Set Up Parental Controls on Your Router

Router-level parental controls are the single most efficient lever you have as a parent, because they cover every device on the network at once, a child's tablet, a smart TV, a games console, a guest's phone, without installing a thing on any of them. The trade-off is that they live on the connection, not the device, so a phone on cellular data walks right past them. Get the router rules right and layer one device-level setting on top, and you have covered most of what a kid can reach at home.

Key takeaways

• Router controls apply to every device on your Wi-Fi at once, with no app to install per device.
• You can block sites, schedule access times, and pause the internet instantly.
• Create per-device or per-child profiles to apply different rules.
• If your router lacks controls, point it at a family DNS like CleanBrowsing or Cloudflare for Families.
• Controls do not cover cellular data or everything inside an app, and a VPN can tunnel past them.

Which approach fits your situation

There is no single right tool. The best setup depends on your router's age and how technical you want to get. Here is how the common options stack up:

Approach	Best for	Cost	Main limitation
Built-in router controls	Most families with a router from the last few years	Free (sometimes a paid tier)	Quality varies wildly by brand
Family DNS (CleanBrowsing, Cloudflare 1.1.1.3)	Older or basic routers with no real controls	Free	Filters categories, not schedules
Subscription router add-on (HomeShield, AiProtection Pro)	Hands-off scheduling and per-app reports	$3 to $6 per month typical	Locks features behind a fee
Device-level controls (Screen Time, Family Link)	Phones that leave the house on cellular	Free	One per device to manage

Most households end up combining the first or second row with the last one. Router rules handle the home network; device rules follow the kid out the door.

Log in to your router

The process starts the same on every brand: open a browser and go to your router's admin address (often printed on a label, commonly 192.168.1.1 or 192.168.0.1, or via the brand's app). Sign in, then look for a section called Parental Controls or Family.

Create profiles and set rules

1. Open Parental Controls in the router admin and enable the feature.
2. Create a profile for a child and assign their devices to it.
3. Set an internet access schedule defining allowed hours (for example, off after 9 PM).
4. Add blocked sites or content categories, or block by keyword.
5. Save, then use Pause any time you need to cut access instantly.

The exact menu path differs by brand, but the building blocks are identical. Here is where to look on the most common routers:

Brand	Where the controls live	Notable feature
TP-Link	Advanced, then Parental Controls (or HomeShield in the Tether app)	Profiles, time limits, bedtime, filtered content levels
ASUS	Parental Controls page (AiProtection Pro for the advanced tier)	Per-device scheduling, web and app filters
Netgear	Smart Parental Controls via the Nighthawk app	Free tier plus a paid Premium scheduling tier
Google Nest Wifi	Family Wi-Fi in the Google Home app	Pause groups, schedules, SafeSearch enforcement
Eero	Profiles and Eero Plus / Eero Secure	Content filters, pause, scheduled pauses

Whatever the brand, you are doing the same three things: making a profile, attaching devices to it, and setting rules on that profile.

No built-in controls? Use a family DNS

If your router has weak or no parental controls, change its DNS servers to a family-filtering service. These block adult and malicious content network-wide on any router that allows custom DNS. Set it once in the router's DNS settings and every device inherits the filter. The two reliable free options:

• CleanBrowsing Family: primary 185.228.168.168, secondary 185.228.169.168. Blocks adult, proxy, and mixed-content sites and forces SafeSearch.
• Cloudflare for Families (malware + adult): primary 1.1.1.3, secondary 1.0.0.3. Use 1.1.1.2 for malware-only filtering if you just want the security layer.

Enter these as the DNS servers in your router's WAN or DHCP settings, save, and reboot. Every device that pulls an address from the router now resolves through the filter. To stop a tech-savvy kid from overriding it on their own device, also block outbound DNS (port 53) to anything other than your chosen servers if your router supports it.

Know the limits

Router controls are not a complete solution, and it is better to know the gaps up front than to assume the network is locked down:

• Cellular data sidesteps Wi-Fi entirely. A phone on its mobile plan never touches your router. Use the carrier's controls or device-level Screen Time for that.
• A VPN or proxy tunnels past the filter. If a child installs a VPN app, the router only sees encrypted traffic to the VPN server. Block VPN app installs at the device level if this is a concern.
• DoH (DNS over HTTPS) can bypass DNS filtering. Modern browsers can resolve names over HTTPS to a server you did not choose, skipping your family DNS. Disable DoH in the kid's browser, or pick a router that blocks it.
• Filters cannot see inside an app. Router controls will not, for example, screen individual videos within a streaming service that is allowed.

Pair router controls with device settings and, more importantly, an actual conversation about what is and is not okay online. Technical controls buy you time and reduce accidents; they do not replace trust.

What to do this weekend

If you are setting this up from scratch, work through it in order:

• Log in to the router admin page and change the default admin password if you never did.
• Create one profile per child and assign their devices by MAC address.
• Set a bedtime schedule (for example, internet off after 9 PM on school nights).
• Turn on the built-in content filter, or set family DNS if the router lacks one.
• Test it: try opening a blocked category from a kid's device to confirm the rule works.
• Add device-level controls (Screen Time or Google Family Link) for phones that leave the house.

For the security side of the same router, work through our secure home router checklist, and if you are also extending coverage, see how to set up a mesh Wi-Fi network the right way.

Frequently asked questions

Do router controls work on every device?

They work on anything connected to your Wi-Fi, including TVs and tablets that have no parental controls of their own. They do not affect cellular data, so a phone on its mobile network bypasses them.

Can my kid get around the filter with a VPN?

Yes, a VPN or proxy can tunnel past router-level filtering. Pair router controls with device restrictions that block installing or running VPN apps if that is a concern.

What if my router has no parental controls?

Switch its DNS to a family-filtering service like CleanBrowsing Family or Cloudflare for Families. This adds content filtering to almost any router that allows custom DNS, with no extra hardware.

Will scheduling internet access kick devices off mid-use?

Yes, that is the point. When the scheduled off-time begins, assigned devices lose internet access until the next allowed window, or until you manually resume it. Warn kids before bedtime cutoffs to avoid surprises.