Setting Up Parental Controls on an iPhone, Step by Step

FE By Fawnio Editorial Team, Family safety and learning-tech reviewers at Fawnio.
Primary-source guide · Updated August 12, 2026

Before you start: the switch that makes the rest work

Most "the parental controls do not work" complaints come down to one setting being off. Open Settings, tap Screen Time, tap your child's name if you are managing their device, and turn on App and Website Activity. Apple is explicit about what happens if you leave it off: doing so "turns off reporting, Downtime, App Limits, and Always Allowed".

In other words, with that single switch off you get no usage data and the limits you carefully set do nothing at all.

While you are there, set a Screen Time passcode, and make it different from the passcode that unlocks the phone. A child who knows the unlock code and finds it also opens Screen Time can simply undo whatever you set.

The five settings that do the work

Screen Time bundles several tools that people talk about as if they were one feature. They are not, and knowing which does what saves a lot of frustration.

Filtering websites

Open Content & Privacy Restrictions and turn it on, then go to App Store, Media, Web, & Games and choose Web Content. Apple's own instruction for the middle setting reads: "Select Limit Adult Websites, tap Add Website below Never Allow, and enter the URLs of the websites you want to block." So the filter and your own block list live in the same place, and you can add specific sites on top of the automatic filtering.

There is also an unrestricted option and a stricter mode that allows only websites you approve, which suits a younger child.

Site-by-site blocking is a bigger topic than one step, and it works differently on Android. Our guide to blocking inappropriate websites on a phone covers both platforms and what filtering does not catch, and web content filtering for families explains the router and DNS layer for a whole household.

Two menus, two different jobs

This is the single most confusing part of iOS parental controls, and getting it wrong is why parents think they blocked an app and then find their child using it.

Allowed Apps & Features is for Apple's own apps. Switching one off does not remove it: Apple describes it as "temporarily hidden from your Home Screen until you turn it back on". App Limits is where everything your child actually downloaded is controlled. Apple's path is: App Limits, then Add Limit, then choose one or more categories. To reach a single app rather than a whole category, Apple says to "tap the category name to see all the apps in that category, then select the apps you want to limit". Then set the time and, if you want different rules on different days, use Customize Days.

The default Apple warns about itself

Here is the sentence that changes how you should set all of this up, in Apple's own words:

"By default, Screen Time limits can be ignored once reached."

A time limit, out of the box, is closer to a notification than a lock. That is not a bug and Apple is not hiding it, but it does explain the very common experience of setting a one-hour limit and discovering a child has used four. Apple's answer is Downtime with Block at Downtime switched on, which requires a Screen Time passcode.

Apple describes the two states clearly: with Block at Downtime on, restricted apps "can't be opened during downtime, they appear dimmed with an hourglass icon", and with it off "you see a reminder that it's downtime, but you can choose to continue using the apps".

Read this precisely: Block at Downtime governs downtime hours. Apple's "can be ignored" line is a warning about the default behaviour of limits generally. We are not going to tell you that switching on Block at Downtime makes every App Limit unskippable, because Apple does not say that. What is fair to conclude is narrower and still useful: a passcode plus enforced downtime is the difference between a rule and a request.

If the numbers look wrong rather than missing

Once reporting is on, two Apple behaviours explain most confusion about the figures. Activity is sorted automatically into categories such as Entertainment and Creativity, and anything that does not fit a category can appear grey on the summary screen. And Share Across Devices decides whether you are looking at one device or all of them: with it on, settings and usage are shared across the iPhone, iPad and Mac signed in to the same Apple Account and you see combined activity, while with it off "each device maintains its own separate Screen Time settings". A child with an iPad is the usual reason a phone's numbers look impossibly low.

For reading the reports properly, including why Android calls this something else entirely, see how to check screen time.

