Apple's Screen Time is the most comprehensive built-in parental control system on any consumer device — but it's also the most commonly misconfigured one. The settings are buried, the passcode setup is counterintuitive, and there are several well-known bypasses that render everything useless if you don't know about them.
I'm a cybersecurity professional and father of three. This guide covers the complete setup — including the settings most parents skip, the bypass tricks kids use, and how to manage everything remotely from your own iPhone using Family Sharing.
This guide applies to iOS 26 (current as of 2026). Most settings have been consistent since iOS 18 — this also applies to iPad (iPadOS).
Before you start
Have these ready:
- Your child's iPhone or iPad in hand (or plan to repeat steps on theirs)
- Your own Apple ID password (for Screen Time recovery — keep it private from your child)
- 15–20 minutes uninterrupted for the first full pass
- Optional: a second parent device with Family Sharing if you manage remotely
If you use DNS filtering (home-network website blocking) on your router, you can add that later — Screen Time still matters for apps and time limits.
1. Setting Your Screen Time Passcode (Do This First)
This is the step most parents skip, and it's the reason their Screen Time settings don't hold. The Screen Time passcode is separate from the device passcode — it's what protects the parental control settings themselves from being changed by your child.
Set a Screen Time passcode your child doesn't know
On your child's iPhone, go to Settings → Screen Time → Use Screen Time Passcode. Create a 4 or 6-digit passcode. This must be different from the device passcode. If they're the same, your child can change all Screen Time settings just by knowing how to unlock the phone. After creating it, iOS will ask for your Apple ID — this is for passcode recovery, so use an Apple ID your child doesn't have access to.
The Screen Time passcode can be recovered via Apple ID
When setting the Screen Time passcode, iOS links recovery to your Apple ID. If your child knows your Apple ID email and password, they can reset the Screen Time passcode themselves. Use an Apple ID your child doesn't have access to, or a dedicated family management Apple ID. Change your Apple ID password if there's any chance your child knows it.
2. Family Sharing — Manage Remotely From Your Phone
Family Sharing is Apple's system for managing child devices from your own iPhone. It's the right way to set up Screen Time for most families — it lets you adjust settings, view usage reports, and approve extension requests without touching your child's device.
Set up Family Sharing
On your iPhone, go to Settings → [Your Name] → Family Sharing → Add Member → Create Child Account. Create an Apple ID for your child (if they don't have one) or invite their existing account. Children under 13 must have an account created by a parent through Family Sharing — they cannot create their own.
Enable Screen Time for your child from your iPhone
After adding your child to Family Sharing, go to Settings → Screen Time → [Child's Name] on your iPhone. You can now configure all Screen Time settings remotely and view their usage reports — without needing to physically access their device. This is the most secure setup because the controls are managed entirely from your account.
Enable Ask to Buy
With Family Sharing active, enable Ask to Buy for your child's account. Every time they try to download a new app or make a purchase — even free downloads — you receive a notification on your phone and must approve it before it proceeds. This includes free apps, which closes the gap of children downloading apps without permission.
3. Content & Privacy Restrictions
Content & Privacy Restrictions is the main enforcement layer for what your child can do on their iPhone. It controls app ratings, explicit content, app purchases, account changes, and more.
Enable Content & Privacy Restrictions
Go to Settings → Screen Time → Content & Privacy Restrictions and toggle it on. Everything below requires this to be enabled.
Set app rating limits
Under Content Restrictions → Apps, set the maximum allowed app rating. Options are: Don't Allow Apps, 4+, 9+, 12+, and 17+. Apps rated above your limit won't appear in the App Store and can't be downloaded. For children under 12, set this to 9+ or 12+ depending on maturity.
Restrict explicit music, movies, and books
Under Content Restrictions, set:
Music, Podcasts & News: Clean (removes explicit tracks)
Movies: PG or PG-13 depending on age
TV Shows: TV-PG or TV-14
Books: Clean
Apps: As set above
Restrict what can be changed
Under Content & Privacy Restrictions → Allow Changes, set the following to "Don't Allow" to prevent your child from modifying their own setup:
Passcode Changes — prevents changing the device passcode
Account Changes — prevents signing out of iCloud or changing Apple ID settings
Cellular Data Changes — prevents turning off cellular data to avoid your carrier's parental controls
Volume Limit — optional, protects hearing
Do Not Disturb While Driving — prevents disabling
Verified across every device?
