← All guidesCanopy Families
Security guide8 min read

How to set up parental controls on BT Smart Hub 2

This guide walks through BT Smart Hub 2 security settings, BT parental controls, and the supported ways to use Canopy-managed NextDNS. DNS filtering applies only to requests that use the configured family profile; selecting a router does not confirm coverage for every device.

By James Mackie, Canopy Families founder · How we research and review guides

Before you start
  • Changing your Wi-Fi passphrase will disconnect every device in your home. Have the new password written down before you start.
  • The BT Smart Hub 2 does not support DNS-over-HTTPS (DoH), so DNS filtering can be bypassed by a child who knows to change their device's DNS settings. Pair it with device-level controls for the strongest protection.
  • BT's admin panel only loads from devices already on your BT network — it will not work over mobile data or a VPN.

Step 1 — Log into the BT Smart Hub admin panel

  1. Make sure you are connected to your BT Wi-Fi (not mobile data).
  2. Open any web browser and type http://192.168.1.254 in the address bar, then press Enter.
  3. You will see the BT Smart Hub login screen.
  4. Enter the admin password. This is printed on the back label of your hub under the heading "Admin password" — it is different from your Wi-Fi password.
  5. Click Log in.
If http://192.168.1.254 does not load, try http://bthomehub.home. If neither works, the hub's IP may have changed — check it via Settings → Network on a Windows PC or System Settings → Wi-Fi → Details on a Mac.

Step 2 — Change the default admin password

Do not use the same password as your Wi-Fi. If a child learns one, they should not gain access to the other.
  1. Click Advanced Settings at the top of the page.
  2. Enter your current admin password when prompted.
  3. Select System in Advanced Settings and enter the current admin password when prompted.
  4. Enter the current password, then type a new strong password twice (12 to 20 characters, different from your Wi-Fi password).
  5. Click Save and follow any confirmation shown by Hub Manager. Keep the new password available.

Step 3 — Check Wi-Fi security

  1. In Advanced Settings, click Wi-Fi.
  2. Under 2.4 GHz and 5 GHz settings, keep the strongest security option the hub offers. BT Smart Hub 2 normally manages this automatically; do not choose an older compatibility mode unless a device requires it.
  3. Change your Wi-Fi passphrase to something long and random — at least 16 characters mixing letters, numbers, and symbols.
  4. Click Apply. All devices will disconnect and need to reconnect with the new passphrase.
Write the new Wi-Fi passphrase on a piece of paper and store it somewhere physically secure — not saved in the browser or a notes app on a shared device.

Step 4 — Check the exact hub model before following extra-network advice

  1. Read the model name on the hub label and confirm whether it is a consumer Smart Hub 2 or a BT Business Smart Hub 2.
  2. Do not rely on generic instructions for a Guest tab: the consumer Smart Hub 2 does not provide every feature found on the Business model.
  3. If network separation is important, use a compatible third-party router or access point and follow that manufacturer’s model-specific guide.
BT Business documentation is not evidence that the same menu exists on a consumer Smart Hub 2.

Step 5 — Connect Canopy-managed NextDNS

Do not enter Canopy DNS addresses into a menu that is not explicitly a DNS-server setting, and do not copy BT Business instructions onto a consumer hub.
  1. Start a Canopy Families full-access subscription or 14-day trial; the managed NextDNS profile is included.
  2. Open Home Safety → Router Setup and select BT Smart Hub 2.
  3. The consumer Smart Hub 2 does not expose the same custom-DNS controls documented for BT Business hubs. Device Setup covers separate OS controls, not Canopy DNS installation. Use a verified compatible-router path or ask for help with another supported method.
  4. Use Check profile traffic in Home Safety. A positive check shows at least one recent request on the family profile; it does not verify every device.

Step 6 — Enable BT Parental Controls

  1. Open a browser and go to my.bt.com.
  2. Sign in with your BT account.
  3. Select Manage your extras, then find BT Parental Controls and select Manage BT Parental Controls.
  4. Activate the controls, then review the restriction level and categories appropriate for your family.
  5. Allow up to two hours for activation or changes, then test the intended device and connection.
BT Parental Controls require BT DNS. A request sent to NextDNS does not also pass through the BT DNS filter. Choose and test the intended DNS provider; do not describe the two as stacked filters. Separate device controls can still be used alongside your chosen DNS route.

The sources below informed this editorial review. Router menus and service features vary by model, firmware and account. A documentation check is not a hardware test or confirmation of Canopy support.

Explore Canopy Families

Full access includes a managed NextDNS profile and parent dashboard. Filtering needs an available setup method validated for your exact router; a profile traffic check does not confirm every device or mobile connection.

£9.99/month after an eligible 14-day trial. A payment card is required at checkout; the paid subscription starts after the trial unless you cancel. A limited free plan is also available: five sessions per week and one child profile, without managed NextDNS filtering.

Create an account to choose your plan