← All guidesCanopy Families
Security guide6 min read

How to set up parental controls on TP-Link Deco

TP-Link Deco mesh systems are managed through the Deco app. Parental-control features and subscriptions vary between HomeShield and older HomeCare models, while custom IPv4 DNS is configured in the network’s advanced settings.

By James Mackie, Canopy Families founder · How we research and review guides

Before you start
  • Deco systems use the Deco app, not the TP-Link Tether app used by many Archer routers. Keep the TP-Link ID secure and enable two-factor authentication where offered.
  • Menu names and HomeShield features vary by Deco model and firmware. Check the model number in the app before changing settings.

Step 1 — Access settings in the Deco app

  1. Download the TP-Link Deco app on your phone.
  2. Log in with your TP-Link ID.
  3. Select your Deco network.
  4. Confirm the model number shown in the app before following model-specific options.

Step 2 — Update firmware

  1. In the Deco app, tap More → System → Update Deco.
  2. Install all available firmware updates.
  3. Wait for the Decos to restart.

Step 3 — Secure the TP-Link account

  1. Open the TP-Link ID account-security settings from the Deco app.
  2. Enable Two-factor Authentication (2FA).
  3. Ensure you are using a unique, strong password for your TP-Link ID.

Step 4 — Connect Canopy-managed NextDNS

  1. Start a Canopy Families full-access subscription or 14-day trial; the managed NextDNS profile is included.
  2. Copy the assigned Primary and Secondary IPv4 addresses from Home Safety → Router Setup.
  3. In the Deco app, open More → Internet Connection → IPv4, then choose custom DNS where your model exposes it.
  4. Enter the two assigned addresses, save, and reconnect a device.
  5. Run Test connection in Canopy Home Safety before treating protection as active.
TP-Link’s official Deco custom-DNS path does not establish universal DNS-over-HTTPS support. Treat encrypted DNS as model-specific unless the manual for your exact Deco says otherwise.

Step 5 — Enable HomeCare parental controls

  1. In the Deco app, tap HomeShield (or HomeCare on an older supported model).
  2. Enable Parental Controls.
  3. Add your children's devices to a profile for each child.
  4. Set Content Filter to filter age-inappropriate websites.
  5. Enable Time Limits to restrict daily screen time.
  6. Enable Bedtime to block internet access during night hours.
HomeCare basic features are free. Advanced reporting and some filter categories require a Homeshield Pro subscription.

Router menus vary by model and firmware. These instructions were checked against the manufacturers' current support material; use the route shown for your exact model.

🌳

Want Canopy to manage this for you?

Canopy Families full access includes a managed NextDNS profile, guided router setup, content controls, connection checks, and a safety dashboard for your family.

Start your 14-day full-access trial