How to Set Up Parental Controls for Online Games Safely (2026)

How to set up parental controls for online games comes down to five things: a separate child account, a parent PIN nobody else knows, content and purchase locks, chat and friend restrictions, and a playtime limit you actually stick to. Most consoles and mobile operating systems ship all of these already, but they hide in different menus on every device, and the defaults are usually far too open.

The whole job takes about 20 minutes per device, and it is worth doing across every screen in the house. This guide walks through Apple, Google, PlayStation, Xbox, Nintendo and PC settings in menu-path order, then covers the part most guides skip: what to do when your child finds a way around the limits.

One thing to set expectations for early. Built-in controls handle spending, ratings and playtime well. They handle strangers much less well, because the risk in most online games lives inside the game itself, not on the device. Treat these settings as the outer wall, not the whole house.

Table of Contents

1. 1What You Need
2. 2Step 1: Choose the Right Account and Device
3. 3Step 2: Set Age and Content Restrictions
4. 4Step 3: Limit Purchases and In-Game Spending
5. 5Step 4: Control Multiplayer and Voice Chat
6. 6Step 5: Set Playtime Limits and Quiet Hours
7. 7Step 6: Review Privacy, Profile, and Sharing Settings
8. 8Step 7: Test the Settings with the Child
9. 9Step 8: Review and Update Controls Regularly
10. 10Common Mistakes
11. 11Frequently Asked Questions
12. 12Should I allow my 10 year old to play Roblox?
13. 13How can I block inappropriate content in online games?
14. 14Can I restrict my kid from buying things on Xbox?
15. 15Can a 7 year old play Fortnite with parental controls on?
16. 16What do I do when my child bypasses the limits?
17. 17Do parental controls turn off automatically when a child turns 18?
18. 18Conclusion

What You Need

Before you change a single setting, gather four things: the accounts your child actually signs in with, every device they play on, their age, and a PIN you will not write down anywhere near the console.

The account question matters more than it sounds. Plenty of families set restrictions correctly and then wonder why nothing changed, because the child was playing on a secondary adult profile or on a shared handheld. The control only applies to the profile it is set on.

Also decide who administers. On Xbox and PlayStation, the strongest setup is a parent account that owns the console with a child account underneath it. That way restrictions travel with the child across every TV, tablet and PC they sign into, rather than living on one machine.

Step 1: Choose the Right Account and Device

List every device that can run a game: consoles, the family TV, tablets, a PC, a phone. Then confirm which account is active on each one. On a shared console, sign the child out of your profile and into theirs before changing anything.

Then check the game’s own account system. A console PIN does not stop a child buying V-Bucks inside Roblox or an Apex skin through the Epic Games Store. Those live on the publisher’s account, and they need their own lock.

Here is the master map. Menu names shift slightly with system updates, so if a label differs, look for the closest match.

Platform	Where the controls live	PIN type	Purchase control	Chat control
iPhone, iPad	Settings > Screen Time	Screen Time passcode	Ask to Buy, in-app purchase limit	Communication Limits, Communication Safety
Android phone or tablet	Settings > Digital Wellbeing > Parental controls	Parent PIN in Google Play	Purchase approvals, budget alerts	Content filtering, app permissions
PlayStation 5 or PS4	Settings > Family Management (PS5) or Settings > Parental Controls > Family (PS4)	4-digit account password	Wallet spending limit, approval for purchases above it	Friends list, message restrictions
Xbox Series X|S, Xbox One	Xbox app or console > Family > Family settings	Family PIN (net passcode)	Purchases require adult approval	Xbox voice, text chat and party controls
Nintendo Switch	User icon > Nintendo Switch Parental Controls	Parental Controls PIN	Require PIN on Nintendo eShop purchases	Voice chat per game, in-game communication
PC (Steam)	Steam > Settings > Family	Family Sharing management	Store purchase approval per account	Friends-only chat in individual games

Two more account details worth sorting out. Turn on two-factor authentication on the parent account, since that account can change every restriction. And if a game was bought on your account and is shared through a family group, check whether your child can see your profile’s friends list when they launch it.

Step 2: Set Age and Content Restrictions

Ratings tell you what a game’s publisher intended, not what your child will encounter. The ESRB and PEGI labels are a starting point; you make the final call.

Start with the rating system your region uses. ESRB covers North America with Everyone, Everyone 10+, Teen, Mature 17+ and Adults Only 18+. PEGI does the same job in Europe with 3, 7, 12, 16 and 18, plus a content descriptor for things like bad language, fear, gambling or in-app purchases.

