Impulsec may earn a commission if you purchase through links on this page. Commercial relationships must not determine our recommendations. Read our Affiliate Disclosure.

Parental Control Setup Checklist: Ultimate Smart Guide

Family device protection setup illustrated with generic devices and symbols

Quick answer

Start with the child’s own account and the free controls for their device. Set time, content and purchase rules, then check them while signed in as the child. Add a router filter or paid app only for a specific uncovered device or feature. Home Wi-Fi rules do not automatically follow mobile data, and a parent’s iPhone running Family Link does not supervise a child’s iPhone. Keep a recovery route and review the setup when accounts or devices change.

This parental control setup checklist covers Apple, Android, Windows, shared devices and home Wi-Fi. Use it to choose the smallest workable setup, then verify the permissions and exceptions with your child. For mixed-device choices, see our mixed-device family guide.

Start With The Right Control Layer

Before changing any settings, identify which control layer fits your situation.

The right starting point depends on how many devices your child uses, their platforms, and the time you can dedicate to management.

When Built-In Controls Are Enough

Apple, Google and Microsoft offer free family controls. Begin with the child’s platform and the rule you need, rather than installing several overlapping tools.

If your child uses only one platform, such as an iPhone or a Windows laptop, these tools are often sufficient.

Apple Screen Time manages content filters, app limits, downtime schedules, and communication controls for iPhone and iPad.

Google Family Link covers Android devices and Chromebooks.

Microsoft Family Safety works for Windows devices and Xbox consoles.

The main limitation is that built-in controls do not communicate across platforms.

Apple Screen Time cannot monitor activity on your child’s Android tablet.

When Router-Level Filtering Fills The Gaps

Router filtering can add domain or network rules for devices using that router. Coverage depends on the router, DNS path and device configuration; it does not guarantee control of every app or encrypted conversation.

This is a practical second layer for families with mixed devices.

A family DNS service can block categories of domains through the configured resolver. A router-only setting stops applying when traffic uses mobile data, another Wi-Fi network or a different DNS/VPN path.

Some routers include built-in parental controls to set time schedules and block website categories for specific devices.

Router controls only work at home and do not follow your child to other locations or when using mobile data.

When Parental Control Software Is Worth Paying For

What are the best parental control options? Paid parental control software adds features beyond built-in tools and router filters.

These can include cross-platform dashboards, supported activity reports and location sharing. Social-account alerts depend on the exact child platform, connected account and service; they do not imply complete private-message access.

Tools like Qustodio and Bark are suitable if you manage children on multiple platforms or need more detailed reporting.

Costs are typically monthly or annual per family.

If your child uses a single device on one platform and built-in controls meet your needs, a paid app may not be necessary.


Where Your Rules Can Apply

Account and device rules versus a home router filterDevice and service rules depend on the signed-in child and supported platform. A home router filter depends on using that network and its configured DNS path. Mobile data is outside that router.Child’s accessDevice / accountrulesHome routerfilterHome Wi-FiSupportedplatform / appConfigurednetwork pathMobile dataSupportedplatform / appOutside thishome networkGuest profileRecheck accountsupervisionConfigurednetwork pathCheck the child profile, browser and connection.
Changing the account or connection can change which rules apply. DNS filtering does not inspect every message or page.

Pre-Setup Decisions To Make Before You Touch Settings

Jumping straight into settings often leads to rework. Spend ten minutes on these decisions before starting.

Choose The Parent Account And Admin Access

Here are some things you need to consider when doing your child device setup checklist:

  • Remote family-management services need an authorised parent or guardian account. Local device controls may instead use a protected settings passcode; follow that platform’s requirements.
  • This account controls settings, approves requests, and receives activity reports.
  • Use a parent-controlled email address and secure its recovery options. Enable multifactor authentication where offered.
  • Create a strong, unique password and store it securely.
  • On Apple devices, set up the appropriate Family Sharing parent/guardian role and a protected Screen Time passcode.
  • On Google, the parent signs into Family Link with their Google account.
  • On Windows, use the parent’s Microsoft family account and a separate standard child sign-in. Keep administrator access with the responsible adult.

Map Every Device, Browser, And Network Your Child Uses

Every family should follow an internet safety checklist for parents to help children stay safe online.

  • List every device your child regularly uses, including phones, tablets, computers, gaming consoles, and smart TVs.
  • Note the operating system for each.
  • Record which browsers they use.
  • Many content filters can be bypassed if a child installs an unmanaged browser.
  • Locking down the browser is a separate step from device controls.
  • Consider which networks your child uses.
  • School-issued devices, public Wi-Fi, or connections at relatives’ homes are potential gaps that device-level controls may not cover.