What iPhone parental controls cannot do

The built-in tools are genuinely good at deciding what a child can reach and for how long, and they are free. What they do not do, and do not claim to do, is show you what is being said. Screen Time reports app names and durations, not conversations. If your worry is a specific danger inside messages, bullying, a grooming approach, talk of self-harm, none of the settings above will surface it.

Third-party monitoring apps aim at that gap, and they do reach further on an iPhone than the common shorthand suggests. It is worth being precise, because "you cannot monitor anything on an iPhone" is not what the products actually document. Taking Bark as the example, its own coverage table marks Snapchat, Instagram, TikTok, Discord and Roblox as apps it can block on an iPhone but not scan, while it does scan roughly a dozen others there, including WhatsApp, Kik, GroupMe, Reddit and Twitter/X. The catch is the route: Bark states that on iOS only WhatsApp and Kik work without login credentials, and that "for all other platforms, your child's login credentials are required". We list which apps fall on which side in what Bark does and does not monitor, and our Bark review covers the plans honestly, including the iPhone limitation.

Families who want full message coverage generally end up choosing an Android device or a phone with monitoring built in, which is what our Bark Phone review works through.

If the household is not all Apple, the other platforms have their own free equivalents and they do not behave the same way. On a Chromebook or Android, supervision locks SafeSearch and turns Incognito off; on Windows the built-in web filter only applies in Microsoft Edge. Our guide to the parental controls already on your child's device covers each one and where it stops.

Why the limit exists, and what to do if an app offers to remove it

This ceiling is a policy decision by Apple, not an oversight, and knowing the history tells you how to judge any app that promises to get around it. Some parental control apps used to take control of a child's phone using MDM, or Mobile Device Management, the system built for companies to administer staff devices. In a 2019 statement Apple set out what that means in practice: MDM "gives a third party control and access over a device and its most sensitive information including user location, app use, email accounts, camera permissions, and browsing history".

Apple's position on consumer apps doing this is blunt. It calls the practice "incredibly risky" and "a clear violation of App Store policies" for a private, consumer-focused app business, and it warns that research has shown MDM profiles "could be used by hackers to gain access for malicious purposes". Apple gave the developers involved 30 days to comply and removed the apps that did not, and it names Screen Time, the tool this whole guide walks through, as the reason it built an alternative in the first place.

The practical rule for a parent. If an iPhone app asks you to install a configuration profile on your child's phone to unlock monitoring it otherwise cannot do, that is the mechanism above, and you should understand that you are handing that company standing access to the device rather than just to the app. That is a real decision, not a formality.

It is also why an honest iPhone monitoring app has a smaller feature list than an Android one, and why any product promising full iMessage or Snapchat content on a standard iPhone deserves a hard look.

One fair distinction, because the same word covers two different things. Everything above is about a consumer app installing management onto a phone you already own. A phone sold to you as a managed device is a different arrangement: the Bark Phone, for example, is built on Samsung's Knox management at kernel level, which is what lets it do things no app on a standard iPhone can.

That is not a loophole in Apple's rule, it is a different product shape, and it is the honest reason families who want full message coverage tend to end up on Android or on a purpose-built phone.

See what Bark monitors, and where it stops on iPhone

A sensible order to do this in

1. Turn on App and Website Activity, or nothing below will work.
2. Set a Screen Time passcode that is not the device unlock code.
3. Turn on Content & Privacy Restrictions and set Web Content.
4. Use App Limits for the third-party apps that actually eat the day.
5. Set Downtime, and turn on Block at Downtime so it holds.
6. Check the activity summary a week later and adjust, rather than guessing up front.

If you are still deciding whether a child is ready for a phone at all, our guide on what age a kid should get a phone works through the readiness signals, and parental controls by platform covers the separate per-app settings inside YouTube, Snapchat and the rest.

Frequently asked questions

Every step, setting name and quoted sentence on this page was taken from Apple's own iPhone user guide and support documentation, verified on July 29, 2026. Where Apple's wording is exact it is quoted; where we describe an option in our own words, that is because the exact label was not visible in the source. How we work is on our methodology page.