My daughter is 10 and just got her first iPhone. I want to make sure she cannot access inappropriate websites through Safari and that I have some control over what she browses. I have heard about Screen Time but I am not sure where to start or what settings actually matter. Can someone walk me through the full setup? Also wondering if there are limits to what the built-in controls can do and whether third-party apps are worth it.
Good question and the right time to set this up, before she starts browsing freely rather than after.
Here is the core setup path for Safari parental controls on iPhone through Screen Time:
Step 1: Open Settings on the child’s iPhone, tap Screen Time, then tap Turn On Screen Time. If you want to manage it from your own phone remotely, tap “This is My Child’s iPhone” when prompted. Set a Screen Time passcode that your child does not know.
Step 2: Tap Content and Privacy Restrictions. Toggle it ON. This is the main control panel.
Step 3: Tap Content Restrictions, then tap Web Content. You will see three options:
Unrestricted Access: No filter, everything is open.
Limit Adult Websites: Apple automatically blocks known adult content. You can also manually add specific sites to the Always Allow or Never Allow lists.
Allowed Websites Only: The most restrictive setting. Safari can only open sites you manually approve. Everything else is blocked by default.
For a 10-year-old I would start with Limit Adult Websites. It blocks the obvious categories automatically and you can add specific sites to the Never Allow list as you discover ones you want blocked.
Step 4: Still inside Content and Privacy Restrictions, tap Apps and make sure Safari itself is set to show (or you can hide it entirely if you want to use a different filtered browser instead).
Step 5: Set a Screen Time passcode if you have not already. Without this passcode, your daughter can simply go into Settings and turn off Content Restrictions herself. The passcode locks all these settings so only you can change them.
That is the foundational setup. Takes about 5 minutes.
NexuForge covered the setup path well. Let me add the Family Sharing angle because it makes managing all this significantly easier, especially as she gets older and gets more devices.
Family Sharing lets you link your Apple ID to your daughter’s Apple ID and manage her Screen Time restrictions remotely from your own iPhone without needing physical access to her device.
To set it up: Go to Settings on your iPhone, tap your name at the top, tap Family Sharing, then Add Member. You create or link your daughter’s Apple ID. Once she is in your family group, you can manage her Screen Time from your phone by going to Settings, Screen Time, and selecting her name from the list.
Why this matters practically: when she is at school or a friend’s house, you can still see her screen time usage, adjust limits, or respond to her requests to unlock specific sites, all from your own phone without touching hers.
my son (12 at the time) was at his grandparents for the weekend. He sent me an approval request through Screen Time because a site he wanted was blocked. I approved it from my phone in about 10 seconds. No phone calls, no driving over. That remote management is genuinely useful day-to-day.
One thing to do right now: make sure her iPhone is signed in with a child Apple ID you created and manage, not an adult account. Adult accounts have no Screen Time parent restrictions by default. If she is signed in with an adult Apple ID, the controls you set may not fully stick.
Apple built parental controls directly into iOS through the Screen Time framework, which was introduced in iOS 12 and has been expanded significantly in each subsequent version. Unlike third-party solutions that work at the app layer, Screen Time hooks into the OS itself, which means its web filtering applies system-wide to Safari and cannot be bypassed by simply clearing browser history or using private browsing.
When Content Restrictions are active with a passcode, even Private Browsing in Safari is restricted. Your child cannot open an incognito tab and bypass the filters. That is a genuinely important technical distinction.
Full Step-by-Step Setup Guide
Phase 1: Create a Child Apple ID (If Not Already Done)
Before anything else, confirm your daughter is signed into the iPhone with a child Apple ID, not an adult account. Apple IDs created for users under 13 have parental consent requirements built in. To create one properly:
- Go to Settings on a parent device, tap your name, tap Family Sharing, Add Member
- Choose Create Child Account
- Enter the child’s date of birth. Apple will recognize that the account holder is under 13 and apply appropriate account restrictions
- Follow the prompts to create the Apple ID with parent approval
A child Apple ID is required for Ask to Buy, approval requests, and remote Screen Time management through Family Sharing to work correctly.
