How to restrict Wi-Fi access for children via phone: a complete guide to setting up a router

Controlling children's internet access via home Wi-Fi is a pressing concern for most parents. Modern routers allow for flexible restrictions, ranging from completely blocking the network at night to filtering out dangerous websites. The main advantage — all manipulations can be performed directly from your smartphone, without connecting to a computer. All you need is the router's IP address, the admin panel login and password, and basic knowledge of using a mobile browser.

Many people mistakenly believe that such settings require special applications or in-depth technical knowledge. In fact, all modern routers (TP-Link Archer C6, ASUS RT-AX55, Keenetic Giga and others) have built-in parental control tools. Their interface is adapted for mobile devices, and their operating algorithms are standardized. This means the instructions below are suitable for 90% of home appliances released after 2018.

Before you begin, make sure your phone is connected to the same Wi-Fi network you plan to restrict. This is critical: if you try to access the router's control panel via mobile data, access will be blocked for security reasons. Also, make sure you have administrator rights—without them, you won't be able to change the settings.

1. Preparation: How to access router settings from your phone

The first step is to log into the router's web interface. To do this, open any browser on your phone (Chrome, Safari, Firefox) and enter in the address bar Router IP address. Usually it is:

• 🔢 192.168.0.1 - for most models TP-Link And D-Link
• 🔢 192.168.1.1 — standard for ASUS, Zyxel, Keenetic
• 🔢 192.168.8.1 - used in routers Xiaomi And Tenda
• 🔢 10.0.0.1 - a rare option for some provider models

If none of the addresses work, you can find out the correct one in three ways:

1. Look at the sticker on the bottom of the router (usually next to the serial number).
2. In the Wi-Fi settings on your phone: Settings → Wi-Fi → [your network] → Advanced → Router (the path may differ depending on your Android/iOS version).
3. Via the command line (for Android): Install the app Termux and run the command

   ip route | grep default

   — the first IP in the output will be the router address.

After entering the IP address, you will see an authorization window. Here you will need to enter login and passwordBy default this is:

• 🔑 Login: admin, password: admin (for most models)
• 🔑 Login: user, password: empty or password (less often)
• 🔑 Unique combinations for provider routers (for example, Rostelecom or Beeline - usually indicated on the sticker)

⚠️ Note: If you've never changed your default login details, they may have been reset by your ISP during initial setup. In this case, please contact technical support or follow these steps: resetting the router to factory settings (button Reset on the back panel, hold for 10 seconds).

2. Find the parental control section in panels of different brands

Router interfaces vary by manufacturer, but the logic for finding the right section is the same. We've compiled the paths for popular brands—choose yours:

If your model is not in the table, use the universal method:

1. Look for tabs with the following names: Parental Control, Access Control, Firewall or Security.
2. In some routers, the function is hidden in the section DHCP or LAN under the name Client Filter.
3. On Chinese models (for example, Tenda) look for the icon with the image child at the computer or hours.

Important: In routers with firmware OpenWRT or DD-WRT Parental controls are configured through the section Services → Hotspot or Firewall → Traffic Rules. This will require knowledge of working with iptables.

3. Ways to block Wi-Fi for children: what can be restricted

Modern routers offer several control mechanisms. The choice depends on your goals:

• 🕒 Time limit: blocking the Internet at night or on a schedule (for example, from 10:00 pm to 7:00 am).
• 📵 Complete blocking of the device: disable access for a specific gadget (phone, tablet) by MAC address.
• 🌐 Content filtering: Block social networks, games or adult websites by category or keywords.
• 📶 Speed ​​Limit: reducing bandwidth for children's devices to prevent them from clogging up the channel with online games or streaming.
• 🔄 Flexible rules: a combination of the above (for example, block YouTube from 6:00 PM to 8:00 PM, but allow access to educational sites).

The most effective strategy is a combination of time restrictions and content filtering. For example:

• From 8:00 to 16:00 - full access (school time).
• From 4:00 PM to 6:00 PM, access is limited to educational resources (games and social media are blocked).
• From 18:00 to 20:00 there is a speed limit (so as not to disturb others).
• From 8:00 pm to 8:00 am – complete blocking (night sleep).

When setting up, please keep in mind that MAC addresses of devices (Unique identifiers) can be forged. For added security, link rules not only to MAC addresses but also to the IP addresses the router assigns to your children's devices. This is done in the section DHCP → Address Reservation.

