To set up parental controls, work through five layers in order: the device, the home network, the account, each individual app, and the mobile carrier. No single layer covers everything, so the device layer does the heavy lifting and the others fill the gaps. Every step below was checked against the vendor’s own support documentation on 11 September 2026.
Most people expect one switch. There is no switch, only a stack of five systems, each owned by a different company and covering a different slice of a child’s online life.
The device layer is the operating system: Apple Screen Time, Google Family Link, Microsoft Family Safety. It is strongest because it sits underneath everything on the hardware. The network layer is your router and DNS, covering every device on the home Wi-Fi including the console and smart TV that have no controls of their own, but stopping at the front door. The account layer is the child account with Apple, Google or Microsoft, which makes age ratings and purchase approvals work across devices. The app layer is the settings inside YouTube, TikTok, Roblox and the rest. The carrier layer is the mobile plan, the only thing reaching a phone on mobile data away from home.
All five is roughly two hours for one child; the device layer alone is twenty minutes and gets most of the value. One honest framing: parental controls are a speed bump, not a wall. They prevent accidents well, but not a motivated fifteen year old, who will find the school Wi-Fi, a friend’s hotspot, or a browser you did not think to restrict.
Tell your child what you are turning on, why, and what you will and will not be able to see. This is the difference between a system that survives contact with a teenager and one quietly circumvented within a fortnight. Scale the controls to the age and loosen them on a schedule the child knows about, so restrictions feel like a stage rather than a verdict. Be explicit about what you can see: on most platforms that is categories, app names and totals, not message contents.
Do not use covert monitoring tools. Software that hides itself is illegal to install on another adult’s device in many places, and that market has a poor record on data security. This guide only covers controls the child can see running.
For wider context on family screen habits, our piece on the impact of screen time and strategies for balance is a useful companion read.
Device controls run below the apps, survive most app-level workarounds, and cost nothing.
Your child’s Apple Account must be in your family group first, otherwise you are only configuring the device in your hand.
Where people get stuck: that recovery step. Apple is emphatic you should not skip it, because a forgotten passcode without recovery has no clean fix. New in 2026: on iOS 26 and iPadOS 26 a child can request an exception to a limit, and it reaches you in Messages. Verified 11 September 2026 against Apple’s Content and Privacy Restrictions documentation. Our full walkthrough of parental controls on iPhone and iPad goes deeper on every screen mentioned here.
Where people get stuck: Family Link cannot supervise an iPhone, an iPad, or any computer other than a Chromebook. Mixed-platform households discover this after setting everything up. Verified 11 September 2026 against Google’s Family Link documentation.
Where people get stuck: limits only apply to devices connected to your family group, and mobile screen time covers Android, not iOS. Verified 11 September 2026 against Microsoft’s documentation.
For children under 13, Communication Safety and Screen Distance are on by default and the Web Content Filter already blocks adult content, so the baseline is stricter than most parents assume. Verified 11 September 2026 against Apple’s Mac User Guide.
Chromebooks use the same Family Link system as Android: open Settings, then Parental Controls, then Set up, with Chrome OS 71 or later. Site blocking, app approvals and screen time are then managed from Family Link.
Fire tablets use Amazon Kids, a separate profile rather than a filter over the adult one. Create a child profile from Settings, then Profiles and Family Library, set a PIN, then manage age filters, time limits and approvals at parents.amazon.com, which our guide to Amazon parental controls across Fire tablets, Kids+, Prime Video and Alexa covers in full. The catch: the child profile is a walled garden, so content you own on the adult profile must be shared into it.
Network controls cover every device on your Wi-Fi at once, including those with no controls of their own, but they are the layer most easily bypassed. Treat them as a backstop.
Most routers made in the last five years have a parental controls or profiles section: create a profile per child, assign their devices, then set a schedule and a category filter. Many ISP routers also offer a whole-network filter in the account portal.
DNS filtering is the fastest meaningful win for a non-technical parent: change two numbers and every device on the network inherits an adult-content filter.
Verified against Cloudflare’s 1.1.1.1 for Families documentation.
DNS filtering is defeated by mobile data, a VPN, a friend’s hotspot, encrypted DNS in the browser, or changing DNS on the device. On a supervised phone you can block VPN configuration changes at the device layer. On an unmanaged laptop you cannot.
Create the account through Family Sharing rather than letting the child make a standard one with a fake birth year. A child account gives you Ask To Buy, applies age ratings on every Apple device they sign into, and lets you manage Screen Time remotely. A fabricated adult birthday gives none of that, and correcting it later is a support ticket.
Google supervision can be added to a new account at device setup, or to one the child already uses. For an existing account the child and their device must be with you, and the child approves on their own screen. This is the step that catches parents doing it remotely at 11pm.
