Quick Answer
Use Tether for a compatible TP-Link router, or the Deco app for a Deco mesh system. Create a profile, assign the correct devices, choose the controls your model supports, and test a short restriction on the home network. HomeShield’s advanced features can require a subscription. Router rules do not automatically follow a phone onto mobile data or another Wi-Fi network.
The important first step is finding the right controls for your router, rather than copying a screen from a different TP-Link model. Tether, Deco, HomeCare and HomeShield are related names, but they do not describe one identical app or feature set.
I’ve found Tether’s interface approachable. That makes it a useful starting point for managing a home network, but ease of use should not be mistaken for guaranteed filtering or complete visibility into a child’s device. This guide separates the setup routes and explains what to test before relying on them.
If you already know which app and router you use, start with the profile setup steps. Otherwise, check the short compatibility section first. The aim is a working family rule on the right devices, not buying an upgrade you may not need.
Choose the correct TP-Link app and control system
Tether, Deco, HomeShield and HomeCare are different things
Tether is the management app used by compatible TP-Link routers. Deco mesh systems use the Deco app. HomeShield and HomeCare are feature packages available on particular hardware; they are not interchangeable names for Tether.
Check the model number and hardware version on your device, then match them to its regional support page. Also check its operating mode and firmware. Do not assume two routers from the same Archer or Deco family have identical controls. The app should show the options your particular device supports.
| Management app or interface | Feature system | Start here and check |
|---|---|---|
| Tether | HomeShield on a compatible router | Family or HomeShield. Features depend on the model, firmware, region and plan. |
| Deco app | HomeShield on a compatible Deco system | Parental Controls. Do not copy Tether menus or assume identical options. |
| Tether, Deco or a supported browser interface | HomeCare on supported hardware | Use the model’s HomeCare instructions. A HomeShield subscription table does not describe HomeCare. |
| Tether or a supported local browser interface | Basic router controls | Tools → Parental Controls where documented. Do not assume advanced HomeShield features exist. |
TP-Link’s Tether setup guide separates basic routers from its HomeShield/HomeCare route. Its HomeShield setup guide covers both Tether and Deco. Match the guide to the menus actually present on your device.
Understand what a router can control
A router rule applies to traffic passing through that router and to the devices assigned to the rule. It is useful for a child’s tablet, laptop or console on the home network. It does not automatically stop a phone using cellular data, another hotspot or a different network.
Nor does blocking internet access lock every app. Downloaded videos, offline games and other local functions can remain available. If your goal is a device bedtime rather than an internet bedtime, you need a device-level rule as well.
Text version: rules can apply to an assigned device using the configured home router. Cellular and other Wi-Fi do not automatically follow this router’s rules. Offline apps and downloaded content can remain usable when internet access is paused.
Prepare the account and devices
Use the parent’s or network administrator’s account to manage the router. A child profile is a grouping of devices and rules, not a reason to give a child the administrator password. Keep the account and router login secure, and explain the intended limits to the family before enabling them.
For an app-based cloud setup, use the TP-Link account associated with the network. Do not assume that any family member who can see the Wi-Fi network has permission to edit it. On Deco, the owner and manager roles differ; the owner can control manager access, and supported privileges vary. TP-Link explains these roles in its owner and manager account guide.
Before making a profile:
- Connect the child’s device to the home network you intend to control.
- Identify it in the router’s client list. Compare its current Wi-Fi address with the device’s network settings if the name is unclear.
- Give the client an understandable name, such as “study laptop”. Do not guess that every unknown phone belongs to the same child.
- Check the router’s local time and time zone before setting schedules.
- Note which features are available without a trial or paid plan on this exact router.
Install the current Tether or Deco app through your device’s official app store, using the app linked from TP-Link’s support pages. An old minimum version quoted in another guide is not a reliable compatibility check today. Avoid similarly named third-party “parental control” downloads.
Remote management is a separate capability. Check that the model supports it, the router is bound to the correct account, and it remains online. Do not assume profiles can be restored onto a replacement router simply because the old router used a cloud account.
