Log in Sign up

Parental controls without extra software: what to enable

Family Link, Screen Time, router filters and safe search: we build child protection from built-in tools and speak honestly about where they stop working.

Child's desk with a tablet under a transparent protective dome in a dark room

The market sells parents spyware that reads chats, while for the real task, shielding a child from adult content and an endless screen, tools already built into devices are enough. They are free, do not require trusting a child's data to a third-party company and, importantly, work honestly without subscriptions or pop-up payment requests. Let's build protection from them and mark the limits where technology ends.

Device level: the main one

On Android the main tool is Family Link: a parent's account manages a child's account up to age thirteen, and this gives approval of store installs, per-app screen limits, a device sleep schedule, search and browser filters, and location. On iPhone, Screen Time with Family Sharing does the same: content age ratings, limits, a purchase ban, none of which can be removed without a parent's code. Setup takes one evening, and in child safety it is the best-paying evening you can have.

The same logic applies to other screens: game consoles and TVs have parental modes with ratings and time, and streaming services have kids' profiles with a PIN on the adult one. The rule is simple: set up every screen a child can reach, otherwise all control drains to the weakest device in the house.

Network level: the backup

A home router adds a second line that does not depend on the device: filtering DNS. Family variants of public DNS services cut adult domains and force safe search, and setup is two fields in the router panel. An advanced option: a home filter such as AdGuard Home with separate rules for children's devices. We covered how DNS swapping works and what it can do in the article on ad blocking: the mechanics are the same, the lists differ. An honest caveat: outside the home, on cellular and on someone else's Wi-Fi, this line does not work, and only the device's own settings protect there.

AgeWhat makes sense
Under 7only kids' profiles and apps, timed screen, no browser of their own
7–10Family Link or Screen Time, an app allowlist, safe search
11–13softer limits and filters, install approval, talks matter more than bans
14+adult content and sleep filter, the rest through trust: total control already harms

A separate note from practice on screen time budgets: a hard overall limit works worse than a schedule. "After nine in the evening the device sleeps" is clear and predictable, while a "two hours a day" counter that burns out by lunch turns the evening into negotiations. Both tools exist in Family Link and Screen Time: choose the one that provokes fewer conflicts in your family.

Workarounds they will find first

Children are inventive, and it helps to know the standard holes. Someone else's device: a guest's tablet or an old phone from a drawer with no settings. A second account or guest mode on the same device: closed by banning new users. Changing DNS or turning on "private DNS" in settings: blocked on a child's Android profile, and forced interception of DNS requests helps on the router. VPN and proxy apps: in child accounts, parental approval decides installs, which is why a controlled store is the key setting. And the simplest workaround: a factory reset, after which the phone "loses" all restrictions; modern child accounts close this too by tying the device to the parent's account.

Shared computer and browser

A home computer that everyone uses in turn gets protected by a separate child account: both Windows and macOS can limit time, apps and sites for such accounts. Working under the parent's account cancels the settings: the child gets an adult browser, saved passwords and payment details in autofill. In the browser itself, force safe search and set up a managed profile for the child: all major browsers have kids' modes, and blocking adult results in search engines gets locked in by the same family DNS.

Where technology ends

Filters do not read messengers and do not judge whom a child talks to: encryption protects chat privacy from everyone, parents included, and attempts to break it destroy trust more reliably than any ban. Painful topics, from bullying to coaxing out photos, live inside allowed apps and only a conversation solves them: a child must know that you bring a problem to a parent and do not hide it. The technical part plays a supporting role here: it buys time for growing up and does not replace it.

The final set for an evening: a managed child account on the phone, ratings and limits on the console and TV, family DNS on the router, PINs on adult streaming profiles. Plus a family agreement on what is on and why: control a child knows about works longer than a secret one. As children grow, lift restrictions before they begin to chafe: the goal is no sterile internet, but a learned habit of safe behavior that a teenager takes into their own internet, unfiltered by anyone.

Read next

Half-open vault door and glowing keys of different shapes, with a fingerprint shining brightest

Security

Strong passwords today: from long phrases to passkeys

The "eight characters with a special symbol" rules were born for a past era: today passwords leak in bulk and machines crack them, while no neighbor guesses anything. We cover what truly makes a…

5 min read
Cafe table with a laptop under a dome of Wi-Fi waves, small lights peeking from the dome's edges

Security

How to protect your data on a public Wi-Fi network today

Old horror stories about cafe Wi-Fi, where a neighbor reads your mail, aged along with the unencrypted web: HTTPS closed classic eavesdropping. The current risks are different: fake hotspots with…

5 min read

All articles

Pricing Grab a free hour