Then set the ceiling. On Apple, that is Settings > Screen Time > Content & Privacy Restrictions > Game Center > Age Rating, where you can cap allowed ratings and separately toggle In-Game Purchases. On PlayStation, the same idea sits under Family Management > Parental Controls > Content restrictions, where each rating gets its own Allow or Block choice.

The descriptor matters as much as the number. A game rated for everyone can still carry chat, user-made levels and voice. Check the descriptors, not just the age.

A useful shortcut is the preset. Apple’s Screen Time offers age bands, Google Play offers content ratings by family, and Nintendo offers a general restrictions mode per user. A reasonable starting point by age:

• Under 7: rated E or PEGI 3 only, no voice, no purchases, friend list invisible.
• 7 to 10: E10+ or PEGI 7, friend approvals required, voice off or join-by-invite, spending locked.
• 11 to 13: Teen or PEGI 12, friends-only chat, purchases still parent-approved, daily playtime cap set.
• 14 and up: Mature or PEGI 16 with discussion, chat still friends-only, spending limit rather than a block.

Treat these as starting points, then adjust after you have watched how your child actually behaves in a game for a few weeks.

Step 3: Limit Purchases and In-Game Spending

This is where parental controls pay for themselves fastest. Microtransactions and gacha mechanics are designed to encourage repeat small purchases, and a card saved in a store account is an open wallet.

On Apple, turn on Ask to Buy (Settings > Screen Time > Ask to Buy) so nothing installs without your approval, then set an app limit on the game’s store or set spending limits inside Screen Time > App Limits > Amount of Time. On Android, open Google Play > Family > Family settings and turn on Require password for purchases plus budget and approval alerts.

On Xbox, every purchase on a child account routes through an adult approval request in the Xbox app or console store. On PlayStation, set a Wallet spending limit under Family Management so any purchase above it needs the account password, and set a monthly spending limit that applies to all requests. On Nintendo, set Require PIN for Nintendo eShop purchases and set a fixed amount per purchase and per period.

Then cover the in-game layer, which most parents miss. Epic Games, Riot, Roblox and Steam each keep their own wallet, and those purchases never touch the console PIN. Roblox and Fortnite both have their own parental control panels with an age-based chat level and a spend limit set in Robux, V-Bucks or real currency.

Finally, remove saved payment methods from the accounts your child can reach. A stored card with no PIN requirement is the whole problem in one line of settings.

Step 4: Control Multiplayer and Voice Chat

Stranger contact is the real reason to set this up. Parents on Reddit forums describe it plainly: blocking a blacklist of bad accounts never works, because the next one appears an hour later. Approve a whitelist of specific friends instead, and nothing else gets through.

On Xbox, Family settings > Privacy contains blocks on the ability to join multiplayer games, join voice chat, see who is online, and receive unexpected invitations. Setting all four for a younger child removes most of the risk in one screen.

On PlayStation, the equivalent is Settings > Friends, where you control who sees your profile and what you can be messaged about, plus Manage Requests under Notifications. Blocking Add Friend at this level prevents strangers from building a contact list in the first place.

On Nintendo, Communication Restrictions under Parental Controls decide which titles can use voice or text chat at all, and how those games check for approval before connecting. Pair it with a Nintendo Switch Parental Controls setting for who can send messages.

On Steam, Privacy > Steam Friends limits who can see your profile and whether you can chat, but the setting lives per game rather than account-wide. Check each title individually, and treat Family Sharing as account sharing rather than a safety feature.

On phones, Apple applies Communication Limits to Messages, FaceTime and phone calls, and Communication Safety flags known concerning patterns across apps. On Android, Digital Wellbeing > Parental controls > Content filtering restricts search results, while Google Play’s family settings handle app-level chat permissions.

Discord deserves its own note. Its terms require users to be 13 or older, so do not use it as a primary chat app for a younger child. If an older teen uses it, pair the app with two-factor authentication and check the friend request settings for strangers.

Step 5: Set Playtime Limits and Quiet Hours

Pick a number your child can realistically hit on a school night, then set it as a cap rather than trying to police every session. A limit that gets ignored teaches kids that limits are negotiable.