Set up profiles and assign devices
HomeShield in Tether or Deco
Open the appropriate app and select your router or Deco network. In TP-Link’s current Tether HomeShield example, open Family and tap Get Started; in Deco, open Parental Controls. Create a profile, enter its name and the requested age, choose an avatar, and continue to device selection. Menus can differ on other supported versions. Review any suggested filters instead of accepting the age preset as a guarantee that everything else is safe.
Select the devices that should follow that profile. Start with one device you can test, then add the others once the rule behaves as intended. A shared family computer may need a different arrangement because a router usually sees the device, not which person is currently using it.
Text version: identify the actual device; assign the correct profile; choose filtering, bedtime, allowance and pause separately; save and reopen; run a short safe test on the home network; reverse the test and confirm normal access returns.
After saving, reopen the profile and check its device list. A successful save is not enough if the wrong laptop or an old address was selected. Keep the parent’s management device outside the test profile so you can reverse the test easily.
HomeCare and basic Tether routers
If your device uses HomeCare, follow the HomeCare section of its app or manual. TP-Link describes HomeCare’s profiles, time allowances and filtering, but that does not establish that every newer HomeShield option is included.
For a basic router following TP-Link’s current Tether instructions, start at Tools → Parental Controls, add a profile, select the available filters and timing options, and assign the devices. Save the profile, then verify it against a connected client.
If the menu is missing, stop and check compatibility and the current firmware documentation. Repeatedly reinstalling Tether will not add a feature the router does not support. Access-point operation and an upstream ISP router can also change which device actually manages traffic; follow the manual for your network arrangement.
Managing from a PC
Some routers expose parental controls in their local browser interface. Use the router’s documented local management address and an authorized administrator login while connected to the appropriate network. Look under the parental-control section, often within Advanced settings.
This is not a universal replacement for the Deco or Tether app. Do not assume that visiting tplinkcloud.com gives a PC access to all parental profiles. TP-Link’s web-interface instructions show different interfaces with different filtering capabilities.
Configure website filters without overpromising
Start with the categories appropriate for the child, then add specific sites that need a different rule. Review the result together where practical. An age preset is a starting point, and category classification can produce both missed sites and false positives.
For an individual website, use the address format requested by that interface. TP-Link’s current troubleshooting guidance recommends a full site address, with additional relevant domains or subdomains where needed. Typing a word such as “gambling” is not a promise to block every page about that subject.
Test a harmless site you control or normally use before trying a sensitive category. Confirm both that the intended site is blocked and that an ordinary permitted page still works. You do not need to expose a child to unsuitable content to test whether the rule is taking effect.
Blacklists and allowlists are model-specific
A blacklist blocks specified destinations while leaving other traffic available. An allowlist permits specified destinations and blocks the rest. Do not look for an allowlist option in every TP-Link profile: the supported mode depends on the router and interface.
TP-Link’s browser guide includes an older blacklist/whitelist interface and a profile-based interface that supports a blacklist. It also warns of an easily misread setting: on one interface, Internet Access Time describes when the filtering rule operates, not a universal window during which all access is allowed.
An allowlist can also break school sites that load sign-in, video or other resources from additional domains. Test required learning services before relying on a strict rule. Keep a clear way for the child to ask for a false positive to be reviewed.
App blocking is not the same as disabling an app
On supported HomeShield configurations, app-traffic controls can restrict named apps or categories. The available list and the features unlocked by a plan vary. A router may interrupt an app’s online features without removing the app, locking the device or stopping offline use.
Avoid treating a website block as proof that every function of the matching app is blocked. Apps can use several services and connection paths. If an app-level restriction is important, test it on the actual operating system and combine it with suitable device settings.
Set bedtime, daily limits and pauses separately
These controls solve different problems. A bedtime is a scheduled period without internet access. A daily allowance limits the counted online time. Pause is a manual interruption. Do not assume one button resets, extends or overrides the other rules.
Bedtime and recurring schedules
Choose a schedule the family understands and confirm the days it applies to. For example, a school-night cutoff and a weekend exception are separate decisions, not a preset that fits every household.
On current HomeShield documentation, an everyday bedtime is distinct from flexible weekday/weekend or custom-day schedules, which can require Advanced Parental Controls. Check the lock icons and the plan shown in your app before expecting those options to save.