Set Age-Appropriate Rules For Time, Content, And Purchases

Decide on your rules before configuring settings.

Consider screen time limits, content categories to block or restrict, and whether your child can make purchases or install apps independently.

Younger children generally need tighter app controls, simpler content filters, and stricter time limits.

Older children may need more flexible schedules but still benefit from content filtering and spending limits.

Write your rules down before opening any settings menu.


Before changing accounts, confirm the recovery email, backup codes and passcode recovery process. Do not erase a child’s account, school profile, photos or purchases merely to add controls. For a school-managed device, agree the setup with its administrator.

Core Parental Control Setup Checklist For Phones, Tablets, And Computers

The built-in parental control tools on Apple, Google, and Microsoft platforms cover the basics, but each works differently.

Understanding their capabilities will help you configure them correctly.

Apple Screen Time And Family Sharing

Apple Screen Time is the built-in parental control system for iPhone, iPad, and Mac.

It covers a range of controls within the Apple ecosystem.

To get started with your Apple Screen Time setup:

  1. Choose the child’s account

    Use a separate child Apple Account in the family group and update supported devices. Apple’s current OS 27 controls require the family’s devices to use the relevant OS 27 versions and the parent or organiser to update the group’s controls. If unavailable, follow Apple’s previous-version or on-device guidance.

  2. Open the parent’s controls

    On the parent’s iPhone, open Settings, choose Family, select the child and open Screen Time. Protect the parent’s Screen Time settings with a passcode the child does not know.

  3. Set time and content rules

    Choose the time allowances or schedules and the supported apps, age ratings and web-content settings. Older Screen Time versions use different labels, including App Limits and Downtime.

  4. Review contacts and purchases

    Set the supported contact and app/content rules. Configure purchase requests separately; do not assume these cover third-party checkout or existing subscription renewals.

  5. Choose location deliberately

    Enable location sharing only if it meets your family’s needs and explain who can see it. It is a separate decision from setting a daily app limit.

  6. Check from the child’s device

    Confirm the expected account, request path and approved exceptions on the child’s device. Keep the parent passcode and recovery details private.

Set a Screen Time passcode that is different from the device passcode.

Follow Apple’s current setup guidance for the device version. The steps above describe the Family Sharing route, not a promise that every older device has identical menus.

Google Family Link And Android Controls

Family Link supervises supported Android devices and Chromebooks. A parent can manage it from an iPhone, but that does not give a child’s iPhone device-level Family Link controls. Read Google’s compatibility requirements before enrolling an existing account.

It requires the parent to have a Google account and the child to have a supervised Google account managed through the Family Link app.

Here are the steps to doing your Google Family Link setup:

  • Download the Google Family Link app on your phone.
  • Create a supervised Google account for your child or link their existing account.
  • On your child’s Android device, sign in with their supervised account.
  • Use Family Link to set daily screen time limits, approve or block app installs, filter Google Play content by age rating, and manage website access in Chrome.
  • Enable location sharing to see your child’s device location.
  • Review activity reports weekly through the Family Link app.

Android devices also include Digital Wellbeing settings at the device level.

Digital Wellbeing is not a substitute for protected parent supervision. In Family Link, choose Screen time, then Schedules for Downtime or School time on supported Android devices. Google documents Android 7 or later for those schedules; select essential unlimited apps deliberately.

Microsoft Family Safety On Windows Devices

Microsoft Family Safety offers Windows and Xbox account, app and time controls. Its web and search filters currently require Microsoft Edge and the child’s signed-in Microsoft account; they do not filter every browser.

It is managed through the Microsoft Family Safety app and requires a Microsoft account for both parent and child.

To set it up:

  • Add your child’s Microsoft account to your family group at account.microsoft.com/family.
  • Set content filters, web filtering, app blocking and app and game age limits through the Family Safety app or dashboard.
  • Enable activity reporting to receive weekly emails showing your child’s device activity.
  • Set screen time limits and schedules that apply across Windows and Xbox.
  • Use the spending limits feature to control purchases in the Microsoft Store.

Remote management is available through the Family Safety app on your phone.


Set The Rules That Matter Most Day To Day

Configuring the tools is only part of the process.

Setting the right rules is what actually shapes your child’s experience.

These three areas have the most day-to-day impact.

Screen Time Limits, Bedtime, And Daily Schedules

Daily screen time limits and bedtime schedules automate healthy boundaries.

Set a daily limit that fits your family’s routine.

Most built-in tools allow limits by app category, such as social media or games.

Set a downtime or bedtime schedule to block access to non-approved apps during sleep and homework hours.

Apple’s labels depend on the version: older Screen Time uses Downtime; the current controls also describe time allowances and schedules.

