Controlling children's internet access through a home router is one of the most effective digital security measures. Unlike parental control programs on devices, router-level settings work. on all connected gadgets simultaneously: across smartphones, tablets, game consoles, and even smartwatches. There's no need to install additional software or configure each device separately.
Modern routers (even budget models) support built-in features for time limits, website blocking by category or keyword, and daily traffic control. However, manufacturers' interfaces vary: in some cases, the settings are hidden in a section. Parental Control, and somewhere they are called "Child Protection" or "Access Control." In this article, we will analyze 5 working methods Restrict your child's Wi-Fi with step-by-step instructions for popular router brands—from basic time limits to flexible rules for different days of the week.
Important: If your child uses mobile Internet (4G/5G) bypassing your home Wi-Fi, these methods won't work. In that case, you'll need specialized apps like Google Family Link or Kaspersky Safe Kids, but they already depend on the device's operating system. Here we focus exclusively on router settings.
1. Wi-Fi Time Limit: How to Set a Schedule
The easiest and most universal way is to ask time frame, during which the child can use the internet. For example, you can allow access only from 4:00 PM to 8:00 PM on weekdays and unlimited access on weekends. This feature is available in almost all modern routers, including models TP-Link Archer, ASUS RT, Keenetic And Xiaomi Mi Router.
The setup algorithm is the same for most devices:
- 🔧 Go to the router's web interface (usually at
192.168.0.1or192.168.1.1, login/password are indicated on the sticker on the back of the device). - 👤 Find the section with parental controls (may be called
Parental Control, "Access Control", "Child Protection" or "Device Management"). - ⏰ Select your child's device from the list of connected devices (determined by
MAC addressor host name). - 📅 Set a schedule: specify the days of the week and hours when Wi-Fi will be available.
Example for TP-Link:
- Go to
Advanced Settings → Access Control → Access Control Rules. - Click "Add New Rule", select
MAC addresschild's devices. - In the Schedule field, select the days and specify the time intervals (for example, 17:00–21:00).
- Save the rule and activate it.
The device's MAC address is correct|Time zones do not overlap|Rule is enabled (status "Active")|Changes saved (button "Apply")
-->
On routers ASUS the path will be different: Administration → Access Control → Parental ControlHere you can create multiple profiles for different children with individual schedules. And in Keenetic The function is called "Time Limit" and is located in the "Home Network" section.
⚠️ Attention: If a child connects to the router via guest network, the main network's restrictions won't apply. Make sure the device is connected to the main Wi-Fi network.
2. Blocking websites by category or manually
Time restrictions do not protect against harmful content during permitted hours. To block access to dangerous or distracting resources (social media, games, adult content), use filtering by categories or URL blacklists.
Most routers support two strategies:
- 🚫 Blacklist: Only the websites you specify are blocked (for example,
vk.com,tiktok.com). - ✅ Whitelist: Only sites from your list are allowed (for example, school resources), everything else is blocked.
Instructions for Xiaomi Mi Router:
- Open the app Mi Wi-Fi or web interface.
- Go to
Settings → Parental Controls → Website Filter. - Select your child's device and add domains to the blacklist (one per line).
- Activate the filter and save.
On routers Keenetic There's a more flexible system: you can block entire categories of content (social networks, games, torrents) without manually entering URLs. To do this:
- Go to
Home Network → Device Profile. - Select your child's device and enable the "Content Filtering" option.
- Select categories to block (e.g. Social Media, Gambling).
| Router brand | Path to filter settings | Supports categories? |
|---|---|---|
| TP-Link | Advanced settings → Security → Access control |
❌ (manual URL input only) |
| ASUS | Administration → Access Control → URL Filter |
✅ (via AiProtection) |
| Keenetic | Home Network → Device Profile → Filtering |
✅ (12+ categories) |
| Xiaomi | Settings → Parental Controls → Website Filter |
❌ |
| Zyxel | Network → Access Control → Content Filter |
✅ (via Zyxel Security) |
Important: Category filtering only works when your router's DNS service is enabled. If you use third-party DNS (such as Google or Cloudflare), blocking may not work.
