How to Restrict Internet Access for Kids on Windows

To restrict internet access for kids on Windows, first decide what you want to control: websites in one browser, application use on the computer, or traffic using your home network. These are related tasks, but a rule at one layer does not automatically cover the others.

In short, you can restrict access at three layers: the browser, the Windows account and the network. Kidsplorer works at the browser layer only: it controls browsing inside the Kidsplorer app, and other browsers and apps need Windows or network controls.

A child who needs only a school portal and reading practice has different requirements from a student researching unfamiliar sources. This guide compares four approaches and gives you a way to check the setup from the child’s account. If you already want a small approved list, go to the Windows 11 approved-site walkthrough .

Start with the Windows account and the activity

Use a standard, non-administrator account for the child’s work and keep adult administrative credentials separate. A standard account limits administrative changes; it does not by itself block websites or prevent every installed app from opening. Application restrictions require their own configuration.

Write down the tasks the child needs to complete: school sign-in, a reading lesson, homework submission, or a reviewed game. Also identify programs that should remain unavailable. This turns “put parental controls on the computer” into specific checks you can perform rather than a setting you assume covers everything.

Option 1: Microsoft Family Safety

Microsoft Family Safety provides account-based parental controls. Its web-filtering documentation says filtering currently uses Edge with the child’s Microsoft account signed in. Enabling filtering blocks unsupported browsers; manually unblocking one does not extend web filtering to it.

Family Safety also offers Only use allowed websites. Adding a permitted site is not the same as enabling that mode. Check the setting and test the intended approved-only behaviour on the child’s computer.

This option is worth evaluating if your family wants an Edge-based workflow tied to a Microsoft child account. Review Microsoft’s app-blocking instructions for application controls. Treat browser rules and application rules as separate parts of setup, then test both.

Option 2: Router or DNS filtering

A router’s parental controls can apply configured rules to devices using the home network. DNS filtering acts on domain lookups sent to the configured resolver. For example, Cloudflare’s 1.1.1.1 for Families offers resolver options for malware and adult-content filtering; this does not create a child-specific curriculum list.

Check your router or service’s supported controls rather than assuming every product includes categories, schedules, or an approved-only mode. Decide which devices use those rules and test the child’s browser. Network settings, a different resolver, or a VPN can affect whether traffic uses the intended filtering path.

A home-router configuration does not automatically follow a Windows laptop onto another Wi-Fi network. If the computer is used at a co-op, library, or relative’s home, evaluate what device or browser rules continue to apply there. Network filtering can be one layer of a family setup, with its coverage verified separately.

Option 3: Third-party parental control software

Parental control suites differ in supported Windows versions, browser coverage, filtering, schedules, activity reports, and mobile-device support. Some combine access controls with monitoring; others emphasise particular functions. Check each provider’s current feature list and plan limits before paying for capabilities you need.

Use your required activities as an evaluation checklist. Does the product support the child’s actual Windows account and browser? Can you restrict other applications? Is an allow-list mode available? What happens away from the home network, and can an adult manage exceptions remotely?

Review data collection as carefully as access control. Activity reports, message monitoring, and website blocking are different features with different privacy implications. Read what is collected and retained instead of assuming all parental control software performs the same monitoring.

Option 4: A dedicated allow-list browser

An allow-list browser, also called a whitelist browser, opens destinations an adult has selected and blocks navigation to other domains inside that application. It can suit a child with a predictable set of homework and entertainment sites, provided you can review and maintain those resources.

Kidsplorer’s Windows browser is designed for children ages 6–12. The Free plan lets you evaluate one profile on one device with 10 curated starter sites ready to use. Family adds unlimited sites, schedules, and site and time requests with email approvals. Adults manage the approved list in a web dashboard.

Prepare the list around the child’s activities, review the starter sites, and test each complete lesson. A school service may use a separate sign-in or media domain. Adding its homepage alone may not make the assignment work; approving a whole domain can also open more pages than the assignment requires.

The browser’s rules do not prevent Chrome, another browser, or unrelated Windows applications from being used. Configure wider account and application restrictions separately. A Family-plan Kidsplorer schedule limits availability of Kidsplorer, rather than setting screen-time limits for the entire computer.

Compare the scope before choosing

For a focused homework computer, an approved list may be practical to maintain. For open-ended research, broader filtering may support the work with fewer access requests. If siblings have different needs, evaluate separate profiles and workflows instead of choosing one restriction level for everyone.

Test from the child’s account

After configuration, sign in as the child and complete a normal learning activity. Open the school service, sign in, start the lesson, and follow a required link. Then try a destination intended to be blocked. This checks both usefulness and enforcement.

Check other installed browsers and applications too. If you configured a schedule, test its boundary and confirm whether it covers one browser, an app, or the device. For a laptop used away from home, test the intended restrictions on another network where appropriate.

Return to these checks when the child changes curriculum, a new browser is installed, or the computer’s accounts or network settings change. Keep a clear process for requesting a new learning resource. The allow-list versus content-filter comparison helps assess that ongoing review workload, and Kidsplorer setup covers installation and connecting a profile.