How to Block TikTok, Instagram, and YouTube on All Your Kids' Devices at Once

TL;DR — Uninstalling TikTok or Instagram on one device doesn't help when your kid has three devices. The fix is DNS-level blocking, which stops those apps from working on every device that uses your profile — phone, tablet, laptop, console, Chromebook — regardless of whether they're on your WiFi or cellular. Guardino does this with one QR code per device. Here's exactly how.

A mom I spoke with last month had uninstalled TikTok from her 12-year-old's iPhone three separate times. Each time, it reappeared within a week. The issue wasn't that her son was sneaking around — iOS lets kids re-download any previously installed app without a parent's approval in the default config. She needed something that worked at a layer lower than "which apps are on this phone."

That's what DNS blocking does. Below the app. Below the browser. Below the device. At the network request level. The app can be installed and the icon can still be on the home screen, but when it tries to load, it returns nothing. For most kids, that's the end of the story.

This guide covers three methods, from easiest to most robust, and explains when each makes sense.

Why app-level blocking keeps failing

Most of what's marketed as "parental control" lives at the app layer. iOS Screen Time can hide TikTok's icon. Android Family Link can block the app's install. Qustodio can kill the process when it launches.

All of these are good. None of them are sufficient on their own, because:

• Kids have multiple devices. An app blocked on the iPhone is still on the iPad.
• Web versions bypass app controls. TikTok, Instagram, and YouTube all work in a browser.
• iOS apps re-download without parental approval in the default config.
• Android lets kids enable "unknown sources" and sideload APKs once they figure it out.
• Chromebooks don't use iOS or Android parental controls at all.

DNS blocking cuts below all of this. If the device can't resolve tiktok.com, it doesn't matter whether the request came from the app, a browser, a sideload, or a web shortcut. Nothing loads.

Method 1: Router DNS (home only, covers every device)

If all the kid's device use happens at home, this is the simplest possible fix. Change your router's DNS to a filter that blocks the platforms you want, and every device on your WiFi is covered.

The full walkthrough is in how to block adult content on your home WiFi without apps — the mechanics are identical, only the blocklist differs.

The limits:

• Only works inside your home. Cellular data bypasses it entirely.
• Same rules for everyone on the network. Mom can't watch Instagram Reels while the kids can't.
• Doesn't survive your kid going to a friend's house.

If those limits matter, skip to Method 3. If they don't, router DNS is a 5-minute solve.

Method 2: Built-in OS parental controls

Both Apple and Google ship parental controls that can block apps and websites.

iOS Screen Time. Settings → Screen Time → Content & Privacy Restrictions → Content Restrictions → Web Content → Limit Adult Websites. Then scroll down to "Never Allow" and add tiktok.com, instagram.com, youtube.com. This blocks in Safari but most third-party browsers ignore it. You'll also want to hide the apps themselves: Screen Time → App Limits → add TikTok/Instagram/YouTube with a 1-minute daily limit, then lock it behind a passcode only you know.

Android Family Link. Install Family Link on your phone and your child's phone. Under their profile, go to Controls → Content restrictions → Google Chrome → add site exceptions. Under "Apps installed," you can block individual apps. Family Link is more robust on Android than Screen Time is on iOS because Google has deeper OS integration for child accounts.

Windows (Microsoft Family Safety). Family Safety → Content filters → Web and search → Add to blocked sites. Works for Edge and Chrome when the child account is signed in.

These methods work, but they fragment your setup. Three kids across iOS, Android, and Windows means managing three different tools that don't talk to each other. Each OS update risks breaking something.

Method 3: Per-device DNS profile (works everywhere)

This is the method we use at Guardino and the one that survives most of the real-world edge cases.

A DNS-over-HTTPS (DoH) profile is a small configuration file that tells a device: send all your DNS queries to this specific, filtered resolver, and refuse to send them anywhere else. Once installed, the profile travels with the device. Home WiFi, cellular, school WiFi, the neighbor's guest network — same filter applies everywhere.

With Guardino, the process per device is:

1. Open the Guardino admin on your phone.
2. Tap "Add device" under the child's family member profile.
3. A QR code appears. Point the child's phone camera at it.
4. Tap "Install" on the configuration prompt. Enter the device passcode once.

The whole thing takes about 90 seconds per device. The kid's phone is now filtered everywhere. Specific platforms you can toggle:

Platform	Full block option	Dark-pattern-only option (Mind Shield)
TikTok	Block tiktok.com entirely	Allow videos, block infinite For You feed
Instagram	Block instagram.com	Allow DMs and posts, block Reels + Explore
YouTube	Block youtube.com	Allow watching linked videos, block Shorts + recommender
Snapchat	Block snapchat.com	Not applicable (less algorithmic)
Twitter/X	Block twitter.com	Allow logged-in mode, block algorithmic feed

The Mind Shield option is the one most parents I talk to find most useful. It respects the "my kid uses Instagram to keep in touch with cousins" reality while removing the attention mechanics they don't need to be fighting with.

