How to Block YouTube on a TP-Link Router (2026)

Block YouTube on a TP-Link router using Parental Controls and URL filtering. Works on Archer, TL-WR, and TL-ER series. Free, no app needed. Updated for 2026.

Last updated 11 April 2026·
Difficulty🔨🔨🔨
Free
Bypass risk🐹🐹🐹🐹🐹

What You'll Need

  • A TP-Link router (Archer C series, Archer AX series, TL-WR series, or similar)
  • A device connected to your TP-Link Wi-Fi (laptop or desktop recommended)
  • About 10–15 minutes
📡

TP-Link Deco mesh system? Different guide.

This guide covers TP-Link routers with a web admin panel (Archer series, TL series). If you have a TP-Link Deco mesh system, see the Deco guide — Deco is managed entirely via the Deco app and has different parental controls.

Part 1: Access the TP-Link Router Admin Panel

Open a browser on a device connected to your TP-Link Wi-Fi

Use a laptop or desktop for the easiest experience. You must be connected to the TP-Link network (Wi-Fi or Ethernet) to access the admin panel.

Navigate to the admin panel

Type one of the following into your browser address bar:

  • tplinkwifi.net (most Archer routers)
  • 192.168.0.1 (most common fallback)
  • 192.168.1.1 (some older models)

If none of these work, find your router's IP via your device: on Windows, open Command Prompt and type ipconfig — look for Default Gateway.

Log in with admin credentials

Default credentials:

  • Username: admin
  • Password: admin

On newer Archer routers (AX series and some AC series), you would have set a custom password during initial setup. If you've forgotten it, check the sticker on the bottom of the router — some newer models print a unique default password there.

If you've completely forgotten your password: Hold the Reset button (pinhole on the back) for 10 seconds to factory reset the router. Note this wipes all your settings including Wi-Fi name and password.

Part 2: Enable Parental Controls and Block YouTube

TP-Link's admin interface changed significantly between older (green/classic UI) and newer (blue/Archer UI) firmware. Both paths are covered.

Newer TP-Link Firmware (Blue Archer UI — 2018 onwards)

Go to Advanced → Parental Controls

In the left sidebar or top menu: AdvancedParental Controls (may also appear as Security → Parental Controls on some models).

Add a parental control profile

Click Add. A wizard opens to create a rule:

  • Device: select your child's device from the connected device list (or enter their device's MAC address manually)
  • Content Restriction: enable it

Add YouTube to the blocked URL list

Under Content RestrictionBlocked Content (or URL Filter), click Add and enter each domain:

  • youtube.com
  • youtu.be
  • music.youtube.com
  • googlevideo.com

Click Save.

Set the rule to Always block (or schedule it)

In the same rule, under Effective Time, select All Day and check all days of the week — or set a schedule if you want YouTube available during certain hours.

Save and enable

Click Save. The rule is now active for the selected device.

Older TP-Link Firmware (Green Classic UI)

Go to Security → Parental Controls

In the classic interface: SecurityParental Controls.

Enable Parental Controls

Check Enable Parental Controls. Set the MAC Address For PC of Parent: enter the MAC address of your own device (or a device that should not be filtered). This tells the router which device bypasses the rules.

Add the child's device to the control list

Click Add New → enter your child's device MAC address → set Allowed Domain Name to the websites they're allowed to access, or leave empty and use the Blocked Domain approach if your router supports it.

Note: Older TP-Link Parental Controls use an allowlist approach — you specify permitted sites, and everything else is blocked. For this approach:

  • Add only the sites your child is allowed to visit (e.g. khanacademy.org, bbc.com)
  • YouTube is blocked by default since it's not on the allowed list

Set schedule and save

Set Access Time to the hours the rules apply (or select All Day). Click Save and Enable this entry.

Part 3: DNS Filtering as a Backup Layer

URL filtering on TP-Link routers is per-device. DNS filtering at the router level blocks YouTube for every device on the network without needing to list each one.

Go to Advanced → Network → DHCP Server (or WAN)

On newer Archer routers: AdvancedNetworkDHCP Server. Look for Primary DNS and Secondary DNS fields.

Alternatively: AdvancedWAN → look for DNS settings in the WAN connection profile.

Set DNS to CleanBrowsing Family

Change the DNS entries to:

  • Primary DNS: 185.228.168.168
  • Secondary DNS: 185.228.169.168

Click Save.

Restart the router

Go to AdvancedSystem ToolsReboot and reboot the router. On older routers: System ToolsReboot. After reboot, youtube.com will fail to resolve on every device connected to this router.

Part 4: Block Specific Devices from the Internet Entirely (Access Control)

For complete blocking of a device (not just YouTube):

Go to Advanced → Security → Access Control

AdvancedSecurityAccess Control (on newer Archer routers), or Access Controls on older models.

Enable Access Control and block the device

Toggle Access Control on. Find your child's device in the connected device list → click the Block icon. This blocks all internet access from that device entirely.

For scheduled blocking, click Edit and set the hours when internet access is allowed.

🐹

How Kids Bypass This

Default admin/admin credentials: TP-Link's factory default login is admin/admin — one of the most widely known default passwords. If you haven't changed it, a child who looks this up can log into the admin panel and disable filtering. Change the admin password immediately: Advanced → System Tools → Administration → Account Management.

Mobile data bypass: Parental Controls only applies on your home Wi-Fi. On mobile data, the phone bypasses your router. Use Screen Time (iPhone) or Family Link (Android) for device-level coverage.

Connecting to a different Wi-Fi: If your child connects to a neighbour's Wi-Fi, a public hotspot, or a mobile hotspot, the TP-Link block doesn't apply.

MAC address spoofing: TP-Link's per-device Parental Controls use MAC addresses to identify devices. Technically savvy users can change their device's MAC address to impersonate an unfiltered device. DNS filtering (blocking all devices) is less spoofable.

Guest network: TP-Link guest networks may not inherit Parental Controls rules. Disable the guest network if your child has access to it, or apply DNS filtering to the guest network settings too.

🔨

Counter-Measures

Change the admin password from admin/admin now. This is the most critical hardening step for any TP-Link router.

Pair Parental Controls with DNS filtering: The Parental Controls URL filter applies per-device. DNS filtering applies to all devices. Using both ensures YouTube is blocked even if your child connects with an unlisted device.

Use the per-device approach for shared households: If adults in the house need YouTube access, set DNS filtering per-device using the Parental Controls rule (with DNS override in the rule) rather than changing the router-wide DNS.

Check the Connected Devices list occasionally: Advanced → Network → DHCP Client List shows every device currently connected to your router. If you see an unfamiliar device, it may be a second phone or tablet that doesn't have filtering applied.

Want a personalised plan?

Answer 5 questions and get a guide for every device your child uses.

Take the Quiz →
Take the Quiz →