How to Set Up Parental Controls on Your Router (All Major Brands + DNS Filtering)

Your kids are online, on laptops, tablets, phones, smart TVs, and gaming consoles. And unlike apps or browser extensions, parental controls set at the router level apply to every device on your network, all at once, without needing to install anything on each device individually.

Router-level parental controls are the most comprehensive and consistent approach to managing what your family can access online.

When a website is blocked at the router, it’s blocked everywhere, regardless of which device, which browser, or whether someone has found a workaround on their phone.

This guide gives you step-by-step instructions for the most popular router brands, explains how DNS-based filtering works for routers without built-in controls, and covers the limitations you need to understand to make your setup genuinely effective.

📋 Quick Answer : How to Set Up Parental Controls on a Router

Built-in controls (most routers): Log into the router’s admin panel → find “Parental Controls” → create a device profile → set time restrictions and content filters → save.

DNS filtering (any router): Change the router’s DNS server to a family-safe DNS like Cloudflare for Families (1.1.1.3) or OpenDNS FamilyShield (208.67.222.123) , this blocks adult content network-wide without needing a built-in parental controls menu.

Key limitation: Router-level controls don’t apply to devices using mobile data (4G/5G). A phone that switches off WiFi bypasses all router-based controls.

What Can Router Parental Controls Actually Do?

Before diving into setup steps, it’s worth being clear about what router-level parental controls can and can’t accomplish. This prevents disappointment and helps you combine router controls with other tools where needed.

What Router Parental Controls CAN Do

• Block specific websites and domains by URL or keyword
• Block entire content categories, adult content, gambling, social media, gaming (depends on router)
• Set internet access schedules, restrict access during homework hours, bedtimes, or mealtimes
• Pause internet access instantly, for a specific device or all devices
• Apply controls to every device simultaneously: phones, tablets, laptops, consoles, smart TVs
• Set bandwidth limits, prevent one device from consuming all available internet speed
• Monitor browsing activity, see which sites were visited and when (on supported routers)
• Create per-device profiles, different rules for each child’s device

Related: How to Block Specific Devices from Accessing Your Router

What Router Parental Controls CANNOT Do

• Control devices using mobile data (4G/5G); when a phone’s WiFi is off, router controls don’t apply
• Block HTTPS traffic by URL path; the router can see youtube.com but not which specific video
• Block content within apps; blocking a domain blocks the whole app; you can’t allow Instagram but block Reels
• See encrypted message content; WhatsApp, iMessage, and similar apps are end-to-end encrypted.
• Prevent a determined teenager from using a VPN; a VPN routes traffic around router-level DNS blocks.
• Automatically adapt as new sites appear; manual block lists require regular updating.

Understanding these limits helps you set realistic expectations and combine router controls with device-level tools (Screen Time on iOS, Digital Wellbeing on Android) where router controls fall short.

Method 1: Built-In Router Parental Controls

TP-Link Routers (HomeCare / HomeShield)

TP-Link’s parental controls are among the most feature-rich available on consumer routers, with separate implementations on older and newer firmware.

Via the web interface (newer firmware with HomeShield):

1. Go to http://tplinkwifi.net or 192.168.0.1 and log in
2. Navigate to Advanced > HomeShield (or Advanced > Parental Controls on older firmware)
3. Click Get Started or Create Profile
4. Enter a profile name (e.g., “Emma”) and click Next
5. Select the devices to assign to this profile, your child’s phone, tablet, or laptop, from the device list
6. Under Content Filtering, select content categories to block (Adult, Gambling, Social Media, etc.)
7. Under Time Limits, set daily or weekly internet time budgets
8. Under Bedtime, set a nightly schedule when internet access is cut off automatically
9. Click Save

Via the TP-Link Tether App:

1. Open Tether → tap your router
2. Tap HomeShield or Parental Controls
3. Tap Add a Profile → name it, assign devices
4. Set content filters, time limits, and bedtime schedule
5. Tap Save

✅ TP-Link tip: HomeShield’s free tier includes basic content filtering and time controls. HomeShield Pro (subscription) adds more granular content categories, real-time browsing history, and location services. The free tier is sufficient for most families.

Related: Can Routers Track Internet History? What WiFi Owners Can See

ASUS Routers (AiProtection / Family Controls)

ASUS offers two overlapping parental control systems: AiProtection (powered by Trend Micro, available on supported models) and standard Parental Controls via the web interface and ASUS Router app.