3. Limiting Internet speed for individual devices
If turning off Wi-Fi completely isn't an option, but you want to prevent your child from spending hours playing online games or streaming, you can limit internet speed for their device. This will make watching high-quality videos or online gaming impossible, but will allow access to messaging apps and educational resources.
For example, on routers ASUS It's called "Bandwidth Control" (Administration → Local Network → Bandwidth Control). Here you can set the limit in 1 Mbps For a child's device, other users will enjoy full speed.
For TP-Link the path is this:
Advanced Settings → Bandwidth Control → Bandwidth Control Rules.- Add a new rule, specify
IP addressorMAC addressdevices. - Set download/upload limits (eg.
512 kbps(in both directions).
On Keenetic The function is called "Speed Limit" and is located in the device profile. Here you can set not only speed limits, but also traffic priority (for example, prioritize educational sites over games).
⚠️ Attention: Speed limits may interfere with online lessons or video calls. Before setting up, check how much traffic is required for stable operation of learning platforms (e.g. Zoom or YaKlass).
Time Limit|Block Sites|Speed Limit|Don't Use|Other Option
-->
4. Setting up a "child" profile with secure DNS
Not all routers support flexible content filtering, but even budget models can be activated secure DNSThese are special servers (for example, Yandex.DNS Family or CleanBrowsing), which automatically block malicious and "adult" websites at the DNS request level.
How to set up on any router:
- Go to your network settings (usually
Network → WANorInternet). - Find the fields to specify
DNS servers(primary and secondary). - Enter family DNS addresses:
- Yandex.DNS Family:
77.88.8.7And77.88.8.3 - CleanBrowsing (Family Filter):
185.228.168.168And185.228.169.168
- Yandex.DNS Family:
The advantages of this method:
- ✅ Powered by all devices on the network, including guest ones.
- ✅ Doesn't require setting up each gadget separately.
- ✅ Blocks content even in incognito mode browser.
Flaws:
- ❌ Some legitimate websites may be blocked (for example, Wikipedia or educational platforms).
- ❌ No restrictions time access - content only.
5. Using a guest network with restrictions
If your router supports guest networkYou can assign your child a separate Wi-Fi network with its own rules. This is convenient if you don't want to restrict the main network or if your child has friends who also need restrictions.
How to set up on TP-Link:
- Go to
Basic Settings → Guest Network. - Enable the guest network and give it a separate name (for example,
Kids_WiFi). - In the guest network settings, enable "Access Control" and set time limits or a website filter.
- Save and connect your child's device to the new network.
On ASUS the path is this: Guest Network → Enable Guest Network (2.4GHz or 5GHz) → Access Control SettingsHere you can even limit maximum number of connected devices to the guest network.
Benefits of a guest network:
- 🔒 Isolation from the main network (the child will not be able to access shared folders or smart devices at home).
- 🕒 Flexible settings for this network only (does not affect other users).
- 📶 You can limit speed or traffic separately.
⚠️ Attention: Guest networks often have features like UPnP or port forwarding, which may interfere with online gaming or video calling. Check compatibility with the services your child needs.
6. Additional measures: traffic control and notifications
Besides blocking, it is useful track activity child online. Many routers allow:
- 📊 Browse history of visited websites (for example, in Keenetic (This is the "Internet Activity Log").
- 📈 See top consumed resources (social networks, games, videos).
- 🔔 Customize notifications about attempts to access blocked websites.
Example for ASUS with a proprietary system AiProtection:
- Activate
AiProtection → Parental Control. - Select the device and enable the "Block notifications" option.
- Set up notifications to be sent to your email or app ASUS Router.
On routers Keenetic There is a "Reports" function where you can see:
- Time spent online.
- The most visited sites.
