smart Parental Controls. You will be prompted to create or link a Circle account.
- Add each family member's devices. Circle detects devices on your network and lets you assign them to profiles (Parent, Teen, Child, Pre-K).
- Set time limits and a bedtime for each profile. The "Pause" feature in the Nighthawk app lets you pause internet for any device instantly.
- Enable content filtering by selecting a profile level. Netgear's content categories use Safe Search enforcement and filter known adult, violent, and gambling domains.
TP-Link (HomeCare)
- Log in at tplinkwifi.net or 192.168.1.1. Go to Advanced → Security → HomeCare.
- Click Parental Controls. Add a client profile by selecting a device from the list of connected devices.
- Set a time limit (daily hours) or a weekly schedule specifying when that device can access the internet.
- Enable content filtering under HomeCare → Web Filter. Choose a filtering level (Child, Teenager, Adult) or create a custom blocklist.
- The Tether app mirrors these controls for mobile management. HomeCare is included free on Archer and Deco models — no subscription required.
Asus (AiProtection)
- Log in at router.asus.com or 192.168.1.1. Go to AiProtection in the left sidebar.
- Enable AiProtection and accept the terms (powered by Trend Micro). The malicious site blocking activates immediately.
- For time controls, go to Parental Controls → Time Scheduling. Add a device and set allowed hours.
- For content filtering, go to AiProtection → Web History and Parental Controls. Select content categories to block.
- AiProtection is completely free for life on all RT-AC and RT-AX series routers — no subscription.
Layered Approach: Combining Multiple Controls
A single layer of parental controls is easier to bypass than multiple overlapping controls. Consider combining these approaches:
- DNS filtering on the router (catches everything network-wide)
- Router's built-in time scheduling (cuts off internet at bedtime)
- Per-device content filtering via router app
- SafeSearch enforcement on Google and Bing via DNS or router settings
- Device-level controls as a secondary layer for mobile devices
- Guest network for IoT devices (isolated from children's devices)
- Regular review of router activity logs
- Open conversations about what children encounter online
For families with teenagers, consider Internet Matters for age-specific guidance, and FBI's parent resources for recognising online threats. The FCC also publishes a Children's Internet Safety guide that covers both technical and conversational approaches.
How Children Attempt to Bypass Controls (and How to Counter Them)
A VPN encrypts traffic before it reaches your router, bypassing DNS filtering and content inspection. Counter: block VPN protocols in the router firewall, add known VPN domains to the block list, and have a conversation about why VPN use is restricted on family devices.
Phone data bypasses your home Wi-Fi entirely. Router controls have no effect when a device is on cellular. Device-level controls and carrier parental settings (available from most mobile providers) cover this gap.
If a child sets 8.8.8.8 as their DNS on a device, they bypass DNS filtering. Counter: use router firewall rules to block outbound DNS (port 53) to all servers except your chosen DNS provider, forcing all DNS through the router.
Neighbours' unprotected Wi-Fi, school networks, or public hotspots bypass home controls. Again, device-level controls and conversations are the answer here — technology at the router level cannot protect devices that leave the home network.
Frequently Asked Questions
What age should I start using parental controls?
Most child safety experts recommend starting DNS filtering and basic content controls as soon as a child has any internet-connected device — typically around age 5 or 6. The strictness should be appropriate to age: very young children benefit from allowlists (only approved sites), while teenagers need a conversation-focused approach alongside reasonable filtering. The American Academy of Pediatrics publishes family media plan resources at healthychildren.org that provide age-by-age guidance.
Will parental controls slow down my internet connection?
DNS-based filtering (using Cloudflare 1.1.1.3 or OpenDNS) typically adds only 1 to 5 milliseconds to DNS lookups — imperceptible in normal browsing. Router-level deep packet inspection (like Asus AiProtection or Netgear Circle) can add a small amount of processing overhead, but on modern routers with fast CPUs this is negligible. You will not notice a speed difference in practice.
My router doesn't support parental controls — what are my options?
Even the most basic router supports custom DNS. Change to Cloudflare 1.1.1.3 or OpenDNS FamilyShield — that alone covers the most common content filtering needs. If you need per-device time controls, a Circle Home Plus device (plugs into your router's LAN port) adds full parental control capability to any router. Alternatively, investing in a new router with built-in controls is usually worthwhile — Asus AiProtection is free for life and works on routers starting around $60.
Can parental controls block specific apps like TikTok or Roblox?
Most router parental controls can block specific domains (tiktok.com, roblox.com) through a custom block list. Add the main domain and any CDN subdomains the app uses. Netgear Circle has dedicated app controls. Note that blocking by domain is not the same as blocking by app category — an app might use dozens of domains, so check the router's app-specific blocking features first before trying manual domain blocking.
Does Starlink have any parental controls?
Starlink's built-in controls are minimal — the app allows pausing a device's internet access but offers no content filtering. The recommended approach for Starlink users is to set the DNS servers in the Starlink app's advanced network settings to a filtering service like Cloudflare 1.1.1.3 (1.0.0.3 as secondary). If you need more granular controls, connect a third-party router to the Starlink router and configure parental controls on that.
Trusted Resources for Online Child Safety
- FTC Net Cetera — free guide to talking with kids about internet safety
- FCC Children's Internet Safety — regulatory guidance and resources
- Internet Matters — age-specific online safety advice for parents
- NCMEC NetSmartz — educational resources about online safety
- American Academy of Pediatrics — Media and Children
Disclaimer
This guide is provided for educational purposes. No parental control system is 100% effective. Technical controls work best as part of a broader approach that includes age-appropriate conversations about online safety. 19216811.org is not affiliated with any of the manufacturers, services, or organisations mentioned on this page.