Via the web interface (AiProtection):

1. Go to http://router.asus.com or 192.168.1.1 and log in
2. Navigate to AiProtection > Parental Controls
3. Accept the Trend Micro license agreement when prompted
4. Under Web & Apps Filters:
   • Select the client device (MAC address) from the dropdown
   • Choose content categories to block (Adult, Social Networks, Streaming, etc.)
   • Click the + button to add the rule
5. Under Time Scheduling:
   • Select the client device
   • Use the weekly grid to block specific time slots
   • Click Apply

Via the ASUS Router App (Family Controls):

1. Open the ASUS Router app → tap Family
2. Tap Add Member → enter a name and assign devices
3. Set content filters, internet schedule, and time limits per profile
4. Tap Apply

✅ ASUS tip: The web interface and app have separate parental control systems with different features. The app-based Family Controls often offers a cleaner profile-based experience. If your router supports AiProtection, it provides superior content filtering via Trend Micro’s database , no subscription required on most models.

Netgear Routers (Nighthawk, Orbi)

Via the Nighthawk/Orbi App (recommended, more features):

1. Open the Nighthawk or Orbi app
2. Tap Smart Parental Controls (may require a Circle subscription after free trial)
3. Tap Add a Person → enter a name and assign devices
4. Set a Filter Level: Child, Pre-Teen, Teen, Adult, or Custom
5. Customise blocked categories within the filter level
6. Set a Bedtime schedule for automatic nightly cutoff
7. Use Pause for immediate internet suspension on any profile
8. Tap Save

Via the web interface (basic controls, no subscription required):

1. Go to http://routerlogin.net or 192.168.0.1 and log in
2. Navigate to ADVANCED > Security > Block Sites
3. Under Keyword Blocking, add domains or keywords to block
4. Navigate to ADVANCED > Security > Schedule to add time-based restrictions
5. Apply the schedule to specific devices under Access Control

⚠️ Netgear note: Netgear’s most powerful parental controls (Circle integration) require a Circle subscription ($4.99/month) for ongoing use after the free trial. The built-in basic controls (keyword blocking, time scheduling) are free and accessible via the web interface without subscription.

Related: Latest Router Security Features to Protect Your Online Privacy

Eero (Amazon)

Eero’s parental controls are entirely app-based and clean to use.

Via the Eero App:

1. Open the Eero app → tap Profiles (or the person icon)
2. Tap Add a Profile → enter a name (e.g., “Kids” or “Teenagers”)
3. Assign devices to the profile
4. Under Content Filters, choose a filter level: None, Kids (under 12), Teens, or Adults
5. Under Schedule, set internet pause windows (e.g., 9 PM to 7 AM on school nights)
6. Toggle Pause to immediately suspend internet for the profile at any time
7. Tap Save

⚠️ Eero note: Basic content filtering and scheduling require Eero Plus ($9.99/month). The free tier allows device pausing and basic profile management but limited content filtering. If you don’t want a subscription, use DNS filtering (Method 2 below) on the eero’s DNS settings instead.

Google Nest WiFi / Google Home

Via the Google Home App:

1. Open Google Home → tap WiFi → Settings
2. Tap Family WiFi
3. Tap Add Family Member → enter a name
4. Assign devices to the profile
5. Set Content Filters, Safe Search enforcement, and content category blocking
6. Set a Schedule for automatic internet pause during homework or bedtime
7. Tap Save

✅ Google tip: Google’s Family WiFi is powered by Google Family Link integration. If your child already has a supervised Google account via Family Link, connecting their devices here links router-level controls with account-level supervision for a more complete solution.

Linksys Routers (Velop and Standard)

Via the Linksys App (Velop mesh):

1. Open the Linksys app → tap Parental Controls
2. Tap the + icon → enter a device name or select from the list
3. Set Blocked URLs by adding specific domains
4. Set Access Restrictions by day and time using the scheduling grid
5. Tap Save

Via the web interface:

1. Go to 192.168.1.1 → log in
2. Navigate to Parental Controls
3. Add the device’s MAC address and configure URL blocking and time restrictions.
4. Save settings

Method 2: DNS-Based Filtering (Works on Any Router)

If your router doesn’t have robust built-in parental controls, or if you want stronger content filtering than your router provides, changing the router’s DNS server is the most effective no-subscription option.

How DNS Filtering Works

Every time someone visits a website, their device first asks a DNS server to translate the domain name into an IP address. By pointing your router to a DNS service that maintains a database of inappropriate content, you can block entire categories of websites across your entire network before any connection is even attempted.