Apple handles this well: App Limits for a daily allowance per app, Downtime for a scheduled block, and a schedule that can differ for weekends and school nights. Android has a screen time limit per app plus a Focus mode schedule through Digital Wellbeing. PlayStation has a Playtime Limit with a permitted duration and a mandatory stop time plus optional hours the console can be locked. Xbox has a screen time limit per account, including separate limits for console and PC. Nintendo Switch gives you playtime limits plus a Stop Time that locks the console for the night.

On PC, PC games do not consistently respect console limits. Windows itself has a family safety option with app and web time rules under the family group, and Steam tracks playtime per account but does not enforce a cutoff on its own. A router or a third-party timer is the practical answer here.

Quiet hours matter as much as the daily cap. Bedtime, school mornings and family meals are the blocks worth defending.

Step 6: Review Privacy, Profile, and Sharing Settings

Profiles leak more than people expect: a real first name, an age, a school, a town and a linked social account are enough to identify a child.

On PlayStation, review Profile > Privacy Settings for each of the profile’s basic information, online status, game activity, friends and screenshots. On Xbox, Privacy > Xbox network privacy controls let you block personal info, connections and game details from being shared. On Nintendo, set the profile to display only first name and last initial, and check the posting permissions for social network features.

Then handle what has already been shared. Old screenshots, clips and past posts do not disappear when you change a setting. Review the activity history in the account and remove anything that shows a location, a school name or a face.

Also decide about broadcast and capture. If your child plays competitive games, capture settings control whether the game records and streams. Set capture to friends-only or off, and turn off broadcasting to strangers.

Step 7: Test the Settings with the Child

Sit down together and try to break it on purpose, without typing the PIN where anyone can see it. Ask your child to attempt a purchase and confirm a request reaches you first. Then have them try to add a random player as a friend and check the block holds.

Next, confirm the chat setting the way the child would meet it: try to send a message to a non-friend and make sure it is refused. Then ask them to open a mature-rated game and verify it is blocked. Finally, check that the playtime limit locks the console or closes the game at the set time.

Do this once after setup and again after any major change. It takes ten minutes and catches the settings you applied to the wrong profile.

Step 8: Review and Update Controls Regularly

Controls need revisiting on a schedule and on events. Every few months, and immediately whenever your child adds a new game, gets a new device, turns on a new social app, or asks to change a setting.

Then there is the part no guide covers properly: what to do when the limits get bypassed. It happens often. On forums, parents describe children switching to an adult profile, creating a fresh account, or resetting the console to escape restrictions.

When it happens, work down a short list. First, set the parent account password to something long and random, since a four-digit code on a shared console is guessable. Next, move your child onto a dedicated account with no adult privileges and remove their ability to create profiles. Then lock the console or device password behind the parent account so a factory reset needs your code.

After that, deal with the account rather than the hardware. Because most game platforms enforce restrictions server-side on the account, changing console settings will not stop purchases made inside a game. Set the spend limit in the game’s own parental panel as well as on the console.

Finally, layer it. Parents on tech forums recommend router-level access restrictions or a self-hosted DNS filter such as a network-wide blocker as an extra layer that console settings cannot bypass. On Windows, the family safety option gives app and web rules the game itself will not enforce. And if your child is old enough, explain what you changed and why. A kid who understands the rule is much harder to talk around than one who just finds the hole in it.

Common Mistakes

Using one adult account for everything. The single most common setup error. If the child is signed into your profile, your purchases, your friends list and your saved cards are all in scope.

Setting restrictions on the wrong profile. A console can hold six or more profiles, and a PlayStation network account can hold several people. Confirm you are editing the child profile, then sign out and back in to check it stuck.

Assuming console settings cover in-game spending. Wallet limits on the console say nothing about V-Bucks bought inside the game. Set the limit in the game’s own parental panel too.

Treating the age rating as the decision. A PEGI 7 rating on a user-generated-content platform does not describe what a ten-year-old will meet in a public server. Read the descriptors, then set the in-game chat level yourself.

Never testing the result. Settings saved successfully and settings that work are two different things. Ten minutes of deliberate testing catches most of the gaps.

Writing the PIN on a sticky note. If the PIN lives where the child can see it, none of the above matters. Use a password where the platform allows one, and never share it, even with a child who asks nicely.

Frequently Asked Questions

Conclusion

Start with the account, not the settings menu. List every device and every game account your child can reach, create a separate child profile on each one with a parent PIN you have never written down, turn on the strictest privacy and communication options available, then sit down and test all five areas together. Do it again after every new game, every new device and every few months, because the defaults reset more often than parents expect.