Short answer
Built-in controls (Screen Time, Family Link) are best for app approvals and screen time on one device. A DNS filter like Sheepdog Filter is best for blocking sites, apps and categories across every device, plus bedtimes. Router filters vary a lot by brand. Monitoring apps read messages and are the most invasive. A good, free combination: built-in controls plus a DNS filter.
1. Built-in device controls
Apple Screen Time, Google Family Link, Microsoft Family Safety, Xbox and Nintendo apps.
- Great at: approving app downloads, time limits per app, locking settings.
- Weak at: filtering websites outside the built-in browser, and working across different brands of device.
2. DNS filters
Sheepdog Filter, NextDNS, OpenDNS, Cloudflare for Families.
- Great at: blocking sites, apps and whole categories on every device, including TVs and consoles, with nothing to install. Bedtimes and schedules.
- Weak at: anything inside an app, like specific videos or messages.
3. Router parental controls
eero Plus, Deco HomeShield, Netgear Armor and others.
- Great at: pausing the internet for a device.
- Weak at: often a paid subscription, filtering is usually basic, and it only works at home.
4. Monitoring apps
Apps that read messages, searches and social media and alert parents to concerning content.
- Great at: spotting bullying, self-harm or predatory messages.
- Weak at: privacy and trust. They're the most invasive option and need to be installed on each device. See Sheepdog Filter vs Bark.
The combination most families use
Built-in controls for apps and screen time, plus a DNS filter for everything else. Both are free. Add monitoring only if you have a specific worry, and tell your child it's there.
Sheepdog Filter
The internet, childproofed in five minutes.
One switch per worry, every device in the house, and a plain-English report each week. Free to start, no app to install.
Start free