This approach:

• Works on any router that allows custom DNS settings
• Blocks content for all devices on the network simultaneously
• Requires no subscription (free options available)
• Cannot be bypassed by clearing browser history or using incognito mode

Best Free Family-Safe DNS Services

Recommendation for most families: CleanBrowsing Family is the most thorough free option; it blocks adult content, proxies, and VPN bypass sites. Cloudflare for Families (1.1.1.3) is faster and blocks malware plus adult content, though slightly less aggressive on edge cases.

How to Change DNS on Your Router

TP-Link:

1. Log in at 192.168.0.1
2. Go to Advanced > Network > Internet
3. Click the Advanced dropdown
4. Under DNS Server, select Use the Following DNS Addresses
5. Enter your chosen primary and secondary DNS
6. Click Save

ASUS:

1. Log in at 192.168.1.1
2. Go to WAN > Internet Connection
3. Under WAN DNS Setting, set Connect to DNS Server automatically to No
4. Enter your DNS server addresses
5. Click Apply

Netgear:

1. Log in at routerlogin.net
2. Go to Advanced > Setup > Internet Setup
3. Under Domain Name Server (DNS) Address, enter your DNS addresses
4. Click Apply

Eero:

1. Open the Eero app → tap Settings → Network Settings → DNS
2. Select Custom DNS
3. Enter your DNS addresses
4. Tap Save

Google Nest:

1. Open the Google Home app → WiFi → Settings → Advanced Networking
2. Tap DNS → select Custom
3. Enter your DNS addresses
4. Tap Save

💡 Pro tip: After changing DNS, test by attempting to visit an adult site from a connected device. If you see a block page or connection refusal, the DNS filtering is working. If it loads normally, verify the DNS change saved correctly and try flushing the DNS cache (ipconfig /flushdns on Windows, or restarting the device).

For families who want more granular DNS filtering with detailed per-device reports, custom block lists, and real-time activity monitoring, a hardware DNS filter like Firewalla Gold or eBlocker provides router-agnostic network-wide control; both are available on Amazon and work independently of your router’s built-in features.

Related: How to Monitor Network Traffic on Your Home Router

How to Block Specific Websites (Manual URL Blocking)

In addition to category-based DNS filtering, most routers allow you to manually block specific domains, useful for blocking specific social media platforms, streaming sites, or other distractions.

General URL Blocking (All Routers)

1. Log in to your router’s admin panel
2. Look for Access Restrictions, Website Blocking, Content Filtering, or Black List
3. Enter the domain you want to block (e.g., tiktok.com)
4. Also add www.tiktok.com Some routers handle both automatically; others don’t
5. Save and apply

Tip: Block the main domain and common subdomains where relevant (e.g., m.tiktok.com for mobile, api.tiktok.com to also block app access).

Brand-Specific Paths

Setting Up Internet Time Schedules

Time-based controls are one of the most effective parental tools because they apply automatically without requiring manual intervention each night.

Typical Schedule Recommendations by Age

These are starting points; adjust based on your family’s routines and your child’s demonstrated responsibility.

How to Set Time Schedules

TP-Link: Advanced > Parental Controls > [Profile] > Bed Time → set nightly cutoff or specific weekly slots

ASUS: AiProtection > Parental Controls > Time Scheduling → select device, use the weekly grid to click blocked time slots

Netgear (with Circle): Smart Parental Controls > [Profile] > Bedtime → set different schedules for school nights and weekends

Eero: Profiles > [Profile] > Schedule → set day-by-day pause windows

Google Nest: Family WiFi > [Member] > Schedule → set daily or weekly pause times

Bypass-Proofing Your Parental Controls

This is the section most guides skip, and it’s where many parental control setups fail in practice.

Common Bypass Methods (and How to Block Them)

1. Using mobile data instead of WiFi: Router controls only apply to WiFi traffic. A phone that switches off WiFi and uses 4G/5G bypasses all router controls.

Solution: This requires device-level controls; Screen Time on iPhone/iPad (iOS 12+) can restrict mobile data use by app and time. Google Family Link on Android provides similar controls. Router controls and device-level controls are complementary, not interchangeable.

2. Using a VPN: A VPN encrypts traffic and routes it to a VPN server before it hits the router, bypassing DNS-based content filtering entirely.

Solution:

• Use a DNS provider that blocks VPN and proxy sites (CleanBrowsing Family blocks these)
• Block known VPN provider domains manually in your router’s block list
• Some routers (especially those with advanced firmware) allow blocking VPN protocols (OpenVPN, WireGuard) at the firewall level

3. Changing DNS settings on the device: On some devices, users can manually change the DNS server in the device’s network settings, bypassing the router’s DNS filtering.

