Online Safety for UK Parents: The Honest, Free Guide I Wish I'd Had

I am writing this from a kitchen table strewn with breakfast bowls, a half-built Lego set, and a Nintendo Switch that one of my four kids has tried very hard to hide from me. If you are reading this, you are probably somewhere similar. You want to do right by your children online, but the technology moves faster than any of us can keep up with, the news is full of scary headlines, and most of the "advice" out there is either trying to sell you something or written by people who clearly do not have a six-year-old asking why YouTube put a Skibidi Toilet video next to a Peppa Pig clip.

I am Alex. I have spent fifteen years working in UK broadband, and I have spent the last decade trying, and frequently failing, to stay ahead of what my own kids are doing on their devices. This page is the honest starting point I wish someone had handed me when my eldest first asked for a tablet. Everything I recommend here is free, from a UK government body, a registered charity, or a tool already built into the kit you have already paid for. No sponsored apps. No fear-mongering. No pretending any of this is easy.

If you only have ten minutes, skip to the Quick Wins section. If you want the full picture, read on. And if you get stuck or you spot something I have got wrong, email me directly at alex@broadbandswitch.uk. I read every message.

Why this matters more in 2026

The Online Safety Act 2023 finally moved from paper to enforcement on 25 July 2025. Since then, Ofcom has opened investigations into more than 90 online services and issued six fines, including a £1 million penalty against an adult site operator in December 2025, an £800,000 fine against Kick in February 2026, and a £520,000 fine against 4chan in March 2026. More than half of the top 100 adult sites accessed in the UK now run "highly effective" age checks, and Ofcom's own research found that 47% of children aged 8 to 17 ran into an age check when trying to access age-restricted content after the July deadline, up from 30% before.

That is real progress. But two things have not changed. First, determined kids and teenagers can still find ways round most filters, and VPN sign-ups in the UK jumped enormously in the days after the new rules kicked in. Second, no piece of legislation can replace what actually works in our houses: a layered set of small, sensible defences, plus an ongoing conversation. That is the framework I use in our home, and it is the one I am going to walk you through here.

The Three Layers Framework

Almost every charity and regulator I trust (Internet Matters, the NSPCC, NCA-CEOP, Ofcom) now teaches some version of the same simple model. I think of it as three layers.

Layer 1: Network. This is your home broadband. Your router decides what websites are allowed to load on every phone, tablet, console, and smart TV connected to your Wi-Fi. Switching on your provider's free parental controls is the single highest-leverage thing you can do, and it takes about five minutes.

Layer 2: Device. Apple, Google, Microsoft, Sony, and Nintendo all give you free, built-in tools for managing screen time, app downloads, in-app spending, and content ratings on the actual hardware your child uses. These travel with the device when it leaves your Wi-Fi, which the network layer does not.

Layer 3: Conversation. The most boring layer to write about, the most important one in the long run. Filters fail. Friends pass round phones. New apps appear every term. The thing that genuinely keeps your child safe is feeling able to come and tell you when something has gone wrong without being told off, having their phone confiscated, or being made to feel stupid.

If you only ever do Layer 1, you have done more than most UK households. If you do all three, you are doing as well as anyone reasonably can.

Quick Wins: what you can do in the next 10 minutes

Layer 1: Free parental controls from every major UK broadband provider

Every household ISP listed below offers network-level filtering at no extra cost. I have linked to our deal pages for each provider in case you are also weighing up your broadband contract.

Two important honest notes.

No filter is perfect. All of these can be bypassed by a tech-savvy teenager who switches their phone from Wi-Fi to 4G/5G, installs a VPN, or changes the DNS server on their own device. The filter is your seatbelt, not your airbag. Treat it as one layer.

Mobile data is a blind spot. Your home broadband filter has no idea what your child is doing on EE, O2, Vodafone, or Three mobile data. UK mobile networks do block 18-rated content by default at the network level, but only on cellular, not when the phone joins your Wi-Fi. Layer 2 fills this gap.

For a full walk-through of every UK ISP's settings screen, with screenshots, see my deeper guide: Complete guide to UK ISP parental controls.

Helpful video: BT Broadband parental controls step-by-step (Internet Matters).

Layer 2: Free device-level controls

These are already on the kit in your house. None of them costs a penny.

• Apple Screen Time and Family Sharing (iPhone, iPad, Mac). App limits, downtime, content ratings, location sharing, "Ask to Buy". Set up under Settings > Screen Time. See: Setting up Apple Screen Time properly.
• Google Family Link (Android phones, tablets, and Chromebooks). Approve every app download, lock the device at bedtime, see daily activity reports. Free app from Google. See: Google Family Link: a parent's walkthrough.
• Microsoft Family Safety (Windows 11, Xbox). Spending limits, web filtering in Edge, screen time, location. See: Gaming console parental controls.
• PlayStation Family Management (PS4, PS5). Parent account creates child accounts with age-based defaults. Spending caps and chat restrictions are the two settings most parents miss.
• Xbox Family Settings app. Free standalone app, separate from the main Xbox app. Approves friend requests, manages screen time across Xbox and PC.
• Nintendo Switch Parental Controls app. The single best-designed parental tool in gaming, in my opinion. Daily limits, soft cut-offs, monthly play summaries.

