How to set up parental controls on Android in 2026 (step-by-step)

Start with the device itself

Before installing anything, lock down the phone's own settings. This takes ten minutes and stops the most common workarounds kids find in week one.

• Create a separate Google account for your child with their real birthdate — age matters for Play Store and YouTube restrictions.
• Play Store → Settings → Family → Parental controls: set content ratings for apps, games, and movies.
• Settings → Users: disable guest users and secondary profiles.
• Settings → Apps → Special access: lock "Install unknown apps" to off for every browser and messaging app.
• Turn on Find My Device and set a device admin PIN only you know.

Screen time: limits that actually hold

Android's built-in Digital Wellbeing timers are self-service — your child can turn them off. For enforcement you need an app with device-admin rights.

The pattern that works for most families: one daily budget, one bedtime window, and a homework block on weekdays. Three rules, not fifteen. KidsHalo ships these as one-tap templates.

Web filtering: DNS is not enough

Most parental control apps filter with DNS. It's fast and battery-friendly, but it breaks the moment your child switches to a browser with encrypted DNS turned on, or installs a VPN.

Look for an app that combines a local VPN filter with on-device browser URL monitoring. That combination catches both the network request and the page your child actually opened.

• Block by category (adult, gambling, drugs, self-harm) rather than domain-by-domain — the domain list is infinite.
• Block VPN and DNS-changer app installs explicitly.
• Check that the filter still applies on mobile data, not just Wi-Fi.

Location and geofences

Set Location permission to "Allow all the time" and disable battery optimization for your monitoring app — this single setting is why most parents think location "stopped working."

Add two or three geofences (home, school, a grandparent's) and only alert on arrivals and departures. Per-ping alerts train you to ignore the app.

The settings most guides forget

These are the leaks we see most often in real households.

• Safe Mode boot — on many devices it disables third-party accessibility services. Set a device-admin policy that blocks it.
• Second browsers hidden in games and social apps (in-app browsers) — monitor by URL, not by app.
• Chromecast and shared tablets with a signed-in child account.
• Recovery email on the child's Google account pointing to their own address, letting them reset the password.

Tell them what you're doing

Covert monitoring almost always ends badly: the child finds out, and you lose the trust the tool was meant to protect. Show them the dashboard, agree on what triggers a conversation, and revisit the rules every few months as they grow.