The Complete UK ISP Parental Controls Guide for 2026
I have spent the last fifteen years working in UK broadband and the last ten of those raising four children whose preferred response to any new safety tool is to immediately try and break it. This guide is the article I wish someone had handed me when my eldest first asked for a tablet, and it is the longest single piece on UK ISP parental controls I could find anywhere on the internet. It needs to be long, because the truth is messy.
The good news is that every major UK broadband provider now gives you free, network-level filtering as standard. You have probably paid for it for years without realising. Once it is switched on, every device that connects to your home Wi-Fi (your child's phone, the family iPad, the smart TV, the games console, the cheap tablet from Christmas) gets automatic protection from the worst stuff on the open web. It takes about five minutes per provider to set up and it costs nothing.
The honest news is that no ISP filter is perfect, and some of them are quite a lot less perfect than the marketing suggests. Every provider in this guide has gaps. Some of those gaps are the laws of physics; some are deliberate compromises to keep adults' lives convenient; and some are simply features that have not been built yet. Where the gaps matter, I will tell you, and I will tell you what to do about them.
This is the first deep-dive sub-page in the BroadbandSwitch.uk online safety series, which sits beneath the main parents' hub. If you are starting cold, read the hub first. If you are here because you specifically want to lock down your broadband, you are in the right place.
What ISP parental controls actually are
Almost every parental control system in this guide works the same way underneath the marketing. When a device on your home network tries to load a website, it first asks a thing called a DNS server (think of it as the internet's phone book) to translate the website name into a numerical address. Your broadband provider runs its own DNS server, and your router is configured by default to ask that server every time. So when your son's phone asks "what is the address of badsite.example?", your provider's DNS server gets to decide whether to answer truthfully or to redirect the request to a friendly "Sorry, this site is blocked" page.
This is what people mean by network-level filtering. Nothing has to be installed on your child's device. You do not need an app on every phone. The router, the kit your provider sent you, just quietly applies the rules to every device that connects to it. When you toggle a category in the My BT or My Sky app, your provider updates the master list of blocked categories on its DNS servers, and within a few minutes (sometimes up to two hours) the new rules apply across your house.
Three practical consequences flow from this. First, network-level filtering is genuinely brilliant for catching the obvious stuff. If a device tries to load a site that is on your provider's adult content list, it gets blocked, no questions asked, regardless of what app initiated the request. Second, it is completely useless once a device leaves your Wi-Fi. The minute your daughter's phone joins her friend's mum's Wi-Fi or switches to mobile data, your home filter has no idea what she is doing. Third, anyone who knows how to change the DNS server on their device (which is roughly thirty seconds of work and the answer is the first hit on Google) can opt out of the filter entirely without you noticing.
I will come back to that bypass problem later. For now, the key takeaway is this: ISP parental controls are a layer, not a wall. They are the cheapest, easiest, highest-leverage layer most UK families can put in place, and they are absolutely worth doing. Just do not assume they are doing more than they actually do.
I cover the deeper technical side, including how to add free family-safe DNS like Cloudflare 1.1.1.3 to your router, in the free DNS filtering deep-dive.
The five-minute rule for getting started
If you only do one thing this week, do this. Open your provider's app. Find the parental controls or family safety section. Switch it on at whatever the recommended setting is for your kids' ages. Save. That is the entire job.
Every other detail in this guide (categories, watershed timings, per-device groups, allow lists) is gravy on top of that single five-minute action. The biggest gap in UK home internet safety is not parents who chose the wrong setting. It is parents who never opened the app at all because they thought it would be complicated. It is not. Even the worst-designed provider apps in this guide can be navigated in five minutes by someone who has never touched a router setting in their life.
With that out of the way, let us go through every UK provider, what they offer, exactly how to set it up, and how honestly to assess what each one is and is not protecting your family from.
BT Parental Controls
BT Broadband
BT has been doing network-level parental controls for over a decade and it shows. The product is well-documented, the categories are sensibly named, and the whole thing is genuinely free for any BT Broadband customer. My oldest two have been growing up on BT broadband and I have been testing this in anger.
What you get
BT Parental Controls works at the network level on every device that connects to your BT Hub (or any router using BT's DNS). You choose between three preset filter levels, plus a fully customisable option:
- Light: blocks pornography, obscene/tasteless content, hate, self-harm, dating, alcohol, drugs and tobacco. Roughly equivalent to a "block the worst stuff but keep the internet usable for older teens" setting.
- Moderate: everything in Light, plus nudity, weapons and violence, gambling, social networking and certain file-sharing categories.
- Strict: everything in Moderate, plus media streaming, fashion and beauty, gaming, search engines, sex education and other broader categories. Genuinely strict. I would not run this for an older teen but it is appropriate for a primary-age child's tablet.
- Custom: pick and choose individual categories. Most experienced parents end up here once they have hit a category they need to allow back in.
You can also set a separate Homework Time profile that adds an extra layer of blocking (typically social media, games, school cheating sites) at scheduled times of day. That is a genuinely useful feature, and if you have a child who is supposed to be doing maths homework but mysteriously keeps ending up on YouTube Shorts, it is worth twenty minutes of your evening. The Filter Times feature lets you decide when the main parental controls apply, which is a polite way of saying "we will turn them off after the kids' bedtime so the adults can browse normally".
How to set it up
- Go to bt.com and sign in to My BT with your BT ID and password.
- Scroll to the bottom of "Your Homepage" and find the Manage your extras button.
- Click Manage BT Parental Controls. If you have never set them up before, BT will activate them automatically on the Light filter.