Phase 2: Enable Screen Time with Parental Passcode
On the child’s iPhone:
- Settings > Screen Time > Turn On Screen Time
- Select “This is My Child’s iPhone”
- Set App Limits or Downtime if desired (optional at this stage)
- Tap Use Screen Time Passcode and enter a 4 or 6-digit code your child does not know
This passcode is separate from the device unlock passcode. It specifically protects Screen Time settings from being changed.
Phase 3: Configure Content and Privacy Restrictions
Inside Screen Time, tap Content and Privacy Restrictions, then toggle the switch to ON.
Key settings to configure:
iTunes and App Store Purchases: Set In-App Purchases to Don’t Allow. Set Installing Apps to Don’t Allow if you want to approve all new apps. Set Deleting Apps to Don’t Allow to prevent removal of monitoring tools.
Allowed Apps: Review the list. You can disable Safari entirely here and install a dedicated filtered browser like Bark Browser or Google Family Link if you prefer a third-party solution with more reporting features.
Content Restrictions > Web Content: This is the Safari-specific control. Options explained:
Unrestricted Access means no filtering. Do not select this for a child’s device.
Limit Adult Websites uses Apple’s continuously updated database of adult content domains. Safari checks each URL against this database before loading. Known adult sites get a block page. You can supplement this by manually adding URLs to the Never Allow list for any sites you specifically want blocked that Apple has not flagged.
Allowed Websites Only is the most restrictive mode. Safari shows only the sites you add to an approved list. Useful for very young children. For a 10-year-old this can feel very restrictive and may lead to frustration, but it is the most technically complete block.
Phase 4: Enable Communication Limits
Under Screen Time, tap Communication Limits. This controls who your daughter can call, message, or FaceTime. Setting this to Contacts Only means she can only communicate with people already in her address book, which you manage.
Phase 5: Turn Off Location-Based Changes
Under Content and Privacy Restrictions, scroll to Location and set it to Don’t Allow Changes. This prevents the device location from being turned off without your passcode, which is useful separately from web filtering.
What These Controls Do NOT Cover
Screen Time web filtering applies to Safari. If your daughter downloads a different browser (Chrome, Firefox, Opera Mini, Brave), those browsers are not automatically subject to the same URL-level filtering unless you also restrict new app installs.
The fix: Under Content and Privacy Restrictions > Allowed Apps, disable Safari and instead install a browser that has its own filtering controls built in AND that cannot be deleted without your passcode. Alternatively, under iTunes and App Store Purchases, set Installing Apps to Don’t Allow so no new browsers can be added.
Search engine filtering: Set Google or Bing SafeSearch separately in their respective apps or web settings. Screen Time does not configure search results filtering automatically.
How Approval Requests Work
When your daughter tries to visit a blocked site, Safari shows a page with an option to submit an approval request to you. You receive a notification on your device. You can approve or deny with a single tap. Approvals can be set as permanent or one-time. This system works over iCloud push and does not require you to be near the device.
The point Tekvanta made about other browsers is something so many parents miss and it is the most common bypass kids figure out.
My nephew is 11 and figured out within a week that he could download Chrome and use it without the Safari filters applying. His parents had done everything right in Screen Time for Safari but never restricted new app installs. One App Store download later and the filters were effectively useless.
The fix is simple but you have to know to do it. In Screen Time, go to Content and Privacy Restrictions, tap iTunes and App Store Purchases, and set Installing Apps to Don’t Allow. From that point, your daughter cannot download any new apps without your passcode to approve it.
Also worth doing: go to the App Store on her phone and check what is already installed. Anything with a browser component (Reddit, Tumblr, Discord, TikTok) has an in-app browser that loads web content and is not filtered by Safari’s Screen Time settings. Screen Time has separate content ratings for apps (4+, 9+, 12+, 17+) but in-app browsers are harder to filter uniformly.
For a 10-year-old, I would also disable the App Store entirely for now. You handle all app installs yourself and add things as she needs them. You can always loosen that restriction as she gets older and demonstrates good judgment. Tightening it later after something happens is much harder than keeping it locked at the start.