A child Microsoft account carries settings across Windows, Xbox and Edge. Family organisers are the group administrators, so if you are not one you will not see reports or change limits. Xbox privacy settings live separately at xbox.com, and communication and multiplayer permissions sit there rather than in Family Safety.
Each service has its own controls and the quality varies wildly. These are the routes and the sticking points; sister guides go deeper.
For under-13s, use YouTube Kids or a supervised account. On main YouTube, sign in as the parent, tap You, then Settings, then Family Center, select the child’s profile, and tap EDIT next to Content Settings. Family Center also blocks channels, turns off autoplay, clears history, caps Shorts and sets bedtime reminders. Verified 11 September 2026 against YouTube’s supervised account documentation.
Family Pairing links your account to your teen’s and gives you screen time limits, restricted mode, search keyword filtering and direct message controls. Recent additions include alerts when a teen uploads something publicly visible. The sticking point: pairing must be completed from both phones, and a second unpaired account defeats it.
Teen Accounts are the default for under-18s, with a 13+ content setting rolled out globally that hides content judged unsuitable for teens in Feed. Supervision runs through Meta’s Family Center, which in 2026 aggregates time-spent data across Instagram, Facebook, Messenger and Meta Horizon. Meta has also deployed AI age estimation, so a teen who signed up with a false birth year may be moved into a Teen Account automatically.
Roblox now requires a verified linked parent account, confirmed with government-issued ID, before you get the full Parent Dashboard. From there you set content maturity, block specific experiences, toggle experience chat, direct chat and chat with friends, set a monthly spend limit and daily screen time limits, and review Connections. Voice chat needs parental approval for under-13s. The sticking point: parents set content maturity and assume chat is handled, when chat is separate.
Set controls at epicgames.com/account/parental-controls or in game: a PIN for real-money purchases, restrictions on voice and text chat and friend requests, mature language filtering, daily time limits with weekly reports, and age-rated content behind the PIN. Under-13s are capped at friends, team members and connections, under-10s at friends only, with a daily spending cap for under-13s. Cabined Accounts restrict features such as voice chat until a parent consents. Verified 11 September 2026 against Epic Games’ parental controls page.
Two sticking points, both covered in our full Nintendo Switch parental controls guide. Controls are set for the system, not per user, so the same restrictions apply to everyone on that console: set them with the youngest player in mind. And on Switch 2, GameChat must be configured through the app before anyone under 16 or any supervised user can use it. Verified 11 September 2026 against Nintendo’s parental controls FAQ.
Use Edit Profiles to create a Junior Mode profile, set a four-digit profile PIN, and set a maturity rating per profile so titles above it do not appear while browsing. On your Account page, require your password before a new profile can be created, which is what stops a child making an unrestricted one. Most streaming services follow the same shape.
Carrier controls are the only layer that reaches a phone on mobile data outside your home. The major US carriers all sell a family plan add-on covering filtering on the mobile connection, app blocking, time limits and location.
The filter only applies over the carrier’s own network, so it does nothing on school or café Wi-Fi, where most out-of-home usage happens, and it almost always duplicates something Screen Time or Family Link does free. Configure the device layer first, then subscribe only if you have a named gap.
|
Platform |
Time limits |
Content filtering |
Purchase approval |
Cannot do |
|---|---|---|---|---|
|
Apple Screen Time |
Yes, downtime and app limits |
Yes, web filter and age ratings |
Yes, Ask To Buy |
Read messages; supervise non-Apple devices |
|
Google Family Link |
Yes, daily and per-app |
Yes, SafeSearch, Chrome, Play |
Yes, in Google Play |
Supervise iPhone, iPad or other computers |
|
Microsoft Family Safety |
Yes, Windows, Xbox, Android |
Yes, in Edge and the Store |
Yes, spending approvals |
Screen time on iOS; other browsers |
|
Router or DNS filter |
Yes on most routers |
Yes, by category, whole network |
No |
Cover mobile data, VPNs or outside networks |
|
Nintendo Switch and Switch 2 |
Yes, play time and bedtime |
Yes, age rating and preset |
Yes, eShop restrictions |
Differ per user on one console |
|
Roblox |
Yes, younger age groups |
Yes, maturity and per-experience |
Yes, monthly spend limit |
Filter what other players type |
A large share of parental control searches are people trying to remove controls: a child who has outgrown the setup, a second-hand device with restrictions attached, or a young adult supervised years ago. All legitimate, all documented by the vendors.
If you have forgotten it: open Settings, then Screen Time, tap Change Screen Time Passcode twice, then enter the Apple Account email and password used when the passcode was set, which may not be the account currently signed in. If recovery was never configured you will need Apple Support or a full erase and restore. Verified 11 September 2026 against Apple’s forgotten Screen Time passcode article.
