Setting up parental controls without starting a war

    Software is the easy part. Controls that survive contact with a real child depend on age-appropriate settings, agreed rules and a plan for what happens when something goes wrong. This guide covers the technical setup and the conversation around it.

    By Rui Matos · Cybersecurity Editor · Updated 18 September 2026

    Start with the built-in tools

    Apple Screen Time, Google Family Link, Microsoft Family Safety and the parental settings inside each games console are free, deeply integrated and sufficient for many families. They cover screen limits, app age ratings, purchase approval and basic web filtering.

    Turn these on first. A paid product is worth adding when you need cross-platform reporting in one place, stronger filtering on a specific browser, social-media monitoring or alerts for concerning content rather than simple blocking.

    What paid services add

    Qustodio is the most complete all-round option, with detailed reporting, time rules per application and good cross-platform coverage. Norton Family is strong on school-focused web supervision and is included with some Norton 360 plans. Bark takes a different approach: instead of blocking, it monitors messages and social platforms and alerts parents to signs of bullying, self-harm or predatory contact, which fits older children better.

    Choose based on the problem you actually have. Blocking tools suit younger children; alerting tools suit teenagers who need independence with a safety net.

    • Younger children: filtering and time limits
    • Pre-teens: app rules, purchase approval, location
    • Teenagers: alerting, agreed rules, privacy respected

    An age-by-age configuration

    Under eight, keep devices in shared rooms, use a child account with a curated app list, disable in-app purchases and enable the strictest content filters. From eight to twelve, add per-app time limits, supervised search, approval for new downloads and a conversation about what to do when something upsetting appears.

    From thirteen, shift from control to visibility. Keep the device out of the bedroom overnight, agree limits together, and switch to monitoring for genuinely serious risks rather than reading every message, which mostly teaches teenagers to hide things better.

    The settings people forget

    Filtering on the home network does nothing on mobile data, so apply device-level controls as well. Do the same on tablets, games consoles, streaming devices and school laptops, and check the accounts of any second household where the child spends time.

    Lock the settings themselves with a PIN the child does not know, disable the ability to delete the management app, and review the configuration after each major operating-system update, which occasionally resets options.

    • Cover mobile data, not just home Wi-Fi
    • Include consoles, tablets and school devices
    • Protect settings with a separate PIN
    • Re-check after major OS updates

    Rules and conversations that make it work

    Explain what is monitored and why. Children who understand the reasoning comply far more often than those who discover controls by accident, and secret monitoring, once found, costs the trust you were trying to protect.

    Agree the rules that matter most: nobody meets an online contact alone, nobody sends images they would not want shared, and telling a parent about something upsetting never results in the device being confiscated. That last promise is what makes early reporting possible.

    Frequently asked questions

    Are free built-in controls enough?

    For many families, yes. Paid services add cross-platform reporting, stronger filtering and alerting, which mainly benefits households with several devices or older children.

    Can children bypass parental controls?

    Determined teenagers often can, through a second browser, a guest account or a friend's device. Controls reduce accidental exposure; agreed rules handle the rest.

    Should I read my teenager's messages?

    Most specialists advise against routine reading and in favour of alert-based monitoring for serious risks, combined with an open agreement about what you will and will not look at.

    Do parental controls work on mobile data?

    Device-level controls do. Router or network filtering stops at the front door, which is why both layers are needed.

    What age should controls be removed?

    Gradually through the teenage years, so that a sixteen or seventeen year old is practising the judgement they will need when the controls disappear entirely.