Helpful resource: The NSPCC's free online safety advice is calm, non-preachy and walks through the apps your kids actually use. Their YouTube channel: youtube.com/@nspcc.

Free DNS-based filtering: the "secret weapon"

If you change one technical setting in your house this year, make it the DNS on your router. DNS is the phonebook your devices use to find websites. Switching it to a family-safe one means every device on your Wi-Fi, including ones with no built-in parental controls (smart TVs, kids' smart watches, that ancient Kindle Fire) gets adult content blocked automatically.

Three free options I personally use and trust:

• Cloudflare for Families: 1.1.1.3 and 1.0.0.3 (blocks malware and adult content). Fast, no signup, no logging.
• OpenDNS FamilyShield: 208.67.222.123 and 208.67.220.123. Free, run by Cisco, very mature.
• CleanBrowsing Family Filter: 185.228.168.168 and 185.228.169.168. Also blocks proxies and VPN bypass services.

Step-by-step setup on every UK router brand here: Free DNS-based filtering for UK families.

Layer 3: The conversation

This is the layer I am worst at and the one that matters most. A few things that have actually worked in our house:

• Ask, do not interrogate. "What are you watching?" beats "Who are you talking to?".
• Watch with them, occasionally. TikTok and Roblox both make a lot more sense once you have sat through twenty minutes.
• Agree the rules together. Internet Matters and the NSPCC both have free family agreement templates.
• Make the phone-at-bedtime rule apply to you too. Mine does not, often, and the kids notice.
• When something goes wrong, do not ban the device. If banning is the consequence of telling you, they will stop telling you.

The NSPCC's Talking to your child about online safety page (nspcc.org.uk) is the best free starting point I have found, and Childnet's Family Agreement template is the easiest way to turn the chat into something concrete.

For age-by-age scripts, see my deeper guide: Age-appropriate conversations: how to talk to your kids about online life.

Reporting and getting help: who to contact when something goes wrong

Save these now, before you need them.

• Childline (NSPCC): 0800 1111 or childline.org.uk. For your child to talk to.
• NSPCC Helpline for adults: 0808 800 5000.
• CEOP Safety Centre (ceop.police.uk/safety-centre) to report online sexual abuse or grooming.
• Internet Watch Foundation Report Remove tool (with Childline): for under-18s who fear a sexual image of them is online. iwf.org.uk.
• Report Harmful Content (reportharmfulcontent.com) for over-13s.
• 999 if a child is in immediate danger.

The free UK resources roundup (all verified May 2026)

• NCSC Cyber Aware: ncsc.gov.uk/cyberaware/home. Three random words for passwords, two-factor authentication, the basics every parent should know.
• Internet Matters: internetmatters.org. The most useful single hub. Step-by-step guides for every device and every app.
• NSPCC online safety: nspcc.org.uk/keeping-children-safe/online-safety. The NSPCC/O2 Net Aware standalone guide has been wound down; the same advice now sits inside the main NSPCC site.
• Thinkuknow (NCA-CEOP): thinkuknow.co.uk. Age-banded resources for 4 to 7, 8 to 10, 11 to 13, 14+, plus parents.
• UK Safer Internet Centre: saferinternet.org.uk. Runs Safer Internet Day each February.
• Childnet International: childnet.com. Family Agreement template, film competition, classroom resources.
• Get Safe Online: getsafeonline.org. Government-backed advice on scams, devices, and online life generally.
• Internet Watch Foundation: iwf.org.uk. Report illegal images.
• Ofcom Online Safety hub: ofcom.org.uk/online-safety. Plain-English explanations of the Online Safety Act and what platforms must now do.
• Parent Zone: parentzone.org.uk. Co-runs Parent Info with NCA-CEOP.

What this hub deliberately does not cover

I want to be straight with you. This page does not recommend paid parental control apps (Qustodio, Bark, Norton Family, mSpy and so on). Some of them are genuinely useful. Some are overpriced for what you can already do for free. And a UCL study a couple of years back found a worrying number of monitoring apps quietly hoovered up location, calls, and screenshots in ways the marketing did not disclose. I will write a properly-tested paid-tools guide separately, with the trade-offs spelled out. This hub stays free-only.

This page also does not cover advanced router setups (OpenWrt, Pi-hole, pfSense), school-managed devices, or the safeguarding side for foster carers and kinship carers. All of those are getting their own deep-dives.

What I am writing next (the 10 sub-pages)

Helpful video resources

Below are 3 videos from authoritative sources that complement this guide. Watch them at any time for additional perspective.