- Select Manage Settings under BT Parental Controls.
- Open the Change filter levels tab. Move the slider to Strict, Moderate, Light or Custom. Click Save changes.
- If you want a Homework Time profile, open the Homework Time tab and set the hours and days. Save.
- To block or allow specific sites (for example, allowing a sex education site you trust through the Strict filter), open Manage allowed and blocked sites.
BT says changes can take up to two hours to propagate. In my experience it is usually under thirty minutes. If you have just changed a setting and your kid is sat next to you trying to load TikTok to "test it", give it ten minutes and clear the browser cache.
The official help links
Bookmark these. BT moves their support pages around about as often as anyone else does.
- About BT Parental Controls (BT.com)
- Manage your BT Parental Controls settings
- Internet Matters BT walkthrough
Honest verdict: BT's controls are mature, free, and easy enough that even my technophobe parents managed it. The three preset levels cover the main use cases for most families, and the Homework Time feature is one of the better ones in this guide. The biggest weakness is that controls apply to the whole network rather than per-device, so if you want different rules for a 7-year-old and a 14-year-old you will hit a wall. Solid choice if you are on BT.
If you are looking at switching to BT, see our current BT broadband deals.
Sky Broadband Shield (and the truth about Sky Broadband Buddy)
Sky Broadband
Sky has two parental control products with very similar names and very different price tags, and the marketing does not always make the difference clear. Let me cut through it.
Sky Broadband Shield is the free, network-level filter that comes with every Sky Broadband package. This is the one most parents actually need. It is on by default for new customers, set to "13" rating during the day and "18" at night under the watershed. This is the product that does the heavy lifting.
Sky Broadband Buddy used to be a separate per-device parental control app. In 2026, Buddy is rolled into Sky Broadband Boost, which is a paid £5-a-month add-on. Buddy lets you set per-device profiles and screen time schedules; Shield does not. If you want the per-device stuff and you are on Sky, you have to pay. If you do not want to pay, Shield alone is still genuinely useful.
What Sky Broadband Shield gives you for free
Shield uses a film-classification-style system that I find genuinely intuitive. You pick one of three age ratings and Sky decides what gets blocked based on that single decision:
- PG: blocks adult content, dating sites, social media, online games, gambling, drugs, alcohol, tobacco, hate, and a long list besides. Genuinely strict and appropriate for younger children.
- 13: blocks adult content, dating, gambling, hate, suicide and self-harm material, but allows social media, gaming and search engines. Reasonable starting point for a household with teenagers.
- 18: blocks only phishing and known malware, plus any specific sites on your block list. Effectively disables family content filtering but keeps the security layer running.
The genuinely clever bit is the watershed. You can set Shield to apply your "13" or "PG" rating during the day and automatically switch to "18" overnight. By default this runs 13 from 5:30am to 9pm and 18 from 9pm to 5:30am. In our house I have it tighter than that, but the principle is brilliant: kids get protection during waking hours, adults get the open internet after bedtime, no manual intervention needed.
How to set up Sky Broadband Shield
- Go to sky.com, sign in with your Sky ID, or alternatively go directly to broadbandshield.sky.com.
- Open the Sky Broadband Shield page. You will see your current rating (PG, 13, 18 or Custom) and the Watershed status.
- Click the rating you want for daytime. Save.
- Open the Watershed tab. Set the start and end times for your evening rating. Save.
- If you want to block or allow specific sites, open Block & Allow Websites and paste in the URLs.
Changes typically apply within fifteen minutes.
The official help links
Important catch on Sky Broadband Buddy: if you have read older guides recommending Buddy as a free per-device tool, that information is out of date. Buddy is now a feature of paid Sky Broadband Boost (£5/month). Free Sky customers get Shield only. This is one of the corrections I had to make to my own earlier hub article.
Honest verdict: Sky Broadband Shield is the most elegant free filter in this guide. The PG/13/18 model is intuitive, the watershed is genuinely useful, and the default settings are sensible enough that even parents who never open the dashboard get reasonable protection. Per-device controls cost extra, which is annoying but not fatal. If you have a one-size-fits-all household, Shield alone is probably enough.
Looking at Sky? See our latest Sky broadband deals.
Virgin Media Essential Security and Web Safe
Virgin Media
Virgin Media's free parental control product is technically called Web Safe and is now bundled inside the wider Essential Security package. The naming has been a moving target for years, which has not helped, and many of the older guides still call it Web Safe. Both names point to the same thing.
Virgin's approach is slightly different to BT and Sky. Instead of preset age levels, you get a list of nine "always blocked" categories that are switched on the moment you activate parental controls, plus a long list of optional categories that you can toggle individually. The default always-blocked nine are: Pornography, Child Abuse, Violence, Crime, Hate, Drugs, Hacking, Suicide and Self-harm, and Address Hiding (proxy/anonymiser sites). You cannot turn those off. Optional categories include things like Gambling, Weapons, Alcohol and Tobacco, Social Media, Online Games and Sex Education.
The eero gotcha
Virgin Media's newer kit is moving towards mesh systems based on the Hub 5 and Hub 5x. Some of these have additional per-device controls accessed via the Connect app. Where you have an eero-based mesh through certain Virgin Media partner products, the parental controls may live in the eero app rather than the My Virgin Media portal. This is a sore spot in Virgin's documentation. If your settings page in My Virgin Media looks different to the screenshots in this guide, check whether your kit is eero-based.
How to set up Virgin Media Web Safe / Essential Security
- Go to virginmedia.com and sign in to My Virgin Media. Only the main account holder can change parental controls; this is a deliberate safety feature.