⚠️ Note: Children over 12 often know how to bypass simple blocking measures (for example, by resetting their phone's network settings or using a VPN). For them, it's best to combine technical measures with confidential conversations about digital hygiene.

4. Step-by-step instructions: how to block your child's Wi-Fi on a TP-Link router

Let's look at the process using a popular model as an example. TP-Link Archer C6. Similar steps apply to most routers of this brand (TL-WR841N, Archer A7 and others).

Make sure your phone is connected to your Wi-Fi router|Know the router's IP address (usually 192.168.0.1)|Have the administrator's login/password|Write down the MAC addresses of your children's devices (find them in their phone settings)

-->

Step 1. Go to the router control panel (see how to do this). Section 1) and go to Additional settings → Parental controls.

Step 2. Enable the feature by checking the box next to Enable parental controls. Select here operating mode:

• 🔄 Blacklist — only specified devices/sites are blocked.
• 🚫 Whitelist — access is allowed only to specified resources (hard mode).

Step 3. Add your child's device to the control list:

1. Click Add new....
2. In the field Device name Enter a descriptive name (for example, "Petya's Phone").
3. In the field MAC address Specify the address of the gadget (where to get it - see the spoiler below).
4. In the field IP address Select from the drop-down list or enter manually (if you reserved in advance).

Where can I find the MAC address on my child's phone?

On Android: Settings → About phone → General information → Wi-Fi MAC address.

On iPhone: Settings → Wi-Fi → [click the blue "i" icon next to your network] → MAC Address.

If the MAC address is not displayed, turn on Wi-Fi on your device and connect to the network.

Step 4. Set up a blocking schedule:

• 🕰️ Select the days of the week (you can select all or just weekdays).
• 📅 Specify the time interval (e.g. 22:00–07:00).
• 🔄 Repeat for weekends if you need a different schedule.

Step 5. Save the settings with the button Save and reboot your router (optional, but recommended for the changes to take effect).

Done! Now your child's device will automatically disconnect from Wi-Fi at the set time. To test the rule, try connecting to the network from the blocked device during the restricted period.

5. Configuration features on ASUS and Keenetic routers

Routers ASUS And Keenetic offer more flexible tools, including integration with cloud-based content filtering services.

For ASUS (Asuswrt firmware)

Here parental control is implemented through the system AiProtection, developed jointly with Trend Micro:

1. Go to AiProtection → Parental Control.
2. Click Add profile and indicate the child's name.
3. Select a device from the list of connected ones or add it manually by MAC address.
4. In the section Time restrictions Set up a schedule (you can specify different rules for weekdays and weekends).
5. IN Website filtering Select categories to block (e.g. Games, Social Media, Adult Content).

A unique feature of ASUS: the ability to block by keywords in the URL. For example, if you add the word "vk", access to vk.com will be banned even if the site does not fall into the standard categories.

For Keenetic

Keenetic stands out for its simple interface and support individual profiles for each family member:

1. Open Home Network → Devices.
2. Find your child's gadget in the list and click on it.
3. In the section Restrictions select Add a rule.
4. Specify blocking time and content categories (there are pre-configured templates: "School", "Rest", "Sleep").
5. Save the profile and apply the settings.

Keenetic also allows prioritize trafficFor example, you can make educational websites load faster than entertainment websites, even with speed limits.

⚠️ Attention: On routers Keenetic with firmware below 3.6 The website category filtering feature may be missing. Please update the firmware in the section System → Update.

6. Alternative methods: if parental controls don't work

Sometimes a router's built-in tools aren't enough. Let's consider alternative ways to restrict children's Wi-Fi access:

• 📱 Parental control apps:
  • Google Family Link (for Android) - allows you to set time limits on the device and block applications.
  • Qustodio (cross-platform) - filters content, tracks activity, works even outside the home.
  • Kaspersky Safe Kids — blocks dangerous websites and limits the time spent using gadgets.
• 🔧 Change your Wi-Fi password on a schedule:
  • Create two networks: one for adults (with a complex password), one for children (with a simple one).
  • Change the password of the children's network manually or via a script (for example, on routers with OpenWRT).
• 🌍 DNS filtering:
  • Use services OpenDNS FamilyShield (IP: 208.67.222.123 And 208.67.220.123) or CleanBrowsing.
  • Configure them in the section Internet → DNS servers your router.
• ⏱️ Timers on sockets:
  • Connect the router via smart socket (For example, Xiaomi Smart Plug) and set it to turn off on a schedule.
  • A radical method, but effective for small children.

