Skip to content
GuideEvergreen guide

Set Up the Internet for Your Kid Before They Can Argue Back

The filters, settings and house rules that work on a seven-year-old, plus the one sentence that does more than all of them combined.

By Cal Brennan · Fitness6 min read
Set Up the Internet for Your Kid Before They Can Argue Back

Autoplay is the whole problem in one word.

Your six-year-old asks for a video about backhoes. Video one is backhoes. Video two is backhoes. Video four is a grown man screaming at a camera in a bedroom, and your kid is still sitting there because the screen kept feeding him and nobody told it to stop. He didn't search for it. He didn't disobey you. The machine just kept going.

That's the whole shape of little-kid internet safety. At this age you're not teaching comprehension, because a seven-year-old can't hold the concept of a stranger who spent four years building an audience of children. You're building an environment. The reasons come later, around eleven or twelve, when he can actually carry them. Right now you're the guardrail, and guardrails don't explain themselves.

Take an hour this weekend. Do it in layers, outside in, and each layer catches what the last one missed.

Layer one is the network, and it takes ten minutes

Log into your router. Change the DNS servers. That's it.

Cloudflare's family service at 1.1.1.3 blocks malware and adult content and costs nothing. OpenDNS FamilyShield does the same thing at 208.67.222.123. Either one works at the network level, which means every device on your Wi-Fi gets it. The Nintendo Switch. The smart TV. The old iPad in the kitchen drawer that your kid has apparently known about for eight months.

Two things nobody tells you. First, if your router runs a guest network, it may be handing out different DNS, and your kid's tablet will happily connect to it. Set the guest network too, or turn it off. Second, a phone on cellular data isn't on your Wi-Fi at all, so none of this touches it. Home filtering is a floor, not a lid.

Also worth knowing: modern browsers can route their own DNS around yours. It's called DNS-over-HTTPS and it's on by default in some browsers. An eight-year-old will never find it. A clever eleven-year-old with a friend who has an older brother absolutely will, which is why layer one is the beginning and not the end.

Layer two is the device, and this is where most of the work lives

On an iPad, go to Settings, Screen Time, Content and Privacy Restrictions. Turn it on. Set a passcode that's not your phone unlock code and not your kid's birthday. Under Web Content, choose Limit Adult Websites. Under App Store purchases, set installing apps to Don't Allow, so nothing new arrives without you.

On Android and Chromebooks, Google's Family Link does the same job and is free. It locks SafeSearch, controls app installs, and lets you see what's actually being used.

On a Switch, the Parental Controls app is separate from the console and free, and you want it because it's the only clean way to shut off communication with people you don't know.

Then the one setting parents skip: turn off autoplay. In YouTube Kids it's a toggle in settings. On the TV app it's a toggle too. Autoplay off converts a screen from a faucet into a cup. Your kid finishes the backhoe video and has to ask for another one, which means a human being is back in the loop.

While you're in there, set a bedtime downtime that's an hour earlier than you think you need.

Layer three is the room

Devices charge in the kitchen. Not the bedroom, not the bathroom, not under a pillow. This is the single rule that holds up longest, all the way through the teenage years, and it's easiest to establish when your kid is five and doesn't have an opinion yet.

Screens face out. If the tablet is in the living room with the screen pointed at the wall, you don't have a family device, you have a private one with witnesses.

And make a habit of sitting down next to them for two minutes at random. Not an inspection. Just sit, watch whatever's on, ask a dumb question about it. Kids who are used to a parent appearing over their shoulder don't develop the flinch.

The thing filters can't do

Your filter doesn't run at Grandma's house. It doesn't run on the school Chromebook. It doesn't run on the tablet at the sleepover, where a nine-year-old with a YouTube account and no supervision is the actual delivery mechanism for almost everything you're worried about.

So say this out loud to your kid, and say it more than once:

"If you ever see something on a screen that scares you or makes you feel weird, come tell me. You will never be in trouble for telling me. Not ever."

Then when it happens, and it will, keep the promise. This is the hard part. Your kid walks in at 9:40 p.m. and reports something ugly he saw at a friend's house, and your gut wants to interrogate, confiscate and deliver a speech. Don't. Say thank you. Say you're glad he told you. Ask what he saw, in his words, without your face doing anything dramatic. Tell him it wasn't his fault and it wasn't good, and that his brain will settle down about it.

Handle it that way once and you've bought yourself a reporting channel that stays open until he's seventeen. Handle it the other way once and you've closed it, and you won't be told about the next one.

Games are where the strangers actually are

The risk at this age is almost never a search bar. It's chat.

Roblox and Minecraft servers and any game with voice comms put your child in a text box with adults. Roblox has account restrictions and a parent PIN, and you should set both and lock the age-appropriate content setting. Turn voice chat off. On the Switch, use the parental controls app to block communication with non-friends.

Then tell them the flat rule, in words a seven-year-old can repeat: we don't talk to people we haven't met in real life, and nobody online gets our real name, our school, or our town. Repetition beats explanation. You're not making an argument, you're installing a reflex.

One more, and it's about you

You're posting them. The bath photo, the meltdown video, the first-day sign with the school name on it. Every one of those is a piece of your child's public record that they didn't consent to and can't take down.

A kid deserves the dignity of deciding who sees them. Lock your accounts. Crop the school name out. Skip the bathtub entirely, and skip the potty-training story, and skip the video of them crying that you thought was funny. In about nine years a twelve-year-old is going to scroll your profile and find out exactly how you talked about them, and you want that to be a good afternoon.

Where this goes wrong

Over-locking backfires. A kid raised in a sealed box hits eleven with zero tolerance for friction and no practice at closing a tab himself. Around nine or ten, start narrating instead of only blocking. "That thumbnail is trying to make you click it. See the arrow and the giant face? That's a trick." Name the manipulation out loud. That's the transferable skill, and no filter teaches it.

And get to know who's in your house. The most common source of hard content for a young child isn't a predator. It's an older sibling's friend with an unsupervised phone and bad judgment.

Set the router this weekend. Then go be the reason your kid tells you things.

Cal Brennan

Fitness

Strength coach. Trains fathers, tradesmen and desk workers, which means programs that survive a bad week.

Watch

Watch how it's done

Picked for this article.

From channels we rate. Plays on YouTube.

Howfinity

How to Set Up Parental Controls on iPhone or iPad

Family Tech

Setting Up Your Child's First Android Phone | Parental Control Setup