Good thread. Want to add one thing about Search filtering that sits alongside Safari restrictions.
Even with Limit Adult Websites turned on, search results in Safari can still surface thumbnails and previews of content that is technically not on a blocked domain but is still age-inappropriate. Search engine safe search settings are separate from Safari content filtering.
Here is how to force SafeSearch for the main search engines:
Google SafeSearch: Log into her Google account (if she has one) at Your SafeSearch Setting and turn SafeSearch on. You can lock it with her Google account password so she cannot turn it off. Or in Google Family Link (if you use that system) SafeSearch can be enforced at the account level.
Bing SafeSearch: Go to Search - Settings and set SafeSearch to Strict. Sign in to lock it.
On the router level: if you want a broader solution beyond just the iPhone, DNS-based filtering through your home WiFi router can block adult content categories for every device on the network. Services like Cloudflare for Families (1.1.3.3) or OpenDNS FamilyShield are free and take about 5 minutes to set up in router DNS settings. This does not help when she is on mobile data away from home, but it adds a layer at home.
Layers matter. No single control is 100% effective on its own. Screen Time plus SafeSearch plus router DNS filtering together create meaningful friction. 
Screen Time vs Third-Party Parental Control Apps for Safari: What Each Actually Does and Where Each Falls Short
The Honest Assessment of Built-In Controls
Apple’s Screen Time is genuinely good for what it does. The URL-level filtering in Safari, the app usage limits, the approval request system, and the remote management through Family Sharing are all solid features that work reliably on iOS. For many families, Screen Time alone is enough.
But it has real gaps that are worth understanding before deciding whether third-party tools are worth adding.
What Screen Time Does Well
Web Content Filtering: The Limit Adult Websites mode uses Apple’s maintained blocklist and applies it to every page load in Safari, including redirects and embedded iframes. Known adult domains are blocked at the DNS resolution level within the app, meaning even if a site changes its URL structure, the domain-level block holds.
Private Browsing Restriction: When Content Restrictions are active, Private Browsing in Safari is disabled. The option simply does not appear. This closes a loophole that parents often worry about.
Remote Approval: The Ask to Allow system for app downloads and Screen Time limit extension requests works through iCloud push notifications. You can approve or deny instantly from your device. Approval history is logged.
Downtime Scheduling: You can set hours during which only specific apps (like Phone) work and everything else including Safari is locked. Useful for bedtime, school hours, or family dinner time.
Where Screen Time Falls Short
No Activity Reports for Web Browsing: Screen Time shows how much time was spent in Safari but does not show which websites were visited. You see “Safari: 47 minutes” but not the URL list. If you want to see actual browsing history, you either check the device directly (she can clear it) or use a third-party tool.
In-App Browsers Are Not Filtered: Social media apps, news apps, and many games have built-in web views that load external content. Screen Time’s web filter does not reach inside these in-app browsers. A blocked domain in Safari can be accessed through an in-app browser in a social app.
No Search Term Visibility: You cannot see what your daughter searched for in Safari, only how long she used the browser. Search term visibility requires third-party monitoring tools.
VPN Bypass: A sufficiently tech-savvy child can install a VPN app which tunnels traffic outside the Safari web filter. The fix is disabling VPN installation through Configuration Profile restrictions or using Screen Time to restrict the VPN settings toggle, which is available under Content and Privacy Restrictions > VPN.
Third-Party Options Worth Knowing
Bark: Works differently from traditional monitoring apps. Instead of showing parents everything, Bark uses pattern analysis to alert parents when potentially concerning content or conversations are detected. It covers web activity, texts, email, and social apps. Designed to give kids privacy while flagging genuine issues. Costs around 14 USD per month.
Circle: A hardware device plus app combination. The hardware plugs into your router and filters internet traffic at the network level, covering all devices at home. The app manages mobile data filtering when away from home. Good for whole-family coverage rather than per-device management.
Google Family Link: Free from Google. Works well if your child has a Google account and uses Android, but has limited functionality on iOS compared to Android. Useful primarily for Google account-level SafeSearch enforcement on iOS.