- Open Account settings under "Your account".
- Find the Online Security or Web Safe section.
- Toggle parental controls on. Set a security PIN when prompted.
- Open the Categories tab to switch optional categories on or off (alcohol, gambling, social media etc.).
- Use the Sites tab to add specific URLs to your block or allow lists.
- Use the Timer tab to schedule when the parental controls apply (for example, all day for a young child's tablet, or a homework window).
Settings take effect within a few minutes. If they do not, restart the Virgin Hub.
The Connect app for pause WiFi
Separately from Web Safe, the Virgin Media Connect app lets you pause Wi-Fi to individual devices. This is the "right, that's enough Roblox for one evening" button. You can find every connected device, see who is online, and pause any of them with a tap. It does not filter content but it is a brilliant blunt instrument for screen time.
The official help links
- Virgin Media parental controls
- Parental controls for TV and broadband (Virgin Media O2)
- Internet Matters Virgin Media walkthrough
Honest verdict: Virgin's controls are solid but a bit fiddly. The "always blocked" nine categories are a sensible safety floor, but the lack of preset levels means you have to know which optional categories you want to add, which is a higher cognitive bar than Sky's PG/13/18 sliders. The Connect app's pause Wi-Fi feature is genuinely good. Net-net, Virgin gives you what you need but you have to do a little more thinking.
Considering Virgin Media? See our Virgin Media broadband deals.
TalkTalk HomeSafe (and eero on Future Fibre)
TalkTalk
TalkTalk's HomeSafe is one of the longer-running free parental control products in the UK and it has aged better than I expected. The current 2026 version has four toggle areas inside My Account: Kids Safe (the actual content filter), Homework Time (a scheduled additional block), Virus Alerts (a malware warning system), and Scam Protection (anti-phishing plus forced SafeSearch).
What Kids Safe blocks
Kids Safe gives you nine category toggles you can switch on and off:
- Pornography
- Drugs, alcohol and tobacco
- Suicide and self-harm
- Gambling
- Weapons and violence
- Dating
- Social networking
- Gaming
- File sharing
You can also add specific websites to allow or block lists if a category overshoots or undershoots for your family. Homework Time defaults to blocking gaming and social media between 16:30 and 18:00 on weekdays, which I think is one of the more sensible defaults in this whole guide; you can change the time bands.
The Future Fibre / eero situation
This is important. TalkTalk's newer Future Fibre packages ship with Amazon eero mesh Wi-Fi hardware instead of the legacy TalkTalk wifiHub. If you are on Future Fibre with eero, your parental controls move out of HomeSafe and into the eero app and the eero Secure subscription tier. eero offers per-device profiles and pre-set filters by age group, which is more granular than HomeSafe. Some features of eero Secure are paid.
If you are unsure which kit you have, check the router itself: HomeSafe on the wifiHub, eero app on a Future Fibre eero device. TalkTalk's support documentation explicitly says: "Have an eero? You'll need to set up your web filtering settings in the eero app instead."
How to set up HomeSafe (legacy plans)
- Go to myaccount.talktalk.co.uk and sign in.
- Select My Security Settings from the navigation menu.
- Open HomeSafe settings.
- Click the On switch (it goes green when active).
- Under Kids Safe, tick the categories you want to block. Click Save changes.
- Optionally enable Homework Time and set the hours.
- Optionally enable Scam Protection and Virus Alerts.
Changes can take up to 60 minutes to propagate, though it is usually faster. Critical to know: HomeSafe only works if you are using TalkTalk's DNS settings. If a clever child changes the DNS on their device to a third-party one (Google, Cloudflare, etc.), HomeSafe stops applying to that device. This is true for every provider in this guide and is the single biggest weakness of network-level filtering.
The official help links
Honest verdict: HomeSafe is a workmanlike filter that does what it says on the tin. The Homework Time defaults are good, the nine-category approach is clear, and the Scam Protection layer is useful even if you do not have kids. The big plus for newer TalkTalk customers is eero, which gives you genuine per-device control for free at the basic tier. HomeSafe is solid; eero on Future Fibre is genuinely excellent.
Looking at TalkTalk? See our TalkTalk broadband deals.
EE Parental Controls
EE Broadband
EE's parental control system has quietly become one of the most polished in the UK in 2026, helped by the fact that it sits inside the same EE app most customers already use for their mobile phone. EE is part of BT Group, but the EE consumer broadband product has a distinct app and a distinct, in my view better, parental control implementation than BT.
What you get
EE's flagship feature is device groups. You can create a group called "Kids' devices", drop your children's phones, tablets and consoles into it, and then apply Light, Moderate or Strict restrictions to that group only. You can have multiple groups (a stricter group for younger kids, a looser one for teenagers, a separate "guests" group, and so on) and adults' devices can simply remain ungrouped with no restrictions. This is genuinely how a modern home filter should work.
The four protection levels are similar in spirit to BT's:
- Off: no filtering for that group.
- Light: blocks pornography, obscene/tasteless content, hate, self-harm, dating, alcohol, drugs and tobacco.
- Moderate: everything in Light, plus nudity, weapons and violence, gambling, and social networking.
- Strict: everything in Moderate, plus broader categories the way BT's Strict does.
You can also add specific websites to block or allow, set schedules (for example, pause the kids' Wi-Fi between 9pm and 7am), and tap pause on any individual device whenever you need a moment of peace. EE supports the Smart Hub 6 Plus, Smart Hub 7 Plus, and the new top-of-range Smart Hub 7 Pro; all three handle parental controls identically through the EE app.
