Almost every router provides a menu called parental controls. It generally contains two things: scheduling when a device may connect, and filtering sites by category.
Both are useful. But there are limits worth knowing before relying on them, because assuming they are stronger than they are creates a false sense of safety.
What a router can do
| Capability | How effective |
|---|---|
| Scheduling access hours per device | Effective |
| Cutting off a specific device at any time | Effective |
| Limiting speed per device | Effective |
| Filtering sites by name | Partly |
| Filtering content inside an app | No |
| Monitoring what a child is watching | No |
The top three work reliably because the router genuinely controls the connection. The bottom three are where people's expectations tend to exceed what the tool can do.
Scheduling: the one that works best
Scheduling access hours is more effective than filtering content, and causes less friction because the rule is clear.
Identify the device to be managed
Open the device list on the router, switch Wi-Fi off on the device in question, and see which entry disappears. Note its MAC address.
Give it a fixed address
Through the DHCP Reservation menu, so the rule does not move to another device when the address changes, guide to local IPs and DHCP.
Set the schedule
Access closed from ten at night until six in the morning, say. A simple rule is easier to respect than an elaborate layered one.
Explain the rule
A child who knows when their access ends rarely argues about it. What causes trouble is being cut off suddenly with no explanation.
Watch out for randomised MAC addresses. Modern phones use a different address per network, and some rotate it periodically. A rule tied to one address can stop applying with no warning. Switch randomisation off for the home network on the managed device, how it works is explained in the guide to Wi-Fi problems on one device.
Site filtering and its limits
Router filtering generally works through DNS, checking the site name requested, then refusing it if it is on a block list.
This approach has two inherent limits:
- It sees names, not content. It can block a site, but cannot sort content inside a service that is permitted.
- It is easily bypassed. Changing the DNS on the device, using a VPN, or simply switching Wi-Fi off in favour of mobile data makes every rule inapplicable.
Some routers offer filtering through a family DNS service. That is a reasonable and free option, but it remains subject to both limits above. How DNS works is explained in the guide to public DNS and privacy.
A limit worth stating openly
Controls on the router only apply on your home network. Outside it, at school, at a friend's house, on a mobile network, not one of your rules travels along.
This is not a reason to skip them. But it explains why the router is best treated as one layer among several rather than as the solution.
Other layers that work in different places:
- Settings on the device itself: screen time limits and app restrictions built into Android and iOS, which travel wherever the device goes.
- Settings on the service account: restricted mode on video platforms and social media.
- An agreement that was talked through: which in the end matters most, particularly as a child gets older.
Separating the children's devices
A tidier approach than managing each device: create a separate network for the children's devices, with its own name and password.
Then the schedule and filtering rules only need setting once for that whole network, without registering every new device. The router's guest network feature can be used for this, how to do it is in the guide to separating a guest network.
The weakness is that a child can move to the main network if they know its password. And that password can be read from any device that has ever connected, as explained in the guide to viewing saved Wi-Fi passwords.
A sensible arrangement
- Start with scheduling, not filtering. Simpler, more effective, and easier to agree on.
- Add DNS filtering if needed, with reasonable expectations.
- Set restrictions on the device, because this is what travels outside the house.
- Talk the rules through rather than installing them quietly.
This order deliberately puts the conversation last as the closing point, not because it matters least, but because it is the only one that keeps working once a child is old enough to get past everything else.
Frequently asked questions
Can router parental controls filter every site?
No. DNS-based filtering only blocks by site name, and cannot see inside pages that are already encrypted. It stops what opens accidentally, not what is sought deliberately.
Can a child bypass router filtering?
Yes, by switching Wi-Fi off and using mobile data, changing the DNS on their device, or using a VPN. Router filtering is therefore best treated as one layer, not the sole safeguard.
Is it better to schedule access or filter content?
Scheduling is usually more effective and causes less friction, because the rule is clear and easily understood. Content filtering is more complicated, more easily bypassed, and more often blocks things it should not.
Should a child be told there are restrictions?
Ideally yes. A known rule is more likely to be respected than a hidden one, and when a child discovers it themselves, which usually happens, the trust is harder to repair than the restriction was worth.
