← All guidesCanopy Families
Security guide8 min read

How to set up parental controls on BT Smart Hub 2

The BT Smart Hub 2 is the most widely issued router in the UK, but out of the box it has no content filtering at all. This guide walks through every security setting a parent should change — from locking the admin panel to blocking adult content at the DNS level, which protects every phone, tablet, and games console on your network automatically.

By James Mackie, Canopy Families founder · How we research and review guides

Before you start
  • Changing your Wi-Fi passphrase will disconnect every device in your home. Have the new password written down before you start.
  • The BT Smart Hub 2 does not support DNS-over-HTTPS (DoH), so DNS filtering can be bypassed by a child who knows to change their device's DNS settings. Pair it with device-level controls for the strongest protection.
  • BT's admin panel only loads from devices already on your BT network — it will not work over mobile data or a VPN.

Step 1 — Log into the BT Smart Hub admin panel

  1. Make sure you are connected to your BT Wi-Fi (not mobile data).
  2. Open any web browser and type http://192.168.1.254 in the address bar, then press Enter.
  3. You will see the BT Smart Hub login screen.
  4. Enter the admin password. This is printed on the back label of your hub under the heading "Admin password" — it is different from your Wi-Fi password.
  5. Click Log in.
If http://192.168.1.254 does not load, try http://bthomehub.home. If neither works, the hub's IP may have changed — check it via Settings → Network on a Windows PC or System Settings → Wi-Fi → Details on a Mac.

Step 2 — Change the default admin password

Do not use the same password as your Wi-Fi. If a child learns one, they should not gain access to the other.
  1. Click Advanced Settings at the top of the page.
  2. Enter your current admin password when prompted.
  3. Click Hub Options → then Change Admin Password.
  4. Enter the current password, then type a new strong password (12+ characters, different from your Wi-Fi password).
  5. Click Apply. Log back in with the new password.

Step 3 — Check Wi-Fi security

  1. In Advanced Settings, click Wi-Fi.
  2. Under 2.4 GHz and 5 GHz settings, keep the strongest security option the hub offers. BT Smart Hub 2 normally manages this automatically; do not choose an older compatibility mode unless a device requires it.
  3. Change your Wi-Fi passphrase to something long and random — at least 16 characters mixing letters, numbers, and symbols.
  4. Click Apply. All devices will disconnect and need to reconnect with the new passphrase.
Write the new Wi-Fi passphrase on a piece of paper and store it somewhere physically secure — not saved in the browser or a notes app on a shared device.

Step 4 — Check the exact hub model before following extra-network advice

  1. Read the model name on the hub label and confirm whether it is a consumer Smart Hub 2 or a BT Business Smart Hub 2.
  2. Do not rely on generic instructions for a Guest tab: the consumer Smart Hub 2 does not provide every feature found on the Business model.
  3. If network separation is important, use a compatible third-party router or access point and follow that manufacturer’s model-specific guide.
BT Business documentation is not evidence that the same menu exists on a consumer Smart Hub 2.

Step 5 — Connect Canopy-managed NextDNS

Do not enter Canopy DNS addresses into a menu that is not explicitly a DNS-server setting, and do not copy BT Business instructions onto a consumer hub.
  1. Start a Canopy Families full-access subscription or 14-day trial; the managed NextDNS profile is included.
  2. Open Home Safety → Router Setup and select BT Smart Hub 2.
  3. The consumer Smart Hub 2 does not expose the same custom-DNS controls documented for BT Business hubs. Follow Canopy’s Device Setup route, or place a supported router behind the BT hub if you want whole-network filtering.
  4. Complete Test connection in Home Safety before treating the network as protected.

Step 6 — Enable BT Parental Controls

  1. Open a browser and go to mybt.bt.com.
  2. Sign in with your BT account.
  3. Go to Products → Broadband → Manage Parental Controls.
  4. Switch on Safe Settings to block adult content across your connection.
  5. Choose the filter strength appropriate for your children's ages.
  6. Click Save changes.
BT Parental Controls work at the BT network level — before content even reaches your hub — which means they apply even if someone changes DNS on their device. Use them alongside NextDNS for defence in depth.

Router menus vary by model and firmware. These instructions were checked against the manufacturers' current support material; use the route shown for your exact model.

🌳

Want Canopy to manage this for you?

Canopy Families full access includes a managed NextDNS profile, guided router setup, content controls, connection checks, and a safety dashboard for your family.

Start your 14-day full-access trial