How to set it up
- Open the EE app on your phone (download from the App Store or Google Play if you do not already have it).
- Sign in with the account holder's credentials.
- Tap Manage at the bottom, then Broadband.
- Scroll to Parental Controls and tap Activate Parental Controls. Allow up to two hours for first activation.
- Scroll to Groups. Tap Create group. Name it ("Kids' devices", "Teens", whatever works).
- Add the relevant devices to the group.
- Choose the protection level (Light, Moderate, Strict) for that group.
- To set a bedtime, scroll to Schedules within the group and add a schedule.
- To block specific sites, go back to Parental Controls > Block or allow specific websites and paste in the URLs.
The official help links
Honest verdict: EE has the strongest free per-device controls of any of the big six in 2026. The device groups feature is a step ahead of BT and Sky, and the EE app is well designed. If you have a household with children of significantly different ages, EE's groups model is a meaningful advantage. My main reservation is that initial activation can take up to two hours, which is annoying when you have a child standing impatiently next to you, but once it is set up it works well.
Considering EE? See our EE broadband deals.
Plusnet SafeGuard
Plusnet
Plusnet sits inside BT Group but operates with its own brand, its own router (the Hub Two), and its own parental control product called SafeGuard. It is genuinely free and switched on as part of the sign-up flow if you opt in.
What you get
SafeGuard is the simplest of the big six. No preset levels, just a list of categories you tick on or off, plus an allow/block list capped at 30 entries each, and a timer that lets you decide when the filter is active. Default categories blocked at activation include pornography, hate and intolerance, and tasteless content.
Categories available include the usual suspects: pornography, hate, dating, drugs and alcohol, gambling, social networking, file sharing, suicide and self-harm, weapons and violence. You can layer them up to whatever suits.
How to set it up
- Sign in to My Account at plus.net.
- Go to the Plusnet SafeGuard control panel.
- Click the ON/OFF button at the top to switch SafeGuard on.
- Restart your router.
- Tick the categories you want to block. Save.
- If needed, add up to 30 URLs to the blocked list and 30 to the allowed list.
- Use the Timer to schedule when the filter applies.
Plusnet says changes take up to two hours to propagate.
One known issue worth flagging
Plusnet's SafeGuard has historically blocked the ota.googlezip.net domain, which is the server Google uses to deliver Android security updates to Pixel phones. If your Pixel stops receiving updates and you are on Plusnet, this is almost certainly why. Add ota.googlezip.net to your SafeGuard allow list to fix it. This is a known long-running issue Plusnet has been a bit slow to address.
The official help links
- Our guide to using Plusnet SafeGuard
- Plusnet online security overview
- Internet Matters Plusnet walkthrough
Honest verdict: SafeGuard is functional, free and easy to set up. The 30-site cap on allow and block lists is restrictive if you want to manage individual sites at any scale, and the lack of preset age levels makes it a bit clunkier than Sky's or EE's offerings. The Pixel update issue is a niggle. But for the price (zero) it is a perfectly reasonable starting layer for any Plusnet household.
Considering Plusnet? See our Plusnet broadband deals.
NOW Broadband Buddy
NOW Broadband
NOW Broadband runs on the Sky network and uses similar underlying technology, but the parental control product is branded differently. NOW's free filter is called Broadband Buddy (not to be confused with the older Sky Broadband Buddy I mentioned earlier). NOW Broadband Buddy is included free with every NOW Broadband membership.
What you get
Broadband Buddy follows the same age-rating model as Sky Shield: you pick PG, 13, 18 or Custom. You can also add specific URLs to allow or block lists, and you have a watershed-equivalent feature called Grown up browsing time that automatically lifts the filter to 18 between specified hours overnight. The age categories block roughly the same buckets as Sky's: PG is heavy-blocking (social media, dating, gambling, all the obvious adult stuff and more), 13 is mid-tier, 18 is essentially malware-only.
How to set it up
- Go to nowtv.com and sign in to My Account.
- Open Broadband Buddy settings.
- Choose your age rating (PG, 13, 18 or Custom).
- If you want a watershed, switch on Grown up browsing time and set the start and end times.
- Use Block & allow websites to manage individual URLs.
Settings take effect within a few minutes; first-time setup of Grown up browsing time can take longer.
The official help links
Honest verdict: Broadband Buddy is essentially Sky Broadband Shield in different branding, and that means you get a sensible age-rating model and a watershed for free. The interface is clean. If you are on NOW Broadband, switch this on within five minutes of signing up.
Looking at NOW Broadband? See our NOW Broadband deals.
Vodafone Secure Net Home
Vodafone Broadband
Vodafone has the most powerful parental control system among the big retail providers in 2026, but with a catch: the best version (Secure Net Home) is only fully free if you are on the premium Vodafone Pro II broadband plan. On standard Vodafone Broadband, you get a three-month free trial of Secure Net and then it costs £2 a month.
This is worth being clear-eyed about. If you are on Pro II, you have arguably the best free-to-you per-device, profile-based filter on the UK market. If you are on standard Vodafone Broadband, you have a paid product, and you might prefer to use the free DNS filtering route I cover in the DNS filtering guide instead.
What Secure Net Home offers
Secure Net Home has three preset protection levels:
- Safe (default for everyone): blocks malware, phishing and other security threats. This is the baseline.
- Supersafe: Safe plus blocks adult content, violence, hate, drugs, alcohol, tobacco, crime, gambling and online dating. Reasonable starting level for most family households.
- Ultrasafe: Supersafe plus online games, social media and sex education. Strict, appropriate for younger children.