Solution: On managed routers (pfSense, UniFi), you can use firewall rules to redirect all DNS traffic on port 53 to your chosen DNS server, regardless of what the device is configured to use. On standard consumer routers, this is harder to enforce; device-level management is more reliable here.

4. Using incognito or private browsing mode: Incognito mode doesn’t bypass router controls at all; the DNS filtering and time schedules still apply.

5. Using a neighbour’s WiFi or a mobile hotspot: No router-level control can prevent this. Address this with conversation and trust-based monitoring.

6. Resetting the router: If a child has physical access to the router, a factory reset can remove all parental controls.

Solution: Place the router in a location that’s not easily accessible. Enable a guest WiFi network for children’s devices and keep the admin password private; they can use the internet but can’t access router settings.

Related: Is Guest WiFi Safe? How to Create a Secure Guest Network

Router Parental Controls Comparison

Parental Controls Setup Checklist

Use this to confirm your setup is complete and effective:

Initial Setup:

• Accessed router admin panel and located parental controls section
• Created a profile for each child/group of devices
• Assigned all relevant devices (phone, tablet, laptop, console) to correct profiles
• Set content filter level appropriate to age group
• Added specific blocked sites if needed (social media, gaming, etc.)
• Configured time schedule (bedtime cutoff, homework blocks)
• Tested by attempting to access a blocked site from a child’s device
• Changed router admin password so children cannot access settings
• Set up DNS filtering (if router lacks built-in controls or for extra coverage)

Bypass Prevention:

• Router placed out of easy physical reach
• Guest network or dedicated network set up for children’s devices
• Device-level controls (Screen Time / Family Link) set up for mobile data coverage
• DNS provider blocks proxy/VPN sites (CleanBrowsing Family recommended)

Ongoing Maintenance:

• Reminder set to review settings every 3–6 months
• Reminder set to check for firmware updates monthly
• Browsing activity reviewed periodically (if monitoring is enabled)

Related: WiFi Security for Beginners: How to Secure Your Home WiFi Network

Common Mistakes When Setting Up Router Parental Controls

Related: Understanding WPA3 Encryption: Why Your Router Needs WPA3

Myth vs. Fact: Router Parental Controls

Myth: Router parental controls block everything on every device. Fact: Router controls apply only to devices connected to your WiFi network. Any device using mobile data (4G/5G) bypasses them entirely. Device-level controls are necessary to cover mobile data usage.

Myth: Incognito mode bypasses router parental controls. Fact: Incognito mode only prevents the browser from saving local history. Router-level DNS filtering and time schedules apply regardless of browsing mode.

Myth: You need a subscription for effective router parental controls. Fact: DNS filtering (Cloudflare for Families, OpenDNS FamilyShield, CleanBrowsing Family) is free and provides strong content filtering on any router without any subscription. Many routers also include capable built-in controls at no extra cost.

Myth: Once set up, router parental controls don’t need attention. Fact: The internet changes constantly: new platforms, new bypass methods, and your children’s ages and needs change too. Revisit settings every 3–6 months and stay informed about what your kids are using.

Myth: A determined teenager can always get around router controls. Fact: While no control is 100% bypass-proof, most teenagers aren’t running VPNs and changing DNS settings, especially when controls are combined with device-level tools and regular conversation. Effective parental controls don’t need to be perfect; they just need to raise the effort required to access inappropriate content meaningfully.

Conclusion

Router-level parental controls are the most practical way to apply consistent internet boundaries across every device in your home, without installing anything on each individual device.

The approach you take depends on your router: if you have a modern TP-Link, ASUS, Netgear, Eero, or Google Nest, you have solid built-in tools that take about 15 minutes to set up properly. If your router lacks built-in controls, switching to a family-safe DNS server (Cloudflare for Families or CleanBrowsing Family) takes about five minutes and works on any hardware.

The most important thing to remember: no single control is foolproof, and router controls have real limits, mobile data being the main one. The most effective approach combines router-level controls for WiFi coverage, device-level controls (Screen Time or Family Link) for mobile data, and regular honest conversations with your children about why the boundaries exist.

Set it up, test it, check it periodically, and adjust as your children grow. The goal isn’t a perfect technical barrier; it’s raising the effort required to access harmful content while fostering responsible digital habits over time.

Frequently Asked Questions

Found this guide helpful? Share it with other parents navigating the same challenge. Follow us on Facebook and Twitter, and subscribe to our free newsletter for more practical home networking and family tech guides.