After saving a schedule, try a short test period while an adult is available to check it. Verify the stop and restart behavior, then restore the intended times. Also check that another family member’s device remains unaffected.
Daily time allowances and rewards
Treat the router’s time counter as network activity, not a precise measure of attentive screen use. Background traffic can consume an allowance even when a child is not looking at the screen. TP-Link specifically identifies background activity in its parental-control troubleshooting guide.
Choose an initial allowance with this limitation in mind. Look at which devices share the profile and whether background syncing makes the reported time surprising. Do not infer that a child has been secretly using a device solely from that counter.
Where your HomeShield plan supports it, use its explicit reward or extra-time function when you want to add an allowance. Turning a pause off is not the same operation. A time-up or request screen is also not guaranteed to appear inside every app or encrypted web connection.
Pause and resume
Use the profile’s pause control when you want to interrupt the assigned devices temporarily. Check the confirmation and the affected devices before applying it to a shared family profile.
When you resume, the other applicable limits can still matter. If access remains blocked, inspect the bedtime, remaining allowance and any other scheduled restriction instead of repeatedly toggling pause. Test this interaction before depending on it during homework or a family activity.
Understand reports, subscriptions and privacy
Reports can help you spot patterns, but they are not a complete recording of everything a child reads, writes or sees. Available categories, history, summaries and app information vary by model and plan. Encrypted content and device activity should not be treated as automatically visible to a router administrator.
Review the reports with a specific purpose: deciding whether a schedule works, investigating a mistaken block, or identifying a device that was assigned incorrectly. Avoid promising continuous monitoring, every visited page, exact app use or an alert for every event.
What is free and what may cost extra?
The Tether and Deco apps are management tools; downloading the app does not unlock every feature. TP-Link’s current US HomeShield comparison separates Basic parental controls from Advanced Parental Controls. Basic lists functions such as pause, specific-site blocking, category filtering and bedtime. Advanced adds functions such as time allowances, app controls and more detailed reporting on compatible devices.
Security+, Total Security and Advanced Parental Controls are not names to use interchangeably. HomeCare also has its own feature context. Check the exact product, region, trial terms, renewal price and cancellation terms shown before subscribing. This guide does not assume that a trial remains free or that a plan advertised for another router will apply to yours.
If you are comparing an optional upgrade, check the features and renewal terms shown in your own router’s app against the job you need it to do. A missing feature is worth investigating; it is not an automatic reason to upgrade the router or buy a subscription.
Troubleshoot the specific failure
A device is online but its profile says offline
Compare the address currently used by the device on this Wi-Fi network with the address assigned in the profile. A changed private or randomized address can make a familiar device appear as a new client. A generic device name alone is not enough to identify it.
Correct the verified assignment first. Do not add every unknown address to the child’s profile. If address changes keep defeating the assignment, review that device’s privacy setting for this trusted home network and follow the relevant device and router documentation. Do not blanket-disable address privacy for public Wi-Fi or unrelated networks.
The schedule starts at the wrong time
Check the router’s own time zone, date and daylight-saving behavior, not just the phone clock. Use the system-time menu documented for your model. If the discrepancy appeared after a daylight-saving change, TP-Link recommends checking the network equipment’s time synchronization; a restart may be part of its model-specific troubleshooting.
Recheck the schedule’s days and whether it runs across midnight. Test a brief interval, then restore the family schedule. Avoid changing several unrelated settings at once, which makes the cause harder to identify.
A website or app still works
Confirm that the device is on the intended network and belongs to the right profile. Check that the block is active now. A phone that moved to mobile data is no longer testing the router rule.
Next, check the exact site address, relevant subdomains and any category or app setting. Cached or offline content may remain visible even though new network access is blocked. For a false positive, adjust the specific rule rather than disabling all protection as the first step.
A router-level rule is not a guarantee against every VPN, proxy or alternate connection. Keep the family’s expectations realistic and use device-level controls where the requirement extends beyond the home router.
