How to Set Up Parental Controls on a Router

Installing a parental control app on a child's phone works until they switch to a different device, use a friend's phone, or figure out how to uninstall it. Router-level controls work differently: they apply at the network level and affect every device that connects through your router — phones, tablets, game consoles, smart TVs. There is nothing to install on each device and nothing to bypass on the device itself (short of switching to mobile data, which is a separate problem).

This guide covers two approaches: the parental controls built into most modern routers, and DNS-based filtering as a more robust alternative or supplement.

Approach 1: Built-In Router Parental Controls

Most routers made in the last five years include some form of parental controls. The location and quality of these features varies significantly by brand.

Accessing Your Router's Admin Interface

1. Connect to your home network on a computer or phone.
2. Open a browser and navigate to your router's admin address — typically 192.168.1.1 or 192.168.0.1. The exact address is printed on the router's label.
3. Log in with your admin username and password. If you have not changed these, they are on the label (or try admin/admin, admin/password — then change them immediately after logging in).

Finding Parental Controls

Look for a section labeled "Parental Controls," "Access Control," "Family Protections," or similar. On ASUS routers it is a dedicated "Parental Controls" menu. On TP-Link routers it may be under "Advanced → Parental Controls." Netgear routers often use "Parental Controls" or the "Circle" integration. Linksys puts it under "Parental Controls" in the Smart Wi-Fi interface.

What Built-In Controls Typically Offer

• Per-device internet schedules: Block internet access for a specific device during school hours or after bedtime. The device identifies by MAC address, which is fixed to the network adapter.
• Website blocking: Block specific domains by name. Less effective than category-based filtering because it requires you to add sites manually.
• Content category filtering: Higher-end routers (Netgear Orbi, ASUS with AiProtection) block categories of content (adult content, gambling, social media) using a continuously updated database. This is significantly more effective than manual domain blocking.
• Pause internet: Some routers allow pausing all internet access for specific devices with a button or schedule.

Approach 2: DNS-Based Filtering (Recommended)

DNS is the system that translates domain names (like google.com) into the IP addresses computers actually connect to. A filtering DNS service intercepts lookup requests and blocks known harmful or inappropriate domains before the device ever connects to them. This works for every device on your network automatically.

Option A: Cloudflare for Families (Free)

Cloudflare operates two free family-safe DNS servers:

• 1.1.1.3 / 1.0.0.3 — Blocks malware and adult content
• 1.1.1.2 / 1.0.0.2 — Blocks malware only

To apply these to your whole network, log into your router's admin interface and find the DNS settings — usually under WAN settings or Internet settings (not the DHCP server settings). Change the Primary DNS to 1.1.1.3 and Secondary DNS to 1.0.0.3. Save and restart the router. Every device on your network now uses Cloudflare's family-safe resolver.

Option B: NextDNS (Free Up to 300,000 Queries/Month)

NextDNS (nextdns.io) provides more control than Cloudflare for Families. After creating a free account, you get a custom DNS configuration with:

• Category-based filtering (adult content, gambling, social media, gaming, streaming services)
• A blocklist of known malware, phishing, and tracking domains
• Per-device profiles with different settings for each family member
• Logs showing which domains were blocked and why
• Time-based rules (block social media after 10pm)

Your NextDNS dashboard shows your personal DNS addresses to use in the router settings. The free tier allows 300,000 DNS queries per month — sufficient for most households. The paid plan is $1.99/month for unlimited queries.

Limitations to Be Aware Of

Router and DNS controls are not foolproof:

• Mobile data bypasses your router entirely. A phone on LTE or 5G does not use your home network's DNS. Carrier-level controls or device-level controls are needed to address this.
• VPNs can bypass DNS filtering. A VPN routes traffic through its own servers and bypasses your DNS settings. Most children do not set up VPNs, but technically sophisticated teenagers might.
• Encrypted DNS (DoH/DoT) on devices. Some browsers and devices use their own encrypted DNS rather than the system DNS. Chrome, Firefox, and iOS can be configured to use their own DNS-over-HTTPS settings. Check that the devices you are filtering have not been configured this way.
• MAC address spoofing. A device that changes its MAC address will not be recognized by per-device schedule rules. This is not common with children's devices but worth knowing.

Combining Both Approaches

The most effective setup uses both: DNS filtering (NextDNS or Cloudflare for Families) for content blocking across all devices, plus router-level schedules for specific children's devices to enforce bedtime limits. DNS filtering handles the "what" and device schedules handle the "when."

Document your router admin password and DNS configuration somewhere secure — recovering from a forgotten router admin password typically requires a factory reset of the router.