In Family Link, use Downtime or School time schedules. Google allows calls during these schedules and documents separate messaging and contact limitations.

On Microsoft Family Safety it appears under screen time schedules.

Always allow essential apps like calling, learning tools, or alarm clocks during downtime.

Web Content Filtering, Search Safety, And Block Lists

Content filtering blocks categories of websites, such as adult content, violence, or gambling.

Search safety tools like SafeSearch filter explicit results.

Key steps for each platform:

  • Apple: Enable Web Content filter under Content & Privacy Restrictions. Choose “Limit Adult Websites” or “Allowed Websites Only” for younger children.
  • Google/Android: Use Chrome managed settings through Family Link to restrict explicit sites and enable SafeSearch.
  • Microsoft: Enable content filters through Family Safety to block adult content across Microsoft Edge.

Most platforms let you add custom block lists for specific websites.

Router DNS filtering adds a domain-level layer for the configured network path. It does not read encrypted messages or replace app-specific safety settings.

App Restrictions, Purchases, And Communication Controls

Controlling which apps your child can install, what they can buy, and who they can contact is essential.

For app restrictions:

  • Configure supported app download and purchase approvals through Apple’s family controls or Google Play. Check which downloads require approval, and review already-installed apps separately.
  • Set age ratings in each app store to limit browsing.
  • Block or restrict specific apps already installed.

For purchases:

  • Disable in-app purchases on Apple devices under Content & Privacy Restrictions.
  • Require approval for eligible Google Play purchases. This does not cover all websites, alternative billing or subscription renewals.
  • Set spending limits in the Microsoft Store through Family Safety.

For communication controls:

  • Use Apple’s Communication Limits to control who your child can call, message, or FaceTime.
  • Review and restrict contact permissions in messaging apps separately, as many third-party apps are not covered by built-in controls.

Cover Shared Devices, Gaming, And Home Wi-Fi

Phones and tablets are only part of the picture.

Gaming consoles, smart TVs, and your home Wi-Fi network each require their own setup.

Parental Controls On Gaming Consoles And Smart TVs

Most major gaming consoles have built-in parental controls for age ratings, playtime limits, and online interactions.

For each console, create a child account or link to a family account:

  • Nintendo Switch: Use Nintendo’s parental controls for supported content, playtime and in-game communication restrictions. Check the exact console and game; a communication restriction is not a blanket guarantee that all online play is disabled.
  • PlayStation: Set up a family account through PSN, create a child account, and use playtime and content rating controls.
  • Xbox: Link to Microsoft Family Safety to manage playtime limits, content age ratings, and spending limits from the same dashboard as Windows.

Smart TVs and streaming services need separate setup.

Most TVs have a PIN-protected parental setting that locks content above a certain rating.

Set these directly in the TV settings menu and in each streaming app (Netflix, Disney+, etc.) separately, as they do not share settings.

Router And ISP Controls For Whole-Home Filtering

Router rules can help with shared devices on the configured network, including those without their own family controls. Review the router’s actual feature and subscription requirements before relying on them.

Many modern routers, such as TP-Link Deco with HomeShield, offer content filtering and time scheduling by device. Log into your router admin panel and look for parental controls or family settings.

You can also change your router’s DNS settings to a family-safe DNS provider like CleanBrowsing or OpenDNS Family Shield. This can block configured categories of domains through that DNS service. It does not guarantee coverage of devices using alternate encrypted DNS or a VPN.

Some ISPs offer parental control features as part of your internet plan. Check your ISP’s account settings or contact support to see what is available.

What Kids Can Still Bypass And How To Reduce It

No parental control setup is completely bypass-proof. Older children often find workarounds.

Common bypass methods include using mobile data instead of home Wi-Fi. Router-only rules do not apply on mobile data. Supported device, account and app controls may still apply; a separately configured device DNS service is another distinct layer.

Kids may use a different browser to avoid restrictions. Lock down the device to approved browsers and disable app installations without approval.

A VPN can bypass DNS and network-level filters. Check which installation and configuration restrictions the child’s platform actually supports. There is no universal parental switch that disables every VPN or alternative DNS path.

Borrowing a friend’s device is harder to prevent with technology. Clear family rules and open conversations are important for this scenario.

Layering controls at the device, app, and network level helps reduce easy workarounds.


Choosing A Paid App If Built-In Tools Fall Short

Built-in tools work well within their own ecosystem but may leave gaps for families using multiple platforms or parents needing more detailed visibility. Paid parental control apps are designed to fill those gaps.

Best Fit For Cross-Platform Families

If your children use a mix of Apple, Android, and Windows devices, no single built-in tool covers everything from one place. Paid apps like Qustodio and Norton Family provide a unified dashboard for cross-platform management.