The genuinely powerful bit is per-child profiles. You create a profile for each child, assign their devices to that profile, and apply different protection levels per profile. You can also pause the internet for any profile (great for "right, dinner is on the table"), set bedtime schedules and define focus periods for homework.
How to set it up
- Open the Vodafone Broadband app and activate Secure Net Home.
- Download the Secure Net app separately from the App Store or Google Play.
- Sign in with your Vodafone account.
- Create profiles for each member of the family.
- Assign devices to each profile.
- Choose the protection level for each profile (Safe, Supersafe, Ultrasafe).
- Set up bedtime and focus schedules per profile.
The official help links
Honest verdict: Secure Net Home on Pro II is the most sophisticated free parental control package among the big providers in 2026. Per-child profiles and the three protection tiers are excellent. However, it is gated behind the paid Pro II plan, so the marketing claim of "free" needs an asterisk. If you are on standard Vodafone Broadband, weigh whether £2/month is worth it versus a free DNS-based alternative.
Considering Vodafone? See our Vodafone broadband deals.
Three Home Broadband
Three Home Broadband (4G/5G)
Three Home Broadband is the unusual one in this guide. Three's home product is mostly 4G or 5G fixed wireless: you plug a hub into the mains, the hub uses Three's mobile network for internet, and you get Wi-Fi at home without any fixed line. This works brilliantly in strong-signal areas and is a poor fit in weak-signal ones.
The downside for parents is that Three has not historically built a fully featured network-level parental control suite for its home broadband customers in the way BT, Sky and EE have. What Three has is the mobile-network-level adult content filter that comes from being a UK mobile operator: 18-rated adult content is blocked by default for all Three customers (mobile and home broadband alike) until the account holder verifies they are over 18. That filter is real and it is not nothing. But it is a single block, not a configurable family controls suite.
Three's 5G Outdoor Hub, which Three pairs with an Amazon eero router for awkward properties with weak indoor signal, opens the door to eero's per-device parental controls via the eero app. This is the route I would recommend for any Three Home Broadband customer with kids: where the hardware allows, push your filtering into eero.
Following the VodafoneThree merger that completed on 31 May 2025 (with full Vodafone ownership announced in May 2026, expected to complete in the second half of 2026), the brands continue to operate separately. Three Home Broadband is still distinct from Vodafone Broadband for customer-facing purposes, and Vodafone's Secure Net Home is not available to Three customers.
Honest verdict: Three Home Broadband is the weakest mainstream provider in this guide for dedicated parental controls. If you are a Three customer with children, the practical answer is: use the network-level adult filter that is on by default, install device-level controls (Apple Screen Time, Google Family Link) on every child's device, and set up Cloudflare for Families DNS on the eero or hub. Coverage and price are Three's strengths; family safety is not yet.
Considering Three? See our Three Home Broadband deals.
The altnets: Hyperoptic, Community Fibre, YouFibre, Gigaclear and the rest
The UK's altnet sector (alternative full-fibre providers building their own networks outside Openreach and Virgin's HFC footprint) has been the biggest broadband story of the past five years. Altnets like Community Fibre, Hyperoptic, YouFibre, Gigaclear, Zen, BeFibre, Toob, Brsk, Trooli, Netomnia, Lit Fibre and others have brought genuinely brilliant gigabit fibre to millions of homes that were stuck on slow copper. The catch, for parents, is that almost none of them offer the polished network-level parental control products the big six do.
This is partly because altnets were built lean. They focused capital on physical fibre rollout, not consumer software. It is also partly because most of them assume the customer will manage their own filtering, either through the router admin panel or by switching to a DNS-based solution like NextDNS or Cloudflare for Families. Both are reasonable assumptions for a tech-confident customer. Less reasonable for the average parent who just wants the internet to work.
Hyperoptic
Hyperoptic provides full-fibre broadband across multi-occupancy buildings in 57 UK cities. The supplied ZTE H298N router has a basic router-level parental control feature in its admin panel: you can block individual devices by MAC address and apply URL filters per device. This works but it is fiddly and the user interface is from a different decade. Hyperoptic's published parental controls advice essentially recommends layering in third-party tools like DNS-based filtering.
Community Fibre
Community Fibre is a London-only altnet with one of the fastest residential tiers in the UK (3 Gig symmetric). Its parental controls are basic: router-level options, no preset age levels, no per-child profiles. For most families on Community Fibre, the practical move is to set Cloudflare for Families DNS on the router and rely on device-level controls for everything else.
YouFibre
YouFibre is a fast-growing altnet with very fast tiers (up to 8 Gbps in some areas) but a lean approach to consumer security software. Parental controls are router-based. Treat YouFibre the same as Hyperoptic: switch on Cloudflare 1.1.1.3 on the router and use device-level controls.
Gigaclear
Gigaclear is a rural-focused altnet supplying Linksys Wi-Fi 6 routers as standard. The Linksys app (the same one used worldwide for Linksys mesh systems) includes parental controls: you can manage devices, set schedules, and block categories. This is more polished than Hyperoptic's router controls and roughly on a par with what eero offers TalkTalk Future Fibre customers. Gigaclear has been through a difficult financial period with creditors taking control in early 2026, so service continuity is worth keeping an eye on.
Zen Internet, Cuckoo, BeFibre, Toob, Brsk, 4th Utility, Lit Fibre, Netomnia and others
Smaller altnets generally do not provide a dedicated network-level parental control suite. Most rely on the router's built-in admin page for basic per-device blocking, plus the assumption that the customer will configure their own DNS or device-level controls. Zen Internet, in particular, is well known for being a tech-friendly provider with limited consumer-facing safety software. If you are on any of these providers, my recommendation is the same as for Hyperoptic: set Cloudflare for Families DNS at the router level and lean on device controls. See the free DNS filtering guide for step-by-step instructions on every common router brand.
