Every platform now ships real parental controls free - the work is setting them up coherently across phone, console, TV, and router, and matching them to the kid's age. Here is the map.
Quinn Yoo
Apple: create the child an Apple ID inside Family Sharing, then Screen Time (on their device or yours) gives you app time limits, Downtime (a schedule when only allowed apps work), content age ratings, purchase approval ('Ask to Buy'), and communication limits. Set a Screen Time passcode that is not your phone unlock code, and turn off 'Allow changes' to settings you've locked.
Android: the Family Link app pairs a child Google account to your phone - app approval before install, daily limits per app, bedtime schedule, content filters on Play and Chrome, and location visibility. Both systems take roughly half an hour to set up properly, and both notify the child what is restricted rather than spying silently - which, for what it's worth, is also the healthier dynamic.
Phone rules mean little if the console is wide open: Xbox (family settings app), PlayStation (family management on the account), and Switch (the genuinely excellent Nintendo Switch Parental Controls phone app) all offer play-time schedules, age-rated game limits, purchase blocks, and chat restrictions. The Switch app even enforces a daily limit with a polite on-screen countdown.
Streaming needs its own pass: create actual kids' profiles (Netflix Kids, Disney+ junior mode, YouTube Kids instead of YouTube) and PIN-lock the adult profiles - a kids' profile next to an open adult profile is a speed bump, not a control. Smart TVs themselves carry app-store and rating locks worth five minutes in settings.
Devices multiply, but they all share one chokepoint: the home Wi-Fi. Most modern routers and mesh systems (and all the major ISP apps) offer per-device profiles - group the kids' devices, then schedule internet bedtime, pause the lot at dinner, and apply network-level adult-content filtering. Free DNS filtering (e.g., switching the router's DNS to a family-filter service) blocks the worst of the web for every device at once, including the friend's tablet that visits.
Honest limits of the layer: it does nothing once the device leaves the house or hops to mobile data, and a motivated teenager eventually discovers VPNs. Router rules are the ambient floor - the per-device controls above are what travel with the child.
Under ~8: allow-list everything - curated apps only, no open browser or YouTube proper, co-viewing as the default. 8-12: rating-based filters, time budgets with Downtime, purchase approval, and the beginning of negotiated rules ('weekend gets more'). Teens: shift from blocking to boundaries - time schedules and purchase approval usually stay, content filters loosen, and location sharing becomes a two-way agreement rather than surveillance.
Expect to revisit settings every birthday or so; controls calibrated for a 9-year-old generate either rebellion or ridicule at 13. And write the rules down as a family - the 'media agreement' conversation where limits are explained does more long-term work than any toggle, because the goal is a kid who eventually self-regulates, not one who's merely contained.
Set up well, parental controls reliably do four things: stop accidental purchases, keep age-inappropriate content from ambushing younger kids, enforce sleep, and give you visibility into time spent. What they cannot do is substitute for conversation - group chats, new apps, and content inside platforms (YouTube recommendations, game chat) move faster than any filter, and the research consistently favors engaged mediation over pure restriction.
Two practical postures follow: keep approval-required app installs on as long as feasible (the install moment is your natural conversation trigger), and make the deal explicit - more demonstrated responsibility unlocks more autonomy. Controls that only ever tighten teach circumvention; controls that visibly loosen with trust teach judgment.
Little kids, no. Teenagers - given motivation and time, often partially: VPNs, friends' devices, and factory resets are the classics. Treat circumvention as information (the rule may need renegotiating) and keep the high-value controls - purchases, install approval - which survive most workarounds because they're account-level.
There's no magic number - readiness beats age. Many families land between 10 and 14, often starting with a stripped-down setup: calls/texts, no social media, Family Link or Screen Time from day one. Adding apps gradually is far easier than clawing them back.
Transparency beats stealth: covert reading, when discovered, costs trust the controls can't buy back. Age-appropriate spot-checks that the child knows about - especially for younger kids on new platforms - paired with 'come to me about anything weird, no punishment' tends to surface more real problems than surveillance does.
Most families don't - Screen Time, Family Link, console apps, and router profiles cover the territory free. Paid suites add cross-platform dashboards and social-media monitoring; consider them when managing many mixed devices or specific concerns, after the free layers are actually configured.
