Parental Controls Are On. So Why Can My Child Access Anything?
Why most setups give a false sense of security.
Most parents I speak to have parental controls switched on somewhere. And most of their children can still access pretty much anything they want.
That is not a criticism. It is just how these tools work in practice. I see it in homes around Marple all the time. A reasonable setup on paper, some genuine effort put in, but gaps that a curious ten-year-old will find very quickly.
I am a parent of two teenagers myself, 13 and 15, and I will be honest. I do not have it completely nailed either. I understand how these tools work, and it is still a moving target. If you are finding it hard, that is normal. This is genuinely difficult to get right.
There is also more focus on this than ever. New online safety rules are coming in, and platforms are under pressure to tighten things up. In practice though, most of that has not closed the everyday gaps parents actually worry about.
So what actually works?
Not sure if this applies to you? Three quick questions:
- Can your child install apps without you knowing?
- Do they use their device privately in their bedroom overnight?
- Are messaging apps effectively unrestricted?
If the answer to any of these is yes, there are gaps in your setup.
The three layers, and why most families only use one
Most setups fail because they rely on one layer and assume it covers everything. It does not. Each layer has blind spots, and in most homes those blind spots overlap.
Layer 1: Router-level controls
This is where people usually start, and it is a reasonable first step. Broadband providers like Sky and BT offer built-in filtering that can block adult content, gambling sites, and similar categories.
The appeal is simple. Switch it on and it applies to everything connected to your home network.
The limitations show up quickly. As soon as a child switches to mobile data, it does nothing. It does not properly cover most apps. And it often blocks harmless sites while missing things you would expect it to catch.
It is a useful safety net, but nowhere near enough on its own.
Layer 2: Device-level controls
iPhone Screen Time and Android Family Link give much more control. App limits, content restrictions, blocked installs, usage reports. They have improved a lot and are worth using.
But they rely on children behaving exactly how the system expects.
In practice, a child might log out and create a new account. They might access something through a browser instead of the app. Messaging apps are not meaningfully controlled either way. And another device, like a friend's phone or a school Chromebook, bypasses everything entirely. On iPhone, some of this can be reduced by locking account changes in Screen Time, but it is often left open.
These are useful tools. Set them up properly, but go in with realistic expectations.
Layer 3: Behaviour
This is the part most guides skip because it is not a setting you can switch on. But it is the most important layer.
No parental control can see or manage everything your child is doing online. That is not something that will be fixed in the next update. It is just how the technology works. A child does not need to hack anything. They just need to use things slightly differently, and most do sooner or later.
What matters in practice
Who are they talking to?
Most risk does not come from websites. It comes from messaging apps like WhatsApp, Snapchat, and Discord. Increasingly, it also comes from AI chatbots that behave like friends. I keep a general awareness of which apps my kids are using and who they are in contact with. Not constant monitoring, just awareness.
When are they using devices?
Late-night use in a bedroom is a very different risk environment to daytime use in a shared space. This is the one I feel most strongly about, and the one I am most consistent with at home.
Do they know what to do if something goes wrong?
If they see something upsetting or someone contacts them, will they tell you? That matters more than any setting.
Clear boundaries and trust do more work here than any filter. That is easy to say and hard to keep consistent.
Where things go wrong in practice
These are situations I see regularly.
"We've blocked everything... but they're still on TikTok."
Usually this means they are using a friend's account, accessing it through a browser, or switching to mobile data.
"We've set time limits... but they don't seem to work."
Usually this means logging out and creating a new account, switching devices, or using content that was already downloaded.
Messaging apps are the biggest blind spot
WhatsApp, Snapchat, and Discord are not meaningfully controlled by router filters or screen time tools. You can limit when they open, but not who your child is talking to.
Gaming consoles are part of this as well. An Xbox, PlayStation, or Nintendo Switch is not just for games. Voice chat with strangers is easy to access, often with fewer controls in place.
If something goes wrong, it is far more likely to happen in a private message than on a public website.
VPN bypass
Some older children install VPN apps to get around router-level filtering. A VPN routes traffic externally so your broadband controls cannot see it. It sounds technical, but it is just an app download.
The way to reduce this is to restrict app installs at device level, which is exactly why layering matters.
What actually works
There is not a perfect solution. But there is a setup that works reliably for most families.
Combine the layers
No single tool works on its own. A sensible setup includes router filtering, properly configured device controls with a passcode your child does not know, and clear household rules alongside both.
Focus on the highest-risk situations
Trying to block everything does not work and just creates workarounds. Focus on where problems actually happen: private messaging, unknown contacts, and late-night use.
Make devices visible
One of the most effective changes is also the simplest. Devices charge outside bedrooms overnight. It removes the highest-risk window entirely. It is the rule we stick to at home.
Keep it simple
The more complex the system, the more likely it is to fail or be ignored. A simple setup you understand will always outperform a complicated one you do not.
A reasonable setup for most families
A clear starting point:
- Broadband content filtering switched on
- Screen Time on iPhone or Family Link on Android set up with a separate passcode
- App downloads restricted to require approval
- No private device use overnight
- An ongoing conversation about what to do if something does not feel right
That last point matters as much as the rest.
The honest conclusion
Parental controls are useful. They are worth setting up properly.
But they are not a complete solution. Treating them as one creates a false sense of security, and that can be worse than having no controls at all because it stops the conversation happening.
This is hard. The technology changes quickly, kids are inventive, and there is not a point where you can switch off and assume it is handled. I do not think any parent, me included, has fully cracked it.
The aim is simpler than that. Reduce risk, stay involved, and make sure your child knows they can come to you if something goes wrong.
No app replaces that.
Want a second pair of eyes on your setup?
If you are not sure whether your home setup has gaps, I can help you review broadband filtering, device controls and the practical rules around them.
The aim is not to lock everything down perfectly. It is to reduce the obvious risks and make the setup simple enough to maintain.