- Volume of downloaded/sent traffic.
This data will help you adjust the rules if your child is finding workarounds or spending too much time on distracting resources.
How can a child bypass router restrictions?
The most common bypass methods are:
1. Connecting to mobile Internet (3G/4G/5G) instead of Wi-Fi.
2. Resetting the router settings (if the child knows the admin panel password).
3. Using a VPN or proxy (bypasses DNS filtering).
4. MAC address spoofing devices (if the rules are linked to MAC).
5. Connecting to a neighbor's Wi-Fi (if the networks are not password protected).
To minimize risks:
- Disable access to router settings (change the default admin password).
- Block VPN installation on your child's devices (via phone/tablet settings).
- Regularly check the list of connected devices in the router for unknown devices.
FAQ: Frequently asked questions about restricting Wi-Fi for children
Is it possible to restrict Wi-Fi to just a specific website (e.g. TikTok)?
Yes, almost all routers allow you to block individual domains through blacklistTo do this:
- Find the section in the settings
Website filterorParental Control. - Add addresses to the block list
tiktok.com,www.tiktok.com, as well as domains for mobile traffic (for example,m.tiktok.com). - Bind the rule to
MAC addresschild's devices.
Please note: Some applications (eg. TikTok or Instagram) may use multiple domains to bypass blocking. In this case, it's more effective to block the entire "Social Networks" category (if the router supports category filtering).
How do I restrict Wi-Fi on a router from a provider (Rostelecom, Beeline, MTS)?
Routers from ISPs often have limited functionality, but basic parental control settings are usually available. Instructions:
- Rostelecom: Go to
192.168.1.1, "Parental Controls" section. Here you can set a schedule and block websites. - Beeline: In the web interface (
192.168.0.1) find "Access Control" → "Filtering Rules". - MTS: Use the app MTS Connect or web interface (
192.168.1.1), section "Security".
If the functions are not enough, you can:
- Connect your router in mode
bridge(bridge) and configure restrictions on it. - Use secure DNS (as described in section 4).
What should I do if my child reset the router?
If a child has physical access to the router, he can:
- Press the button
Reset(factory reset). - Change the password for the admin panel if you know the default one (
admin/admin).
How to protect yourself:
- Change the default password admin panels for complex (for example,
W7#pL9!kQ2). - Hide the router in an inaccessible place (for example, in a server rack or on a top shelf).
- Disable the Reset button (on some models this can be done programmatically).
- Create a backup copy of your settings (in the section
System Tools → Backup) and store it on your computer.
If the reset has already occurred, restore the settings from a backup or configure the router again (see section 1).
How to restrict Wi-Fi for a child on iPhone or Android?
If your router doesn't support the required features, you can set restrictions directly on the device:
- On iPhone/iPad: Use Screen time (
Settings → Screen Time → Content Restrictions). Here you can block websites, limit app usage time, and set "downtime." - On Android: Install the application Google Family LinkIt allows you to:
- Set limits on device usage.
- Block installation of new applications.
- View internet activity.
Disadvantage: A child can reset the phone or delete an app if they know the password for their Google/Apple account. For added security, combine these methods with router settings.
Why aren't my router's restrictions working?
If the rules do not apply, check:
- The device is connected to the correct network. Guest network restrictions do not apply to the main Wi-Fi, and vice versa.
- Correct MAC address. Some devices (such as smartphones) may have MAC addresses that change when connected to different networks. Use static MAC or bind the rules to
IP address. - The time on the router is synchronized. If the date/time is incorrect, the schedule will not work. Set up automatic synchronization with an NTP server.
- No conflicts with VPN/proxy. If a VPN is enabled on a child's device, the router's DNS filtering will not work.
- The router firmware has been updated. Older firmware versions may have bugs in parental controls.
If the problem persists, try:
- Reboot the router.
- Reset parental control settings and set them up again.
- Contact the manufacturer's support (indicate the router model and firmware version).