Qustodio: Offers detailed web browsing reports including visited URLs, search terms, and time per site. Works across iOS, Android, Windows, and Mac. Paid subscription. Useful if you want visibility into what is being accessed rather than just blocking access.
Which Approach Is Right for a 10-Year-Old
At age 10, a combination of Screen Time (for access control) plus a reporting tool like Bark or Qustodio (for visibility) covers both sides of the equation: limiting what can be accessed AND knowing what is being attempted. As she gets older and earns more trust, you can remove the reporting layer while keeping the access controls, then gradually loosen those too.
The goal is not permanent maximum restriction. It is a graduated trust-building process with technical guardrails appropriate to each age.
The VPN point from Astrynex is something I want to underline because kids figure this out faster than most parents expect.
My neighbor’s 12-year-old found a free VPN app within two weeks of getting a restricted iPhone. Once the VPN was on, all Safari filters were bypassed because the traffic was encrypted and tunneled through a server that did not apply any of the iOS filtering rules.
Here is how to block this specifically in Screen Time. Go to Settings > Screen Time > Content and Privacy Restrictions > scroll down to Network Access. Set VPN to Don’t Allow. This prevents any VPN profile from being activated.
Also go to Content and Privacy Restrictions > General and set VPN to Don’t Allow under the changes section. There are actually two places this appears and you want both locked.
While you are in there, also disable the ability to change cellular data settings. This prevents turning cellular off to avoid monitoring (some filtering setups monitor through specific network configurations).
One more: under Content and Privacy Restrictions, set Passcode Changes to Don’t Allow. This stops her from changing the device passcode, which would prevent you from accessing the device to check things manually.
These four settings together close most of the common technical workarounds a curious kid might find online. 
This is all really useful. Quick follow-up: what happens when she is at school or a friend’s house and connected to their WiFi? Do the Screen Time restrictions still apply, or does it only work on your home network?
Also wondering about YouTube specifically. Even with adult sites blocked, YouTube has a lot of content that is not technically adult but is definitely not suitable for a 10-year-old.
TechRider both good points. Answering both:
Screen Time restrictions travel with the device. They are enforced at the iOS level, not at the network level. It does not matter if she is on your home WiFi, school WiFi, or mobile data. The Content Restrictions apply regardless of network. The Safari web filter works the same way on every connection.
The exception is if she gets on a device that is not her iPhone at a friend’s house. Screen Time only controls the specific device it is set up on.
For YouTube: this is genuinely tricky and you are right to flag it. Standard YouTube has algorithms that can surface all kinds of content and the age restriction system is inconsistent. Two options:
Option 1: Disable the YouTube app entirely through Screen Time (Allowed Apps, scroll to YouTube, turn it off). Then install YouTube Kids instead, which is a separate app with a curated content library designed for children. YouTube Kids has three content modes: Preschool, Younger, and Older (8 to 12). Set it to the Older tier for a 10-year-old. It blocks comments, direct links, and restricts content to age-appropriate videos.
Option 2: If she needs access to regular YouTube for school content, go into the YouTube app settings and enable Restricted Mode, then lock it with your Google account password. Restricted Mode filters out a significant amount of mature content though it is not perfect.
For a 10-year-old I would go with YouTube Kids and block the standard YouTube app entirely. You can switch to Restricted Mode regular YouTube when she is 12 or 13 and you feel ready for that. 
The YouTube Kids recommendation is solid. I want to add one more platform that parents often forget to address: the Safari search bar itself.
Even with adult websites blocked, if a child types certain search queries into Safari, the search results page (on Google, Bing, or DuckDuckGo) can return text snippets, image thumbnails, and video previews that come from non-blocked domains. The actual destination site might be blocked when they click through, but the preview in search results is visible.
To address this properly: in Screen Time under Web Content, add the main search engine domains to Never Allow, and instead add the SafeSearch-forced versions to Always Allow.
For Google, the SafeSearch-locked URL is forcesafesearch.google.com. Add this to Always Allow. Then add google.com to Never Allow. This forces all Google searches through the SafeSearch-locked interface.