From the parent’s phone: open Family Link, select the child’s profile, then Controls, then Account Settings, then About supervision, then Stop supervision. From the child’s Android device running 7.0 or later: Settings, then Digital Wellbeing and parental controls, then More, then Stop supervision, with parent verification.
Supervision can be stopped once the child reaches 13, or the applicable age in your country. A child under 18 still needs a parent’s approval, and both parties are notified. There is no silent route. Verified 11 September 2026 against Google’s supervision documentation.
On Windows, sign in at account.microsoft.com/family as an organiser and either turn off individual limits or remove the member from the family group, noting that removal also ends shared subscriptions. On Nintendo Switch, open System Settings, then Parental Controls, then Change Settings, enter the PIN, and select If the PIN is lost, Nintendo issues a master key against an inquiry number on the console, a process our Switch parental controls guiDelete Parental Controls.de walks through in detail.
Set DNS back to automatic, or delete the device profile in the router’s parental controls section. Reboot afterwards: devices cache DNS results and the filter can appear to persist for an hour.
|
Problem |
Likely cause |
Fix |
|---|---|---|
|
Limits apply on one device but not another |
A different account is signed in, or the device was never added to the family group |
Check the signed-in account and confirm the device appears in the dashboard |
|
Child bypasses the filter on mobile data |
Network and DNS filtering only cover the home Wi-Fi |
Apply device-layer controls, or add carrier filtering |
|
A VPN appeared and filtering stopped |
VPN traffic ignores router DNS and most network filters |
Block VPN configuration changes and new app installs |
|
Child spent real money despite purchase controls |
Approval was set on the app store but not the game’s own currency balance |
Set the in-service limit too: Roblox monthly cap, Epic purchase PIN, eShop restrictions |
How do I turn off parental controls? On iPhone: Settings, then Screen Time, then Content and Privacy Restrictions off, then turn off the passcode. On Android: Family Link, select the child, Controls, Account Settings, About supervision, Stop supervision. On Windows, remove the limits or the member at account.microsoft.com/family. On Nintendo Switch, System Settings, Parental Controls, Delete Parental Controls. To change rather than remove them, use those same screens: rebuilding a setup from scratch loses your history.
Can my child turn off parental controls? Not without you knowing, on a properly configured setup. Google requires parental approval for anyone under 18 and notifies both parties; Apple requires the Screen Time passcode. What a determined child can do is work around them: a friend’s device, mobile data or school Wi-Fi to escape network filters, an unsupervised browser, a VPN, or a factory reset. Major OS updates can also reset or relocate settings, so re-check after each one.
What age should parental controls stop? Gradual release beats a cliff edge. Hard content filtering and tight time limits make sense to roughly age 10 or 11. From 11 to 14, most families keep age ratings and purchase approval but loosen time limits. From about 15 most controls stop being effective, so what usually remains is purchase approval, two-way location sharing and an agreement about phones overnight. By 17 or 18 they should be off. Google allows supervision to be stopped from age 13.
Do parental controls work on mobile data? Device-level controls do, because they run on the phone itself. Router and DNS filtering do not. This is the biggest gap in most family setups, and the one thing carrier add-ons genuinely solve.
Can I see my child’s messages? Not through built-in parental controls. Apple, Google and Microsoft give you app names, categories and time totals, not message contents. Apple’s Communication Safety blurs nude images on the device without sending anything to you or to Apple. We do not recommend covert monitoring tools.
Are free built-in controls enough, or do I need a paid app? For most families the built-ins are enough, and they integrate better than anything third-party because they run below the apps. A paid app is worth considering for a mixed-platform household wanting one dashboard. Start free and pay only once you can name the gap it fills.
Can parental controls block a specific website? Yes. Apple Screen Time has a Web Content setting with Limit Adult Websites plus a Never Allow list. Family Link blocks sites in Chrome and Family Safety in Edge. Router and DNS filtering work by category rather than individual URL.
What about privacy risks beyond content? Controls handle what a child sees, not what the wider internet already holds about your family. People-search sites are the usual starting point; our PeopleFinders opt out guide walks through one. More guides sit on the REVERB blog.
Work in layers. Start with the device, because it is free, runs below the apps and does most of the work: Screen Time on Apple hardware, Family Link on Android and Chromebooks, Family Safety on Windows and Xbox, Amazon Kids on Fire tablets. Add DNS filtering at the router as a whole-home backstop, using 1.1.1.3 and 1.0.0.3. Make sure the child has a proper child account with Apple, Google or Microsoft, because without one the age ratings and purchase approvals have nothing to attach to. Then go app by app, remembering that chat settings are almost always separate from content settings.
Turning controls off is documented by every vendor, so do not let a forgotten passcode become permanent: set Apple’s Screen Time Passcode Recovery at setup. Above all, tell your child what is on and why, scale it to their age, and loosen it on a schedule they know about. Controls are a speed bump. The conversation is the road.