← All guidesCanopy Families
Security guide7 min read

How to set up parental controls on an ASUS router

ASUS publishes DNS Privacy instructions for supported Asuswrt firmware using DNS-over-TLS, not DNS-over-HTTPS. AiProtection and parental-control menus also vary by model, so check the model support page and firmware version before starting.

By James Mackie, Canopy Families founder · How we research and review guides

Before you start
  • AiProtection features require the router to be registered and may phone home to Trend Micro servers. Review the privacy settings if this concerns you.
  • ASUS routers are sometimes exposed directly to the internet via UPnP. Disable UPnP if you do not specifically need it.

Step 1 — Log into the ASUS router admin panel

  1. Connect to your ASUS network.
  2. Open a browser and go to http://router.asus.com or http://192.168.1.1.
  3. Log in with username "admin" and your admin password (on the router label if not previously changed).

Step 2 — Change the admin password

  1. Go to Administration → System.
  2. Under Router Login Settings, change the username and password.
  3. Set a strong password of 12+ characters.
  4. Apply and log back in.

Step 3 — Enable WPA3 and update Wi-Fi security

  1. Go to Wireless → General.
  2. Set Authentication Method to WPA3-Personal or WPA2/WPA3-Personal.
  3. Update your Wi-Fi passphrase.
  4. Apply.

Step 4 — Set up a guest network

  1. Go to Wireless → Guest Network.
  2. Enable a guest SSID.
  3. Set a separate passphrase.
  4. Ensure "Access Intranet" is set to Off (to isolate guest devices from your main network).
  5. Apply.

Step 5 — Connect Canopy-managed NextDNS with DNS-over-TLS

  1. Start a Canopy Families full-access subscription or 14-day trial; the managed NextDNS profile is included.
  2. In Home Safety → Router Setup, copy the DNS-over-TLS hostname assigned to your family profile.
  3. On supported Asuswrt firmware later than 3.0.0.4.386.4xxxx, open WAN → Internet Connection → DNS over TLS.
  4. Choose the strict privacy profile and add the assigned TLS hostname using the custom-server option shown by your firmware.
  5. Apply.
If the DNS-over-TLS controls are absent, use the assigned IPv4 addresses only through the supported plain-DNS menu, or follow Canopy Device Setup. Do not paste a DoH URL into a TLS-hostname field.

Step 6 — Enable AiProtection parental controls

  1. Go to AiProtection → Parental Controls.
  2. Enable AiProtection (may require agreeing to Trend Micro terms).
  3. Under Web Filtering, enable the content categories appropriate for your children.
  4. Under Client Manager, add your children's devices.
  5. Set time scheduling to restrict internet access during homework and bedtime hours.

Router menus vary by model and firmware. These instructions were checked against the manufacturers' current support material; use the route shown for your exact model.

🌳

Want Canopy to manage this for you?

Canopy Families full access includes a managed NextDNS profile, guided router setup, content controls, connection checks, and a safety dashboard for your family.

Start your 14-day full-access trial