For Bing, the equivalent is strict.bing.com.
Also worth setting: in Settings > Safari > Search Engine, change the default search engine to a kids-focused one like Kiddle (kiddle.co) or SwissCows (swisscows.com) which both run their own child-safe search indexes and do not require separate SafeSearch configuration.
Small detail but it closes a gap that most people leave open even with a fully configured Screen Time setup. 
One practical gap in the Screen Time setup that is worth flagging for ElliotGraves: Screen Time does not notify you when your daughter tries to access a blocked site. You can see how much time she spent in Safari but you do not get an alert when a block is triggered.
This means if she is actively trying to find ways around the filters, you would not know unless you physically checked the device or she accidentally left evidence. For most 10-year-olds this is fine but as kids get to 11, 12, and into the teenage years, knowing when blocks are triggered becomes more useful.
This is where dedicated monitoring tools add real value on top of Screen Time. I came across Xnspy while researching options for a friend who was setting up parental controls for his 12-year-old. It offers features Screen Time does not, including browsing history logs showing actual visited URLs (not just time-in-app), keyword alerts that notify you when certain terms are searched or appear in messages, and app activity logs broken down by app and time of day.
The key distinction from Screen Time is visibility. Screen Time is primarily an access control tool. Xnspy is a monitoring and reporting tool. Used together they cover both sides: you block what you can at the access level through Screen Time, and you stay informed about what is being accessed or attempted through monitoring.
Worth looking into if you want reporting alongside blocking rather than blocking alone.
Document your setup.
After you configure Screen Time, write down or screenshot every setting you changed and where it is located. Settings > Screen Time is a fairly deep menu tree and when iOS updates happen, Apple sometimes reorganizes where things are. Having a record means you can quickly verify everything is still in place after a major iOS update.
Also: iOS updates can occasionally reset specific Screen Time settings, particularly after major version updates (like iOS 17 to iOS 18). After any software update on her phone, spend 3 minutes going back through Content and Privacy Restrictions to confirm the web content filter is still set correctly and the passcode is still active.
Two more settings I have not seen mentioned yet in this thread:
Under Screen Time > Communication Limits > During Screen Time, you can allow communication with contacts only or specific contacts only. During Downtime (scheduled lock hours), you can set it so she can only call specific people, like a parent’s number. This is separate from internet controls but part of a complete setup.
Under Content and Privacy Restrictions > Siri, disable Explicit Language and Web Search Content for Siri. Without this, she could ask Siri to search for things and Siri might return web results that bypass Safari filtering.
Set it, document it, verify it after updates. That is the maintenance cycle. 
Every discussion about parental controls eventually hits the same wall: a single setting can almost always be worked around. Not because children are malicious, but because they are curious, they talk to friends who have found workarounds, and they are persistent when something is in the way of what they want to do.
The approach that actually works is layered. Multiple overlapping controls where bypassing one still leaves two or three others in place. Here is the complete layered setup for a 10-year-old’s iPhone.
Layer 1: Screen Time Core Setup
Start here. This is the foundation everything else builds on.
Settings > Screen Time > Turn On Screen Time > This is My Child’s iPhone
Set Screen Time Passcode: Use a 6-digit code. Do not use your device unlock PIN or a PIN your daughter might guess. Store it somewhere you will not forget (password manager or written down somewhere secure).
Content and Privacy Restrictions: Toggle ON.
Web Content: Set to Limit Adult Websites. Manually add any specific sites to the Never Allow list as you encounter them.
iTunes and App Store Purchases: Installing Apps set to Don’t Allow. In-App Purchases set to Don’t Allow. Deleting Apps set to Don’t Allow.
Allowed Apps: Review and disable anything she does not need. At minimum disable Safari if you plan to use a filtered alternative browser. Consider disabling the App Store icon entirely.
Passcode Changes: Don’t Allow.
Account Changes: Don’t Allow.
Cellular Data Changes: Don’t Allow.
VPN: Don’t Allow (appears in both General and Network sections, set both).
Location Services Changes: Don’t Allow.
