What is the best way to set up parental controls?

Use layers rather than a single setting. Combine router controls for your whole home network, device controls like Screen Time or Family Link for phones and tablets, app-level controls for specific services, and a filtering DNS service. Starting with the router and DNS layers gives broad coverage quickly.

How do I set up parental controls on my child's phone?

On an iPhone, use Screen Time under Settings, managed remotely through Family Sharing. On Android, use the free Google Family Link app. Both let you set time limits, filter content, approve downloads, and see location, and they work even when the child is on mobile data away from home.

What is DNS filtering and how does it help?

DNS filtering blocks entire categories of websites across your whole network by controlling which sites are allowed to load. You set your router to use a family-focused filtering DNS service, and it then protects every device on your network automatically, including ones without their own parental controls.

Can my child bypass parental controls?

Yes, in several ways. Switching to cellular data escapes home network controls, a VPN can defeat content filters, and a device without controls installed is unfiltered. This is why layering router, device, app, and DNS controls, along with ongoing conversation, works better than any single method.

Do parental controls work when my child is away from home?

Only device-level and some app-level controls do, since they travel with the device. Router and DNS controls apply only to your home Wi-Fi, so they stop working at school, a friend's house, or on mobile data. Device controls like Screen Time and Family Link fill that gap.

Are free parental controls good enough?

For most families, yes. Built-in tools like Screen Time, Google Family Link, and Microsoft Family Safety are free and capable, and free family DNS services add network-wide filtering. Paid options add convenience and depth, but a well-configured free setup covers the essentials.

How to Set Up Parental Controls for the Internet

Effective parental controls are not one setting but several layers working together. No single control covers everything, so the strongest approach combines your router, your children’s devices, individual apps, and a filtering DNS service. This guide walks through setting up each layer, then explains the limits honestly, because knowing how controls get bypassed is what makes them actually work.

Start With a Layered Plan

Think of parental controls in four layers, each covering a gap the others leave:

Router level covers every device on your home Wi-Fi at once.
Device level covers a specific phone, tablet, or computer wherever it goes.
App level controls individual services like YouTube or a game store.
DNS level filters which websites resolve across your whole network.

You do not need all four for every family, but combining at least the router and device layers covers the biggest gaps. Here is how to set up each.

Layer 1: Router-Level Controls

Router controls are the foundation, because they apply to everything on your home network automatically, including devices you cannot install software on, like a games console or smart TV.

Log in to your router or open its app, using your admin credentials.
Find the Parental Controls, Family, or Profiles section.
Create a profile for each child and assign their devices to it, which lets you manage a person rather than each gadget separately.
Set content filters for age-appropriate categories, schedules such as no internet after bedtime, and time limits.
Save and test on one of the child’s devices.

Many routers include these controls free, while some place advanced filtering behind a subscription, so check what your model offers before relying on it. Our guide to the top parental control routers compares how the major brands handle this, and on an Xfinity gateway you can pause the internet or schedule downtime per profile.

Layer 2: Device-Level Controls

Because router controls stop at the edge of your home Wi-Fi, device controls fill the gap when a child is out of the house or using mobile data.

On an iPhone or iPad, use Screen Time, under Settings. It lets you set content and privacy restrictions, app limits, downtime, and communication limits, and you can manage it remotely through Family Sharing.

On Android, use Google Family Link, a free app that lets you set screen time limits, approve app downloads, filter content, and see your child’s location. It is managed from your own phone.

On Windows and Xbox, use a Microsoft Family Safety account to set screen time, content filters, and activity reporting across devices.

These controls travel with the device, so they keep working on cellular data and away from home, which is exactly where router controls cannot reach.

Layer 3: App-Level Controls

Individual apps often have their own controls, which matter because a general filter may not catch everything inside a specific service.

Turn on YouTube’s Restricted Mode or use YouTube Kids for younger children. Enable content restrictions in your app store so purchases and age-rated downloads need approval. Streaming services like Netflix and Disney let you create kids’ profiles with maturity limits. Set these up on the services your family actually uses.

Layer 4: DNS-Level Filtering

This is the layer many people miss, and it is powerful. A filtering DNS service blocks entire categories of websites across every device on your network, by controlling which sites are allowed to resolve.

Free family-focused DNS services exist specifically for this. You set your router to use the filtering DNS provider’s addresses, and from then on, any device on your network is blocked from adult and other flagged content automatically. Because it works at the network level, it covers devices without their own controls. Some services also offer a version you can set on an individual device for protection away from home. If you want to confirm which DNS your network is actually using, our guide on performing a DNS leak test shows how.

How to Choose What You Need

Match the layers to your situation:

Young children on shared home devices: router controls plus DNS filtering usually suffice.
Older children with their own phones: add device-level controls, since they leave the house and use mobile data.
Specific concerns, like video or gaming: add the relevant app-level controls.

Starting with the router and DNS layers gives broad coverage quickly, and you add device and app controls as your children get their own devices.

The Limits You Must Know

Being honest about the gaps is what separates controls that work from a false sense of security.

Cellular data bypasses your network entirely. Router and DNS controls only apply to your home Wi-Fi, so a phone on mobile data escapes them. This is why device-level controls matter for children with their own phones.

VPNs can defeat filtering. An older child can install a VPN to route around content filters and DNS blocks. Some routers can block common VPNs, but it is an ongoing effort.

Away from home, network controls do not apply. School, a friend’s house, or public Wi-Fi are all outside your reach unless the child’s device has its own controls.

New or unmanaged devices slip through. A device not added to a profile or without controls installed is unfiltered. Review your network periodically.

The realistic takeaway is that layering closes most of these gaps, but no technical control is complete. The most important layer of all is an ongoing, age-appropriate conversation with your children about what they do online, which builds the judgment that outlasts any filter.

Conclusion

Setting up parental controls for the internet works best as layers: router controls for your whole home, device controls that travel with each phone and tablet, app controls for specific services, and DNS filtering across the network. Start with the router and DNS layers for broad coverage, then add device and app controls as your children get their own devices. Just go in knowing the limits, cellular data, VPNs, and devices away from home all slip past network controls, so pair the technical setup with an ongoing conversation, which is the layer that matters most.