A setting is missing, locked or cannot be saved
Verify the model, hardware version, current operating mode, firmware, app and account role. Then check the feature’s plan requirement. These are different problems, and buying a subscription will not fix a wrong account or unsupported device.
Record the exact symptom and the device involved before contacting support. Do not factory-reset a working network as the first troubleshooting step; a reset can remove settings and disrupt other people without addressing the cause.
When to add device-level parental controls
Keep the router as the home-network layer. Add device-level controls when the goal is to restrict offline apps, maintain limits on mobile data, manage app installation or apply rules to a particular child on a shared device.
Start by checking the operating system’s family controls and the needs of the child. If you want a dedicated service, compare Qustodio options for the exact devices in use. Its own product information describes screen-time, filtering and activity tools, but capabilities and costs still depend on the platform and plan.
Bark is another option readers may want to compare for different monitoring needs; the related Bark comparison below is a separate decision, not a prerequisite for setting up TP-Link. Do not assume that stacking several tools produces “full coverage” or makes every private message readable.
Discuss what information will be collected, who can see it, and what the child should do when a restriction gets in the way. Secret monitoring is not a substitute for a workable family agreement. Choose the least intrusive tool that meets the agreed need, and review its permissions before installation.
My recommendation: test one profile before expanding it
Start with the router and app you already own. Identify one device, apply one clear rule, and verify that the restriction and its reversal work on the intended network. Then add the remaining devices and schedules carefully.
I would use Tether or Deco for manageable home-network boundaries, while keeping its visibility and connection limits in mind. Add a paid feature only for a specific supported need. For restrictions that must follow the device away from home, use a separate device-level approach rather than expecting the router to do that job.
If restrictions need to work away from your home network, compare the app-blocking options supported on your child’s phone.
Frequently asked questions
How do I set up TP-Link parental controls on an iPhone?
Install Tether for a compatible router or Deco for a Deco mesh system. Sign in with the authorized management account, select the network, create a profile and assign the correct devices. Choose the available filters and timing rules, then test them on the home network. The parent’s iPhone is the controller; it does not need to be part of the child’s restricted profile.
How do I configure TP-Link parental controls on Android?
Use the matching Tether or Deco app, select the router or network, create a profile and add the child’s connected devices. Menu names depend on the model and software. If a device is not recognized, compare its current address with the assigned client before changing its per-network privacy setting. Globally turning off address randomization is not a required first step.
Can I manage TP-Link parental controls from a PC?
Some routers provide parental controls through their local browser administration interface. Use the address and login method in your exact model’s documentation. The options can differ from Tether, and this is not a universal Deco-management method. Do not assume tplinkcloud.com offers a PC portal for all parental profiles.
Why are my TP-Link parental controls not working?
Check the connection path, device assignment, active schedule, remaining allowance and supported features. A changed device address can break the profile match; an incorrect router clock can shift a schedule. Mobile data, another network or offline content can also explain why an app appears to work. Identify the specific failure before changing privacy settings or resetting equipment.
Does TP-Link charge for parental controls?
Some parental-control features are included on supported routers, while HomeShield’s Advanced Parental Controls can require a subscription. Available functions and trials vary by model and region. Check the plan shown in your app, including its renewal and cancellation terms. Do not apply a HomeShield price or feature table automatically to HomeCare or a basic router.
Where can I download the TP-Link parental control app for iOS?
Use the official app-store link from TP-Link’s support documentation: Tether for compatible routers, or Deco for Deco mesh systems. Check the app publisher and device compatibility before installing. There is not one separate universal “TP-Link parental control app” that unlocks every router’s features.
Sources and image credits
Technical guidance checked 7 November 2026. Model-specific documentation and the current app remain the reference when an interface differs.
- TP-Link: parental controls in Tether.
- TP-Link: HomeShield parental controls in Tether and Deco.
- TP-Link: browser-interface parental controls.
- TP-Link: parental-control troubleshooting.
- TP-Link: Deco owner and manager roles.
- TP-Link: HomeCare features.
- HomeShield and Qustodio feature descriptions were checked against their current official product information.
The two diagrams are original Impulsec explanatory graphics, not app screenshots or test results. The featured illustration is conceptual and does not show actual app software.
Share this article