CyberDaddy confirms your Screen Time settings are active, checks for common misconfigurations, and alerts you when settings change — including after iOS updates that sometimes reset restrictions.
4. Web Content Filtering
Safari's web filtering in Screen Time is the most commonly misconfigured setting — and the most important one for keeping inappropriate content off your child's phone.
Set Web Content to "Limit Adult Websites"
Under Content & Privacy Restrictions → Content Restrictions → Web Content, choose "Limit Adult Websites." This enables Apple's built-in adult content filter, which automatically blocks known adult sites and enables SafeSearch on search engines.
For younger children (under 10), consider "Allowed Websites Only" instead — this shows a curated list of approved sites and blocks everything else. You can add specific sites your child needs.
Block VPN apps — they bypass web filtering completely
If your child installs a VPN app (an app that hides internet traffic — bypasses your content filter), all web filtering is bypassed — the VPN encrypts traffic before it reaches Apple's filter. Under Content & Privacy Restrictions → Allowed Apps, make sure you're not allowing VPN app installation. Also, set Content Restrictions → Apps to a rating that excludes most VPN apps (most are rated 17+, so setting the limit to 12+ prevents installation). For a full guide on this topic, see: How to Block VPN Apps on Your Kid's Phone.
Restrict the ability to install other browsers
Safari's content filtering only applies to Safari. If your child downloads Chrome, Firefox, or any other browser, they can bypass the web filter entirely. With Ask to Buy enabled, they need your approval for any new app download. Additionally, you can explicitly block specific browsers using Always Blocked websites, though the more effective solution is Ask to Buy.
Block the ability to add websites to Always Allowed
When "Limit Adult Websites" is active, there's a toggle for your child to add sites to an "Always Allowed" exception list within Safari. Make sure Content & Privacy Restrictions is enabled with a passcode — without the passcode, your child can add any site to the allowed list directly from Safari.
5. App Limits and Categories
App Limits let you set daily time limits per app or per category. When the limit is reached, the app is blocked until midnight — or until you approve an extension from your phone.
Set limits for Social Networking and Entertainment
Go to Settings → Screen Time → App Limits → Add Limit. Select categories or specific apps. Recommended starting limits:
Social Networking: 30–60 min/day for tweens
Entertainment: 1–2 hours/day
Games: 1–2 hours/day
TikTok / Instagram: Set individual limits if your child has them
The "One More Minute" button is a bypass
When an app limit is reached, iOS shows a screen with a "One More Minute" button that grants 60 more seconds — no passcode required. After that minute, the limit screen reappears. Older kids will use this repeatedly. For stricter enforcement, disable the ability to request more time in the app limit settings, so extension requests must come through you via Family Sharing.
Block app deletion
Under Content & Privacy Restrictions → iTunes & App Store Purchases → Deleting Apps, set this to "Don't Allow." This prevents your child from deleting apps — which also prevents them from deleting apps you've set limits on and then reinstalling them to reset the timer.
6. Downtime Scheduling
Downtime is the most effective tool for bedtime enforcement. When Downtime is active, only apps you explicitly allow (plus phone calls) are available — everything else is locked until Downtime ends.
Schedule daily Downtime
Go to Settings → Screen Time → Downtime → Turn On Downtime. Set a schedule: for example, 9:30 PM to 7:00 AM on school nights. You can set different schedules for each day of the week, so weekends can be more flexible.
iOS 18+ allows you to schedule Downtime to start at the same time every day or customize by day of the week. Use Every Day with a consistent bedtime for young children; use Customize Days for teens.
Set Always Allowed apps
Under Settings → Screen Time → Always Allowed, add apps that should remain available even during Downtime — typically: Phone, Messages (if you want them able to reach you), and any homework or safety apps. Do not add social media or games to the Always Allowed list.
Without the Screen Time passcode, Downtime can be ignored
When Downtime activates, iOS shows an "Ignore Limit" option that requires the Screen Time passcode to bypass. If you never set a Screen Time passcode, your child can tap "Ignore Limit for Today" and bypass Downtime without any restriction. This is the single most common Screen Time setup mistake.
7. Communication Limits
Set who your child can communicate with
Under Settings → Screen Time → Communication Limits, you can restrict who your child can call, text, and FaceTime. Options include: Contacts Only (only people in their contacts app can reach them), Contacts & Groups with at Least One Contact, or Everyone. For children under 12, set this to Contacts Only during both allowed hours and Downtime.
