Parental controls on iPhone and iPad

    Apple's own Screen Time tools are more capable than most parents realise, and on iOS they can do things no third-party app is permitted to do. Understanding that division is the difference between a setup that works and one that a child bypasses in an afternoon.

    By Rui Matos · Cybersecurity Editor · Updated 18 September 2026

    Start with Family Sharing

    Create a child account within Family Sharing rather than using an adult account on a child's device. This is what enables remote management, purchase approval and age-appropriate defaults, and it means settings can be changed from your own phone.

    Set the child's correct date of birth, because App Store age ratings and several communication protections depend on it. Accounts created with a false adult age lose those defaults permanently until corrected.

    • Child Apple Account inside your family group
    • Correct date of birth for age-based protections
    • Ask to Buy for purchases and free downloads
    • A Screen Time passcode different from the device passcode

    The Screen Time settings that matter

    Downtime sets hours when only chosen apps and calls work, App Limits caps categories such as social networking or games, and Always Allowed guarantees access to messages or phone regardless of other limits. Content & Privacy Restrictions is the section that blocks adult websites, restricts app ratings and prevents changes to accounts or location settings.

    Set a Screen Time passcode the child does not know, and make it different from the device unlock code. That single detail is the most frequent point of failure in a family setup.

    • Downtime for sleep and homework hours
    • App Limits by category rather than individual app
    • Content restrictions for web, music, films and app ratings
    • Communication Limits and Communication Safety for images
    • Prevent changes to passcode, account and location settings

    What third-party apps add on iOS

    Apple restricts what any third-party app may see on iPhone, so no parental-control product can read messages inside other apps or monitor everything on the device. What good products do offer is cross-platform management, so one dashboard covers an iPhone, an Android tablet and a shared computer, plus clearer reporting and more flexible schedules.

    Many rely on a VPN or DNS profile to filter web content, which is effective for blocking categories but can interfere with other network features and is removable by a determined teenager unless restrictions prevent profile changes.

    Common ways children bypass controls

    The usual routes are knowing the Screen Time passcode, deleting a management profile, using a browser other than the restricted one, switching to a school or friend's device, and creating a second account outside the family group.

    Close them by restricting profile and account changes, allowing only approved browsers, requiring approval for new app installations and periodically checking Screen Time reports for apps you do not recognise rather than assuming the configuration is still intact.

    Age-appropriate expectations

    For young children, strict content filtering and short, clearly scheduled screen time work well, and there is little cost to being restrictive. From around eleven, filtering is best paired with conversation, because children of that age encounter unsuitable content on devices you do not control.

    For teenagers, covert monitoring tends to damage trust more than it protects. Location sharing, agreed limits and open discussion of contact from strangers, image sharing and financial scams generally produce better outcomes than surveillance that will eventually be discovered.

    Beyond the device

    Complement device settings with router-level filtering for the home network and with the parental controls inside individual services: YouTube's supervised experience, streaming profile ratings and each game platform's chat and purchase settings.

    Agree the rules with the child rather than imposing them silently, and make clear that they can tell you about something disturbing without losing the device. A child who fears confiscation will not report the message that matters most.

    Frequently asked questions

    Can parental control apps read iPhone messages?

    No. iOS does not permit third-party apps to read the content of Messages or other apps. Anything advertising that capability is either misleading or requires actions that compromise the device.

    Is Screen Time enough on its own?

    For a single-platform household with younger children, usually yes. Third-party apps add value mainly for mixed iPhone and Android families or for detailed reporting.

    My child knows the Screen Time passcode. What now?

    Change it to a code used nowhere else and unrelated to the device unlock code, then re-check every restriction, because previous settings may already have been altered.

    Does a VPN break parental controls?

    It can. A VPN installed by the child can bypass DNS-based filtering, so block profile changes and unapproved VPN installation in Content & Privacy Restrictions.

    At what age should controls be relaxed?

    There is no fixed answer, but most families reduce filtering through the mid-teens while keeping location sharing and purchase approval, moving gradually from control to agreement.