If you have chosen DNS filtering, take into account its limitations:

• ✅ Blocks websites at the network level (works on all devices).
• ❌ Doesn't filter apps (eg. TikTok or YouTube (in the mobile version).
• ❌ Children can bypass the block by changing the DNS on their device.

For maximum effectiveness, combine methods. For example:

1. Set up parental controls on your router (time blocking).
2. Install Google Family Link on the child's phone (app restrictions).
3. Use OpenDNS to filter content.

7. How to bypass blocking: typical tricks children use and how to prevent them

Children quickly learn to find loopholes in restrictions. Here are the most common ways to circumvent them and how to neutralize them:

The most reliable way is a combination of technical measures and trusting relationshipsExplain to your child why parental controls have been introduced and agree on "bonus time" for good schoolwork or helping around the house. Many routers (for example, ASUS) allow you to temporarily suspend restrictions via SMS or via a mobile app.

If your child is tech savvy, consider hardware solutions:

• 🔌 A separate router for children with strict settings and limited functionality.
• 📡 Guest network with a separate SSID and filtering rules (configured in the section Wi-Fi → Guest Network).
• 🔒 Physical blocking: Hide the router in a cabinet with a lock or use a case with a timer (KSafe).

8. Common mistakes and how to avoid them

When setting up parental controls, many people make common mistakes that can ruin their efforts. Here's what to check first:

• ❌ The router firmware is not updated.:

  Outdated software may contain vulnerabilities that allow you to bypass restrictions. Update your firmware in the section System → Update.

• ❌ The MAC address is incorrect.:

  Make sure you copied the address without errors (example of the correct format: 00:1A:2B:3C:4D:5E). On iPhone, the MAC address may be displayed in the format 00-1A-2B-3C-4D-5E - Replace hyphens with colons.

• ❌ Summer/winter time is not taken into account:

  If your router doesn't synchronize time automatically, the blocking schedule may be disrupted. Enable NTP synchronization in System → Time.

• ❌ IP blocking without reservation:

  If the child's device's IP address is not reserved in DHCP, the router may assign it a different address, and the rule will stop working.

• ❌ Ignoring the guest network:

  Children can connect to a guest network if it's not covered by parental controls. Disable it or set up specific restrictions.

Check that the settings are working:

1. Connect to Wi-Fi from your child's device during the blocking period.
2. Try opening any website (for example, google.com).
3. If you have access, double-check the rules or reboot the router.

⚠️ Attention: On some routers (for example, Zyxel Keenetic) after changing parental control settings, it is required forced update of the device listTo do this, go to Home Network → Devices and press Refresh.

FAQ: Answers to Frequently Asked Questions

Is it possible to block Wi-Fi for children without turning it off completely?

Yes, modern routers allow you to flexibly configure restrictions. You can:

• Block access only to certain websites (social networks, games).
• Limit internet speed for children's devices.
• Set time frames (for example, from 10:00 PM to 7:00 AM).

At the same time, other devices (your phones, smart appliances) will work without restrictions.

My child is bypassing the block using a VPN. How can I prevent this?

There are several ways:

1. Block popular VPN service websites (nordvpn.com, protonvpn.com) in parental control.
2. Use DNS servers with filtering (eg. CleanBrowsing or OpenDNS), which block VPN traffic.
3. On routers ASUS V AiProtection → Vulnerabilities Enable VPN blocking.
4. Install a parental control app on your child's phone (for example, Qustodio), which blocks the installation of a VPN.

If your child is tech-savvy, consider hardware solutions—for example, a dedicated router with strict settings.

How to block Wi-Fi on a Rostelecom router?

Routers from Rostelecom (For example, Sagemcom F@st 2804 or Sercomm RV6699) have a simplified interface. Instructions:

1. Go to the control panel at 192.168.1.1 (login/password is usually on a sticker).
2. Go to Wi-Fi Settings → Parental Controls.
3. Add your child's device by MAC address.
4. Set up a lock schedule (called "Sleep Mode" on some models).
5. Save the settings and reboot the router.

If there is no "Parental Control" section, use MAC filtering V Local Network → MAC Address Filter.

Is it possible to set up different rules for weekdays and weekends?

Yes, most routers support flexible schedules. For example:

• On TP-Link: In the parental controls section, select the days of the week and set different times for weekdays and weekends.
• On ASUS: V AiProtection → Parental Control You can create separate profiles for weekends.
• On Keenetic: in the device rules, select Schedule and set different intervals for each day.