If your child uses a Windows computer for school or entertainment, you’ve probably wondered how to limit what they can access online. There are several approaches — each with different trade-offs in terms of setup complexity, reliability, and ongoing maintenance. This guide covers the main options and helps you decide which fits your situation.
Option 1: Microsoft Family Safety (Built-in, Free)
Microsoft Family Safety is the built-in parental control system for Windows. It includes:
- Website filtering by category
- App and game limits
- Screen time scheduling
- Location tracking (on mobile)
- Spending limits for the Microsoft Store
Setting it up: Create a Microsoft child account, link it to your family group, and configure settings at account.microsoft.com. The child must log in to Windows using their Microsoft account.
Limitations:
- Filtering applies only when the child uses Microsoft Edge. Other browsers (Chrome, Firefox) are not covered by default.
- To block other browsers, you need to separately restrict app access in Family Safety settings — which some children figure out how to work around.
- Category-based filtering (not whitelist) — it blocks known bad categories but can’t prevent access to new or uncategorized sites.
- Settings are buried across multiple interfaces (Windows settings, the Family Safety website, the Xbox app).
Who it’s best for: Families with children 10+ who need broad internet access and primarily use Edge. Good for a first-pass restriction that requires minimal setup.
Option 2: Router-Level Filtering
Router-based parental controls filter internet traffic for all devices on your home network. Options include:
- Built-in router controls: Many home routers (Netgear, Asus, TP-Link) include parental control features that can block site categories or specific domains
- DNS-based filtering: Services like OpenDNS FamilyShield or Cloudflare for Families change your DNS settings to route requests through a filtering server
- Dedicated parental control routers: Products like Circle with Disney or Eero with Circle add subscription-based filtering on top of standard routing
Advantages:
- Covers all devices on the home network, not just Windows computers
- Works regardless of which browser the child uses
Limitations:
- Doesn’t follow the child when they use mobile data or a different WiFi network
- Still category-based, not whitelist — gaps exist
- Children can potentially bypass with a VPN on the device
Who it’s best for: Families who want a baseline filter across all home devices, including phones and tablets. Best paired with device-level controls for higher-risk devices.
Option 3: Third-Party Parental Control Software
Apps like Bark, Qustodio, Net Nanny, and Circle offer more detailed control than Microsoft Family Safety, including:
- Monitoring of social media, texts, and email for concerning content
- More granular website filtering
- Screen time scheduling
- Activity reports
Advantages:
- More comprehensive monitoring than built-in tools
- Can cover multiple devices under one subscription
Limitations:
- Primarily monitoring tools — they alert you to problems, not always prevent them
- Monthly or annual subscription cost ($60–$100+/year for full features)
- Still blocklist-based filtering, not whitelist
- Can be defeated by determined children, particularly older ones
Who it’s best for: Parents of children 10+ who want visibility into their child’s online activity across devices and are comfortable with monitoring as part of their approach.
Option 4: Whitelist Browser for Younger Children
A whitelist browser replaces the open browser entirely on a specific computer. Your child can only visit sites you’ve explicitly approved. Everything else is blocked — not by a filter, but by the fundamental design of the browser.
Setting it up:
- Install the whitelist browser on the child’s Windows computer
- Create your parent account and build the approved site list
- Set a browse schedule (hours when browsing is allowed)
- Everything else is managed from your phone
Advantages:
- No gaps — a site that isn’t on the approved list is unreachable, period
- New harmful sites are blocked automatically (they’re not on the approved list)
- Manage from your phone — add sites, approve requests, adjust schedules without touching the computer
- The browser locks at the schedule boundary automatically
Limitations:
- Requires building an initial approved list (15–30 minutes)
- Works best for children who use a predictable set of sites
- Not practical for teenagers who need broad internet access for research
Who it’s best for: Children ages 6–12 on Windows computers used primarily for schoolwork, homework, and a small set of approved entertainment sites.
Which Approach Is Right for Your Child?
| Child’s age | Primary computer use | Recommended approach |
|---|---|---|
| 6–9 | Homework, educational sites, limited entertainment | Whitelist browser |
| 10–12 | Broader schoolwork, some social interaction | Whitelist browser or robust parental controls |
| 13+ | Research, social media, communication | Content filter (router + device level) with monitoring |
For families with multiple children of different ages, using a whitelist browser on younger children’s computers while allowing older children managed open access is a common and effective approach.
The Practical Takeaway
The most reliable way to restrict internet access for young children on Windows is a whitelist browser. It doesn’t depend on a filter database being up to date, doesn’t fail when children switch browsers, and gives you direct control over exactly what sites your child can visit.
Built-in tools and category filters are better than nothing, but they’re reactive — they try to block bad content after it appears. A whitelist browser is proactive: you decide what’s allowed, and everything else is simply unreachable.
Kidsplorer is a whitelist-only browser for children on Windows, managed from your phone. Download free →