Qustodio’s current downloads page lists Windows, Mac, iOS, Android, supported Amazon Kindle devices and Chromebooks with Google Play. Its controls differ by platform; Chromebook support does not mean every ChromeOS installation is covered. Norton Family covers Windows and Android primarily, with limited iOS support due to Apple restrictions.

Check platform support carefully before subscribing, as iOS limitations affect what third-party apps can do.

Features To Compare Before You Subscribe

Not all paid apps offer the same features. Compare these key areas before choosing one:

FeatureWhat To Check
Platform supportDoes it cover all your family’s devices and operating systems?
Activity reportsHow detailed are the reports? Can you see specific sites and apps?
Screen time controlsCan you set daily limits and schedules per child?
Content filteringDoes it filter at the app level, browser level, or both?
Location sharingIs real-time location included, or an add-on?
Social media visibilityWhich platforms are supported, and what data is visible?
Remote managementCan you make changes from your phone without touching the child’s device?
Number of childrenIs pricing per child or per family?

Bark combines supported content alerts with screen-time and web-filtering features. Blocking internet access to an app is different from preventing an installed offline app from opening. Compare the exact child platform, app and connection method.

Privacy, Reporting, And Location Trade-Offs

Adding a monitoring vendor can add another data recipient. The actual privacy cost depends on the features, permissions and processing model, rather than whether the app is paid. Review the app’s privacy policy to understand what data is collected, how it is stored, and whether it is shared with third parties.

Activity reporting provides valuable insights but also raises questions about age-appropriate privacy as children get older. Set clear expectations with your child about what you monitor and why.

Location sharing is useful for younger children. For teenagers, consider what level of tracking aligns with your family’s approach to trust and independence.

Most paid apps let you turn location sharing on or off, so you can adjust this as your child grows.


Use our permissions and privacy guide to map each requested permission to the feature you need. Avoid combining two filters or local VPN-based agents without checking vendor compatibility.

Before You Call the Setup Finished

A parent and child checking a phone and tablet beside a router and recovery token.
Check the rules from the child’s device, including exceptions and recovery access.

Check the rules from the child’s normal sign-in, not the parent’s administrator account. Record the expected result and the supported exception for each device. The checks below are a setup plan, not a claim that one tool covers all platforms.

  • Account: restart the device, confirm the supervised child profile and review guest or sibling profiles. Family Link rules do not automatically apply to an unsupervised alternate account.
  • Time: use a short temporary limit on a non-essential app, confirm the request/approval route and restore the intended daily rule. Keep calls and necessary school tools accessible.
  • Web and connection: check a harmless domain you deliberately block in the supported browser. Repeat on home Wi-Fi and mobile data if both are in scope, then undo the temporary block. Do not use harmful content as a test.
  • Purchases: confirm the documented approval settings and the app store involved. Do not make a paid purchase merely to test them; check existing subscriptions and alternative checkout separately.
  • Recovery: confirm the parent can recover the account or passcode and follow the vendor’s documented removal process. Keep backup codes outside the child’s account.
  • School and shared devices: agree exceptions with the responsible adult or administrator. A school-managed profile and a borrowed device may sit outside your family setup.

Conclusion

A useful setup is one you can explain, verify and maintain. Begin with the supported built-in controls, add only a specific missing layer, and review permissions and exceptions whenever the child changes device, account, school routine or app. Review rules together rather than quietly expanding monitoring.

Frequently Asked Questions

These answers cover the practical limits that most often cause a setup to behave differently from a parent’s expectations.

Does every family need a paid parental control app?

No. Start with the free controls for the child’s platform. A paid service is useful only when its documented device coverage, reporting or account features solve a specific gap.

Does a home router filter work on mobile data?

A router-only setting does not follow the child onto cellular data or another network. Supported device, account or app rules may still apply. Device DNS filtering is a separate configuration.

Can I supervise a child’s iPhone with Family Link?

No device-level Family Link supervision is added to a child’s iPhone. A parent can use the iPhone app to manage supported child Android or Chromebook devices. Use Apple’s supported controls for the child’s iPhone.

Why do Windows web filters work in one browser but not another?

Microsoft Family Safety web and search filtering currently requires a supported browser, Microsoft Edge, with the child signed in to their Microsoft account. Check the account and browser rather than assuming a computer-wide web filter.

Does app approval stop every purchase or renewal?

No. Approval scope depends on the app store, account and billing method. Websites, alternative billing and existing subscription renewals can sit outside the approval process.

What should I do if the controls stop working?

Confirm the child’s signed-in profile, device version, permissions, browser and connection. Recheck vendor instructions after updates. Use the parent recovery process and preserve school work, photos and account data rather than resetting the whole device as a first step.