Why blocking dark patterns might matter more than blocking apps

Research on adolescent social-media use has moved over the past five years from "screen time is bad" toward a more nuanced finding: specific design patterns cause specific harms, and not all social-media use carries the same risk.

The APA's 2023 health advisory called out three mechanisms specifically:

1. Variable-ratio reinforcement — the slot-machine reward schedule of scrolling. The same mechanism that makes gambling addictive.
2. Intermittent social validation — like counts, notification pings, and follower metrics delivered at unpredictable intervals.
3. Algorithmic content prioritization — feeds that promote emotionally charged, polarizing content because it keeps attention longer.

Notice what's not on that list: "using social media to talk to your friends." The harm isn't in the platform. It's in specific features of the platform.

Jonathan Haidt's work and the research from the Center for Humane Technology reach similar conclusions. The compulsion isn't a character flaw or lack of willpower — it's variable-ratio reinforcement working exactly as designed.

This is what Guardino's Mind Shield targets. Not the app. Not the content. The specific API endpoints that deliver the infinite-scroll queue, the autoplay next-video signal, the notification heartbeat, the like-count delta. Block those, and Instagram becomes a normal photo-sharing app again. YouTube becomes a video site where you search for what you want and leave. TikTok becomes genuinely broken, because nearly all of its UX is built on the feed — which is arguably the right outcome for kids under 14.

Choosing between full block and Mind Shield

Here's the practical framework we give parents:

Full block the app if:

• The kid is younger than the platform's stated age requirement.
• You've had the conversation and decided this platform isn't right for them yet.
• The kid's school has no legitimate reason to use it.
• You want zero exposure to that platform's content during school/study hours.

Mind Shield only if:

• The kid is at the age where the platform has real social utility (messaging cousins, group chats, sports team coordination).
• You want to reduce the compulsive-use risk without fully cutting access.
• You're trying to teach self-regulation, not enforce abstinence.

Most of the families we work with run a hybrid: full block on TikTok until 14, Mind Shield on Instagram and YouTube throughout, full access to WhatsApp and iMessage. The exact mix is a values call, not a technical one.

What Guardino does differently

Three things specifically built for this use case:

Per-user profiles from one admin. You don't need to manage different subscriptions for each child. One admin, one family group, each member gets their own DoH endpoint. Adjust the 15-year-old's rules without touching the 10-year-old's.

Platform-specific toggles, not just "block social media." The 11 one-tap protections include granular controls: TikTok alone, Instagram alone, YouTube Shorts alone. Generic "social media block" categories in other DNS services tend to be too coarse — they'll either leave something you wanted blocked, or block something you needed for a legitimate purpose.

Mind Shield, which no other DNS filter ships. This is the hard engineering work. It requires maintaining lists of specific endpoints for specific platforms, updating them as platforms ship new versions, and distinguishing "API call that delivers infinite scroll" from "API call that delivers your cousin's new photo." We do this because it's the thing that actually helps, not because it's the thing that's easy.

For a fuller comparison of options, see NextDNS vs Guardino, AdGuard vs Pi-hole vs Guardino, and the best parental control setup for non-technical parents.

A last honest note

Every technical tool in this category is a conversation aid, not a conversation replacement. When a kid asks why TikTok isn't loading, the right answer isn't "because the DNS filter is blocking it." It's "because we've talked about how that app is designed and we're not going to use it right now." The filter is the enforcement. The conversation is the point.

Pew Research's 2024 teens and technology report found that teens whose parents explained the reasoning behind tech rules were significantly more likely to follow those rules as they got older, and significantly more likely to disclose problems they encountered online. The filter that stops working the day the kid turns 15 is the filter that was never explained. The filter that keeps working is the one backed by trust.

Give them the why. Let the tool handle the how.

FAQ

Can I block TikTok but allow Instagram, or vice versa? Yes. DNS filters let you toggle each platform independently. With Guardino, every family member has their own profile, so you can block TikTok for your 11-year-old while leaving Instagram accessible for your 15-year-old.

Will this block YouTube entirely or just YouTube Shorts? Both are options. Blocking YouTube entirely stops youtube.com from resolving. Blocking only Shorts is possible with Guardino's Mind Shield, which targets the specific endpoints that deliver the short-form feed while leaving regular YouTube videos accessible.

Does this work when my kid is on school WiFi or cellular? Yes, if you install a per-device DoH profile (which Guardino does with one QR code). A router-only setup stops working the moment the device leaves home. The profile travels with the device.

Can my kid bypass the block by changing their DNS or using a VPN? On most kids' devices, DNS settings require the parent's passcode. VPN installs can be blocked via iOS Screen Time and Android Family Link. It's not 100% proof, but it raises the effort to the point where most kids give up or come talk to you.

What's the difference between blocking the app and blocking dark patterns? Blocking the app means the app won't load at all. Blocking dark patterns (Mind Shield) means the app opens, but the infinite scroll, autoplay, and notification loops that make it compulsive are disabled. You choose per platform.

---