How to Set Up Parental Controls That Can't Be Bypassed

Why most parental control apps fail eventually

App-based parental controls have a structural weakness: the blocking logic runs as a process on the same device the kid controls. Uninstalling the app, doing a factory reset, or simply installing a different browser the app doesn't monitor all defeat it — often without the parent finding out for weeks.

How DNS-level filtering is different

NoorI filters before a connection is even made — every domain lookup from an enrolled device passes through your rules first. This isn't a monitoring app watching for bad behavior; it's the same infrastructure category enterprises use to secure work devices, applied to a household instead. For the full technical picture, see how DNS filtering actually works.

The three layers that make it hold up

1. Always-on enrollment. The WARP tunnel carries a device's traffic through your rules on any network — home WiFi, cellular, school WiFi, a friend's house — not just when it's on your home network.

2. Bypass blocking. NoorI automatically pushes a rule that blocks manually changing DNS settings or common workarounds. Details in our VPN and bypass prevention guide.

3. A profile lock PIN. Set one in your NoorI dashboard settings so the rules themselves can't be edited from a device without it — this stops a child with access to the parent's logged-in dashboard from just turning rules off.

Being honest about the limits

No network-level filter can stop someone from fully uninstalling the enrollment app on a device they physically control and have admin rights to — that's a fact about Android and iOS, not a NoorI gap. For younger children, NoorI's managed accounts (Family plan) sidestep this entirely — the child has no login at all, so there's nothing on their end to remove. For older teens with their own device, NoorI's Android and iPhone setup guides include the two OS-level hardening steps that actually exist: Android's Always-on VPN + "Block connections without VPN" (removing the app kills all internet on that device until it's reconnected) and iOS's Screen Time → Deleting Apps → Don't Allow (blocks deleting any app, passcode-gated). Neither one is technically a bypass-proof lock, but both raise the real cost of removing protection well above "one tap." Layered on top, NoorI emails you within about 30 minutes if a device stops checking in at all, whatever the reason.

Putting it together

Enroll the device, turn on the categories that matter for that child's age, set a profile lock PIN, and check the Activity tab periodically. None of this requires ongoing technical maintenance once it's set up.