Honest verdict on altnets: altnets are excellent at delivering fast, reliable fibre, often at lower prices than the big six. They are weaker at consumer parental controls. This is a real trade-off and worth thinking about if you have young children and you are choosing between, say, Community Fibre at £20/month with basic controls and Sky at £32/month with Shield. If you are technically confident enough to set router DNS, the altnet route works fine. If you are not, the big six's polished apps may be worth the price difference for some families.
Mobile and 4G/5G home broadband
One detail that catches many parents out: your home broadband filter does nothing for mobile data. The minute your child's phone disconnects from your Wi-Fi and switches to 4G or 5G, your provider's filter is no longer in the picture. This is by design; mobile networks have their own filtering arrangements.
Every UK mobile network operator (EE, O2, Vodafone, Three, plus the MVNOs that ride on them like Tesco Mobile, Sky Mobile, Smarty, Voxi, iD Mobile, Lebara) blocks 18-rated adult content at the network level by default. This filter stays on until the account holder verifies they are over 18, typically by entering credit card details (because under-18s cannot legally hold a credit card). This is part of UK regulatory requirements that pre-date the Online Safety Act 2023.
The practical implication: if you give a child a phone with their own SIM, the SIM-level filter is on by default and your child cannot turn it off. But the moment they connect to your home Wi-Fi, the SIM-level filter is bypassed (because they are not using mobile data), and your home broadband filter takes over. Two different filters, two different sets of rules, applied based on which network the device is on at any given moment. This is messy and most parents do not realise it.
For 4G/5G home broadband (EE Home Broadband, Three 5G Hub, Vodafone GigaCube/5G Home Broadband, O2 Home Broadband if still available in your area), the same network-level adult filter is on by default. Configurable family controls beyond that are limited. The practical answer is the same: use Cloudflare for Families DNS on the hub and device-level controls on each device.
The honest comparison table
This is the one table to send to anyone choosing a UK ISP based on parental controls. All free options listed; paid extras flagged. All information verified May 2026.
| Provider | Free filter name | Age tiers | Per-device | Watershed/schedule | Bypass difficulty | Honest rating |
|---|---|---|---|---|---|---|
| BT | BT Parental Controls | Light/Moderate/Strict + Custom | No (whole network) | Yes (Filter Times + Homework Time) | Low (DNS change) | Strong |
| Sky | Sky Broadband Shield | PG/13/18 + Custom | No (Buddy is paid) | Yes (Watershed) | Low (DNS change) | Strong |
| Virgin Media | Web Safe / Essential Security | Always-blocked 9 + opt-in categories | Limited (Connect app pause) | Yes (Timer) | Low (DNS change) | Solid |
| TalkTalk (legacy) | HomeSafe | Nine category toggles | No | Yes (Homework Time) | Low (DNS change) | Solid |
| TalkTalk (Future Fibre) | eero Secure | Pre-set age groups | Yes (per-device) | Yes (per-device schedules) | Medium | Excellent |
| EE | EE Parental Controls | Light/Moderate/Strict + Off | Yes (device groups) | Yes (per-group schedules) | Low (DNS change) | Excellent |
| Plusnet | SafeGuard | Category-by-category | No | Yes (Timer) | Low (DNS change) | Functional |
| NOW Broadband | Broadband Buddy | PG/13/18 + Custom | No | Yes (Grown up browsing time) | Low (DNS change) | Strong |
| Vodafone Pro II | Secure Net Home | Safe/Supersafe/Ultrasafe | Yes (per-child profiles) | Yes (per-profile schedules) | Medium | Excellent |
| Vodafone (standard) | Secure Net (£2/mo) | As above | Yes | Yes | Medium | Paid only |
| Three Home Broadband | Mobile network 18+ filter only | On/off (18+ block) | No | No | Low | Weak |
| Hyperoptic | Router admin only | None | MAC-based | Manual | Low | Bring your own |
| Community Fibre | Router admin only | None | Limited | Manual | Low | Bring your own |
| YouFibre | Router admin only | None | Limited | Manual | Low | Bring your own |
| Gigaclear | Linksys app | Pre-set filters | Yes | Yes | Medium | Strong (router-based) |
The honest top three
If I had to rank the free ISP parental control offerings in 2026 from a parent's point of view:
- EE Parental Controls: best balance of polish, per-device groups, and being genuinely free.
- Sky Broadband Shield: cleanest user interface, watershed feature is a winner, network-only but well executed.
- BT Parental Controls: mature, well-documented, Homework Time is excellent.
Vodafone Secure Net Home would top this list if it were free across all plans; on Pro II it is brilliant. TalkTalk Future Fibre with eero is also up there; if you have eero hardware, you have a top-tier free filter.
The bypass problem and what to do about it
I have repeated several times in this guide that ISP filters are easy to bypass. Let me explain exactly how, because the more you understand the mechanism, the better choices you can make about layering.
The four common ways an ISP-level filter gets defeated are:
- Switching off Wi-Fi. The simplest one. Your child's phone uses 4G/5G mobile data and your home filter is no longer in the picture. As discussed, mobile networks have their own 18+ filter, but if you have lifted that filter on the SIM (perhaps because the account holder verified age), there is nothing else.