Restrict who they can add to Contacts
Under Content & Privacy Restrictions → Allow Changes → Contacts, set this to "Don't Allow." This prevents your child from adding strangers to their contacts to bypass the Contacts Only communication limit — since once someone is a contact, they can communicate freely.
Managing all this manually is exhausting.
CyberDaddy monitors your family's iOS setup, flags when Screen Time settings change (they sometimes reset after iOS updates), and gives you one dashboard for iPhones, Android phones, gaming consoles, and your home network.
8. Bypass Tricks and How to Close Them
Screen Time is one of the most-bypassed parental control systems in existence. Older children have discovered several reliable techniques. Here are the ones you need to know about and how to close each one.
Restoring from iCloud can reset Screen Time settings
A child who knows how to factory reset their iPhone and restore from a previous iCloud backup can potentially restore to a backup taken before Screen Time was configured. Prevention: under Content & Privacy Restrictions → Allow Changes → Account Changes, set to "Don't Allow". This prevents your child from signing out of iCloud, triggering a restore, or accessing iCloud backup settings.
Passcode can be reset with the parent's Apple ID
If a child knows your Apple ID and password, they can tap "Forgot Passcode?" on the Screen Time settings page and reset it using your Apple ID credentials — then reconfigure Screen Time themselves. Fix: use a strong, unique Apple ID password your child doesn't know, and enable two-factor authentication on your Apple ID so any reset attempt sends a notification to your trusted devices.
Communication limits only apply to Apple's native apps
Screen Time's Communication Limits apply to Phone, Messages, and FaceTime — Apple's own apps. They do not apply to third-party messaging apps like WhatsApp, Snapchat, Discord, or Instagram DMs. If these apps are installed, your child can communicate with anyone through them despite communication restrictions. Control app installation via Ask to Buy and app rating limits, and review installed apps regularly.
A child with device access can navigate to Screen Time settings
Any user can navigate to Settings → Screen Time and view the current settings — they just can't change them without the passcode. However, this visibility means your child knows exactly what you've set and which limits apply when. This is fine — transparency about rules is healthy — but means a determined child may look for specific gaps in your configuration. Regular reviews of your Screen Time setup are good practice.
Some iOS updates have historically reset Screen Time settings
Multiple iOS versions have had documented bugs where Screen Time settings — particularly the passcode — were reset during major system updates. After any iOS update, verify that Screen Time is still enabled and that Content & Privacy Restrictions are still on. Adding this as a recurring check (or using CyberDaddy to monitor it automatically) prevents gaps from forming silently.
iCloud Private Relay silently bypasses all DNS filtering
Here's a gap Apple doesn't advertise: their own privacy feature can quietly disable the filter you set up. iCloud Private Relay (Apple's built-in privacy feature that accidentally breaks content filters) (available with iCloud+ subscriptions) routes Safari browsing and DNS queries through Apple's relay servers — completely bypassing any DNS filtering (the filter that blocks bad websites before they load) you've set up at your router or on the device itself. NextDNS, CleanBrowsing, OpenDNS (DNS filters — software that blocks websites before they load) — all of them are invisible to a device using Private Relay.
To disable it: Settings → [Child's Apple ID] → iCloud → Private Relay → Off. Then lock it: under Content & Privacy Restrictions → Allow Changes → Account Changes → Don't Allow prevents your child from re-enabling it. If you use DNS filtering as a protection layer, this step is non-negotiable.
Rotating MAC addresses break router-level device controls
Kids with newer iPhones can make their phone look like a new, unrecognized device on your home network — which breaks router-level filtering. iOS enables Private Wi-Fi Address by default, which uses a randomized (and periodically rotating) MAC address (a way phones disguise themselves on the network) for each network. If your router's parental controls identify devices by MAC address — as many Eero, Circle, ASUS, and Netgear routers do — your child's iPhone may appear as an unknown or different device after each rotation, causing the controls to stop applying.
To disable for your home network: on the child's iPhone, go to Settings → Wi-Fi → tap the (i) next to your network → Private Wi-Fi Address → Off. The device will use its real hardware MAC address on that network consistently. Do this for any network where you have router-level parental controls. Lock the setting by setting Wi-Fi changes to "Don't Allow" under Content & Privacy Restrictions → Allow Changes.
Frequently Asked Questions
iPhone is only one device your kid uses.
Tablets, gaming consoles, smart TVs, and your home router all need their own parental controls. CyberDaddy gives you one dashboard to set up, verify, and monitor all of them — including automatic alerts when something changes after an iOS update.
Not ready yet? Get the free setup checklist by email: