How to set up parental controls on an ASUS router
ASUS publishes DNS Privacy instructions for supported Asuswrt firmware using DNS-over-TLS, not DNS-over-HTTPS. AiProtection and parental-control menus also vary by model, so check the model support page and firmware version before starting.
- Some AiProtection features require agreement to Trend Micro terms. Review the stated data use before enabling them.
- UPnP can allow local apps and devices to open inbound ports. Review whether it is needed for your setup and follow ASUS's security guidance before changing it.
- ASUS parental controls require router mode and supported features. Do not assume the same filtering is available in access-point, repeater or media-bridge mode.
Step 1 — Log into the ASUS router admin panel
- Connect to your ASUS network.
- Open a browser and go to http://router.asus.com or http://192.168.1.1.
- Log in with the admin credentials you set when configuring the router. The Wi-Fi credentials on the label are not necessarily the admin login; use the instructions for your exact model if unsure.
Step 2 — Change the admin password
- Go to Administration → System.
- Under Router Login Settings, change the username and password.
- Set a strong password of 12+ characters.
- Apply and log back in.
Step 3 — Check model-specific Wi-Fi security
- Go to Wireless → General.
- Use WPA3-Personal or WPA2/WPA3-Personal only if your model offers it and your devices are compatible. Otherwise retain WPA2-Personal with AES on a WPA2-only model.
- Update your Wi-Fi passphrase.
- Apply.
Step 4 — Set up a guest network
- Open the guest-network section documented for your exact model and firmware. ASUS documents Guest Network and Guest Network Pro variants; supported newer firmware renames the section Network.
- Enable a guest SSID.
- Set a separate passphrase.
- Disable guest access to the main network using the isolation option documented for your firmware, such as Access Intranet. Test any casting or local-device controls that need access across networks.
- Apply.
Step 5 — Check the supported Canopy DNS setup path
- Start a Canopy Families full-access subscription or 14-day trial; the managed NextDNS profile is included.
- Check Home Safety for a profile-specific setup method supported by your exact router model and firmware.
- Do not enter a DNS-over-TLS hostname based on this article alone. Use one only when Home Safety provides a profile-specific hostname with a supported method for your exact firmware.
- If no verified router method is available, review separate OS controls in Device Setup and ask for a verified Canopy DNS route. Device Setup does not install Canopy DNS.
Step 6 — Enable AiProtection parental controls
- Confirm that the exact model supports the controls you want and is running in router mode.
- Open Parental Controls → Web & Apps Filters, or AiProtection → Parental Controls → Web & Apps Filters, as shown for your firmware.
- Review any Trend Micro agreement before enabling the feature.
- In Client List, select a device and the content categories to restrict, add the rule, then Apply.
- Use the separate Time Scheduling section for supported device schedules and test the intended device. Content-filter and schedule options differ by model.
Sources and review scope
The sources below informed this editorial review. Router menus and service features vary by model, firmware and account. A documentation check is not a hardware test or confirmation of Canopy support.
Explore Canopy Families
Full access includes a managed NextDNS profile and parent dashboard. Filtering needs an available setup method validated for your exact router; a profile traffic check does not confirm every device or mobile connection.
£9.99/month after an eligible 14-day trial. A payment card is required at checkout; the paid subscription starts after the trial unless you cancel. A limited free plan is also available: five sessions per week and one child profile, without managed NextDNS filtering.
Create an account to choose your plan