- Changing the DNS server on the device. Every modern phone, tablet, laptop and games console lets you change the DNS server. A child who Googles "how to bypass parental controls" gets the answer in seconds. Setting the DNS to
8.8.8.8(Google) or1.1.1.1(Cloudflare) tells the device to ignore your provider's DNS and ask Google or Cloudflare instead. Your provider's filter never sees the request. This is the single most common bypass in UK households. - Using a VPN. A VPN encrypts every byte of traffic and tunnels it to a server somewhere else, often outside the UK. Your provider's DNS never sees what is being requested, only the VPN endpoint. Free VPN apps are easily found on every app store.
- Using DNS-over-HTTPS (DoH). Modern browsers (Firefox, Chrome, Edge) have a feature called DoH that silently encrypts DNS lookups and sends them to a trusted resolver, bypassing the device's normal DNS settings. It is not labelled as a parental control bypass; it is sold as a privacy feature. But the side effect is the same.
What to do about it
You cannot eliminate the bypass risk entirely. Anyone determined enough will get round any filter, and arms-race solutions tend to make life worse for the adults in the house without solving the problem. But you can substantially raise the difficulty:
- Switch the DNS to Cloudflare for Families on the router itself. This way, even if a child changes the DNS on their phone away from your provider's settings, all DNS lookups still flow through the router, and your filter still applies. Walkthrough in the DNS guide.
- Lock the router admin password. If your kid cannot change router settings, your DNS choice stays in place.
- Use device-level controls on top. Apple Screen Time and Google Family Link can prevent VPN apps being installed and can require a parent's PIN to change DNS settings. See the Apple Screen Time guide and the Google Family Link guide.
- Configure DoH at the router or block known DoH endpoints. Advanced; covered in the DNS guide.
- Have the conversation. In my house, the rule is: I do not surveil, and you do not bypass. When that breaks down (and it has, twice) we talk. Banning is rarely as effective as explaining.
Frequently asked questions
My teenager switched the DNS on their phone to Google. What now?
Three options. First, change it back and have a conversation about why. Second, set Cloudflare for Families DNS on the router itself, so router-level filtering still applies regardless of phone settings. Third, install device-level controls (Screen Time or Family Link) and lock the network settings so the DNS cannot be changed without your PIN. In real life, all three together.
Why does YouTube still get through even with parental controls on?
Because YouTube as a whole is a 13+ service that contains plenty of legitimate, age-appropriate content. ISP filters tend to allow YouTube as a domain and rely on YouTube's own age controls (Restricted Mode, YouTube Kids, Supervised Accounts) to filter what is actually shown. This is a deliberate trade-off; if your provider blocked youtube.com entirely, half the country would be unable to watch Mr Beast or follow a recipe video. See the social media safety guide for YouTube-specific settings.
Can I set different rules for different children with the same ISP?
It depends on the provider. EE has device groups and can do this well. Vodafone Pro II does this with per-child profiles. TalkTalk Future Fibre on eero does this per device. BT, Sky Shield (without paid Buddy), Virgin Media, Plusnet and NOW apply the same rules to the whole network. In those cases you have two choices: set the strictest reasonable level for the household and use device-level controls for finer grain, or upgrade to a plan with per-device support.
Will parental controls slow my broadband?
Not in any way you would notice. DNS lookups happen in milliseconds. All major UK ISPs run their parental control filtering on the same DNS infrastructure they already use, so the additional overhead is essentially zero. Anyone telling you that switching on parental controls slowed their connection is almost certainly attributing slowness from another cause to a feature they recently changed.
How do I check the filter is actually working?
The dirty test: try to load a known adult site (you can use a placeholder like example-adult-site.com on your block list) from a device on your home Wi-Fi. If you see a blocked-page warning, you are sorted. If the site loads, either the filter has not propagated yet (wait an hour) or the device is using its own DNS (check the device's network settings). Cleaner test: Internet Matters and the providers themselves have test pages.
What about guests and visitors?
ISP-level controls apply to every device on your home Wi-Fi, including guests'. This means guests get filtered too, which is fine for kid-friendly content but can be annoying for adult guests. Most modern routers (BT Smart Hub 2, Sky Hub, Virgin Hub 5, EE Smart Hub) support a separate guest network with different rules. Worth setting up; covered in the router controls deep-dive.
Can I lift the filter for myself at night?
Yes, in two ways. Either use the watershed/timer feature on your provider (Sky, BT, NOW, Plusnet, Virgin, TalkTalk all have this), or simply lift the filter for an hour or two using the toggle in the app. Sky's watershed model is by far the most elegant for this; you set it once, it does the right thing every night.
Why is unsuitable content still getting through?
Several possibilities. The category list might not include what you are worried about (e.g. social media is allowed at the 13 setting). The site might not be classified yet. The device might be using its own DNS (see above). The content might be inside an app that uses encrypted traffic the filter cannot see. Or, most commonly, the content is on YouTube/TikTok/Instagram and is technically within the platform's own age rules but is awful anyway. In that case, layer in app-level controls.
Does this work with mesh Wi-Fi?
Yes, provided your mesh system uses your provider's DNS. Most mesh kits supplied by ISPs (BT Whole Home, Sky's Wi-Fi Max, Virgin's Hub 5x mesh, eero with TalkTalk) are configured correctly out of the box. Aftermarket mesh systems (Asus, Netgear Orbi, Google Nest Wifi, Amazon eero bought separately) need you to leave the DNS at "automatic" or to manually set your provider's DNS. See the router controls deep-dive.
I have multiple providers (e.g. fixed broadband at home and a mobile SIM). Do I need to set up each one?