Layer 2: Safari-Specific Hardening
If you keep Safari enabled:
Set default search engine to a child-safe search engine. Settings > Safari > Search Engine > change from Google to a kids-focused alternative.
Add forcesafesearch.google.com to Screen Time Always Allow list. Add google.com to Never Allow list. This routes all Google searches through the SafeSearch-locked interface.
Disable AutoFill for passwords (prevents saving credentials for accounts you do not know about). Settings > Safari > AutoFill > turn off Names and Passwords.
Layer 3: YouTube
Uninstall standard YouTube. Install YouTube Kids from the App Store. Set content level to Older (ages 8 to 12). In YouTube Kids settings, turn off Search entirely if you want the most controlled experience. Without search, she can only watch what appears in curated recommendations.
If you later allow standard YouTube, enable Restricted Mode within the app and lock it with a Google account password.
Layer 4: Communication Controls
Screen Time > Communication Limits > During Screen Time: Contacts Only.
During Downtime: Specific Contacts (add your number and other trusted family).
Under Contacts: Make sure the contacts list on her phone only contains people you know and trust. Remove any unknown contacts.
Layer 5: Downtime Schedule
Set a downtime schedule that locks the device during sleep hours and school hours.
Screen Time > Downtime: Set start and end times. During downtime, only apps you specifically allow (like Phone for emergencies) remain accessible. Safari and most apps are locked.
This removes the “secret browsing at 2am” scenario entirely.
Layer 6: Router-Level DNS Filtering for Home WiFi
Set your home router’s DNS servers to Cloudflare for Families: 1.1.3.3 and 1.0.0.3. These DNS servers block adult content categories at the network level for every device on your home WiFi, including her iPhone, your smart TV, and any laptop. Free, takes 5 minutes, no ongoing management needed.
This does not help when she is on mobile data away from home, but adds a layer at home.
Layer 7: Regular Check-Ins
Technical controls work best alongside open conversations. Sit with her periodically and review what apps she is using and how. Ask about what she does online. Kids who feel they can talk to parents about what they see online are more likely to come to you when something bothers them rather than hiding it.
Schedule a time every month to check Screen Time weekly reports together. Frame it as a shared activity rather than surveillance. This builds the habit of transparency that matters more as she gets older and the technical controls loosen.
Summary: Full Checklist
Screen Time enabled with parent passcode: Done
Content and Privacy Restrictions ON: Done
Web Content set to Limit Adult Websites: Done
Installing Apps restricted: Done
In-App Purchases blocked: Done
App deletion blocked: Done
VPN blocked (both settings locations): Done
Passcode changes blocked: Done
Account changes blocked: Done
Cellular data changes blocked: Done
Downtime schedule configured: Done
YouTube Kids installed, standard YouTube removed: Done
Search engine changed to child-safe option: Done
Siri explicit language and web search disabled: Done
Communication limited to contacts: Done
Router DNS set to family filtering: Done
Settings documented for post-update verification: Done
PulseNext that checklist is the kind of thing that should be handed to every parent at the point of purchase when they buy a child’s first iPhone. Genuinely complete.
Coming back to ElliotGraves original question: you asked whether third-party apps are worth it alongside the built-in controls. After everything in this thread, here is a simple way to think about it:
Screen Time is your lock on the door. It restricts what can be accessed, blocks purchases, limits communication, and schedules device availability. It is free, built in, and reliable.
Third-party tools are your window to see what is happening on the other side of that door. They give you browsing history, search term logs, keyword alerts, and activity patterns. They answer “what is being attempted” while Screen Time answers “what is being allowed.”
For a 10-year-old just getting her first phone, I would say start with Screen Time only and get comfortable managing it. That alone, set up properly as this thread describes, is solid protection. After three to six months, if you want more visibility into her browsing patterns, look at adding a monitoring layer.
The worst outcome is doing nothing because the setup feels complicated. Even five of the settings from PulseNext’s checklist is dramatically better than a completely open device. Start with the Screen Time passcode, web content filtering, and restricting new app installs. Those three alone close the biggest gaps. Add everything else over the next few days as you have time. 