Yes. Each connection has its own filter. Your home broadband filter applies on home Wi-Fi. Your mobile network's 18+ filter applies on mobile data. Different rules in each place. The way to make this manageable is to set strong device-level controls (Screen Time, Family Link) so the same rules follow the device regardless of which network it is on.
I am switching providers. How do I move my settings?
You cannot, unfortunately. Each provider's parental control product is bespoke, and there is no industry standard for exporting settings. When you switch (Ofcom's One Touch Switch makes this much easier than it used to be), spend ten minutes setting up the new provider's parental controls within the first day. Keep a list of any specific URLs you had blocked or allowed, so you can re-enter them.
What to do if your provider's tools aren't enough
For a meaningful chunk of UK families, the free ISP filter is enough. It catches the obvious stuff, it sets a reasonable baseline, and combined with sensible conversations and device controls, it gets you most of the way there.
If you are reading this and thinking "this is not enough for our situation", here are the genuine next steps to take, in order of priority:
- Add device-level controls on every child's device. This is non-optional. Apple Screen Time, Google Family Link, Microsoft Family Safety. All free. Walk-throughs: Apple Screen Time, Google Family Link.
- Set Cloudflare for Families DNS on your router. Adds a malware and adult content filter regardless of what your ISP filter is doing, and harder to bypass with a device-level DNS change. Walkthrough: free DNS filtering guide.
- Configure parental controls on every games console in the house. PlayStation, Xbox, Nintendo Switch all have free family apps. See the gaming console controls deep-dive.
- Tighten the in-app safety settings on the platforms your kids use. TikTok Family Pairing, Instagram Teen Accounts, Snapchat Family Center, Discord Family Centre, YouTube Supervised Accounts, Roblox Account Restrictions. Detailed in the social media settings deep-dive.
- Have the conversation. Age-appropriate scripts in the conversations deep-dive.
The whole point of the BroadbandSwitch.uk online safety series is that you can tackle these layers one at a time, in the order that suits your family. None of it requires you to be technical. All of the free tools in this and the other deep-dives genuinely work.
Video walkthrough I recommend
Internet Matters has a series of short, clear walkthroughs for each major ISP's parental controls. This one, for BT, is representative of the quality and clarity:
BT Broadband parental controls step-by-step (Internet Matters).
For Sky, EE, Virgin Media, TalkTalk, Vodafone, Plusnet and NOW, search the Internet Matters YouTube channel for the equivalent video. They are all five to seven minutes long and worth the time.
Resources and further reading
- BroadbandSwitch.uk online safety hub for parents (the main page in this series)
- Internet Matters parental controls hub (every ISP, every device, every app)
- NCSC Cyber Aware (UK government baseline cyber hygiene)
- NSPCC online safety
- Thinkuknow (NCA-CEOP)
- Ofcom Online Safety hub
Coming next in this series:
- Setting up Apple Screen Time properly
- Google Family Link on Android and Chromebook
- Gaming console parental controls
- Social media platform safety settings
- Router-level controls for non-technical parents
- Free DNS-based filtering
- Age-appropriate conversations with your kids
- Recognising warning signs
- Reporting and getting help
A note from one parent to another
If you have read this far, you are taking online safety seriously, and that puts you in a small minority of UK parents. Pick the section that applies to your provider, spend the five minutes, and you will have done more for your family's online safety than 80% of households around you. Then come back next week and do the device-level layer. Then the conversation layer. Bit by bit, layer by layer.
If a setting in this guide has changed by the time you read it (and given how often providers tweak their menus, that is a question of when not if), please let me know. If your provider is not in this guide, tell me and I will add it. If you have a story about something that worked or did not work in your house, I want to hear it.
Email me directly at alex@broadbandswitch.uk. I read every message and I update this guide whenever a provider changes something material.
Take care, and good luck.
Alex Martin-Smith
BroadbandSwitch.uk
Helpful video resources
Below are 3 videos from authoritative sources that complement this guide. Watch them at any time for additional perspective.
References
All claims in this article are sourced from the references below in APA 7th edition format. References last verified: 7 May 2026. If you spot an inaccuracy, please email alex@broadbandswitch.uk.
- Department for Science, Innovation and Technology. (2025, April 24). Online Safety Act: explainer. GOV.UK. https://www.gov.uk/government/publications/online-safety-act-explainer
- National Society for the Prevention of Cruelty to Children. (n.d.). Keeping children safe online. NSPCC. https://www.nspcc.org.uk/keeping-children-safe/online-safety/
- Internet Matters. (n.d.). Age-by-age advice for parents. https://www.internetmatters.org/advice/
- Internet Matters. (n.d.). Broadband and mobile parental controls. https://www.internetmatters.org/parental-controls/broadband-mobile/
- Childnet International. (n.d.). Help and advice for parents. https://www.childnet.com/help-and-advice/
- BT. (n.d.). Parental Controls. https://www.bt.com/help/security/parental-controls
- Sky. (n.d.). Sky Broadband Shield overview. https://www.sky.com/
- Virgin Media. (n.d.). Web Safe and Essential Security. https://www.virginmedia.com/help/web-safe
- TalkTalk. (n.d.). HomeSafe. https://www.talktalk.co.uk/security/homesafe
- EE. (n.d.). Wi-Fi Controls at home. https://ee.co.uk/
- Plusnet. (n.d.). About Plusnet SafeGuard. https://www.plus.net/
- Vodafone. (n.d.). Secure Net. https://www.vodafone.co.uk/
- NOW Broadband. (n.d.). Buddy parental controls. https://help.nowtv.com/
- Three. (n.d.). Home Broadband. https://www.three.co.uk/