A TP-Link Deco BE63 whose parental controls do not block what you expect, do not apply a time limit or seem to ignore a device has a setup issue in nearly every case, because the controls work only on devices assigned to a profile and only when the rules are on. This is a Wi-Fi 7 tri-band mesh system managed entirely through the Deco app, with no web admin, and the parental controls are a feature of the app.
The checks in more detail
A child's phone that uses its own mobile data, or a device that is not in the profile, is outside the controls however they are set. Open the Deco app and go to More, Parental Controls. Create a profile for each person, add their devices to it, and choose the filter level and any blocked categories or sites, and the time limits for school nights and weekends. A device must be on your home Wi-Fi to be affected, so a phone that switches to mobile data escapes the filter, and you should discuss that with children or use the device's own controls too.
Make sure the device is assigned to the profile, because the Deco lists clients by name, and a phone that uses a private or randomised Wi-Fi address can appear as a new device when the address changes; turn off private addresses for your home network on the phone so the Deco can recognize it. If the filter seems to fail, check the filter level and the categories, and use the insights to see what was visited. If a time limit does not apply, check the schedule and the time zone in the app, and that Pause is not overriding it.
The Deco may need a restart or a firmware update, which the app offers, to apply new rules. A DNS setting on the device, a VPN or a browser's secure DNS can bypass the filter, so check them. Some controls apply only to devices on that Deco system, so a device on another router is not covered. If controls fail after these checks, restart the Deco system and contact TP-Link with the serial number from the label.
Differential
Likely causes of “TP-Link Deco BE63 mesh parental controls or schedules are not working”, and how to tell them apart
- 1
A device not in a profile
What separates it The device ignores the rules
How to confirm Assign it to the profile
- 2
A phone using private or random addresses
What separates it A device reappears as new
How to confirm Turn off private addresses for the home network
- 3
A device on mobile data
What separates it The filter is bypassed
How to confirm Use the device's own controls too
- 4
A DNS, VPN or secure-DNS setting
What separates it Blocked sites still load
How to confirm Turn off the bypass on the device
- 5
An old firmware or a stale rule
What separates it New rules are not applied
How to confirm Update and restart the Deco
Before you touch a setting
Record this first — changing settings destroys the evidence
- Which device ignores the rules
- Whether the device is in a profile
- Whether it uses a private address, VPN or mobile data
- The Deco firmware
Try in this order
0 of 6 completedCreate a profile
ReversibleIn More, Parental Controls.
Assign the devices
ReversibleTo the profile.
Set filters and time limits
ReversibleWith the right time zone.
Turn off private addresses
ReversibleOn the phone.
Check for a VPN or secure DNS
ReversibleOn the device.
Update the Deco
ReversibleAnd restart.
Model-specific
What is true of this model and not of its siblings
- Profiles
- The rules apply to the devices assigned to the profile.
- Addresses
- Private addresses make a phone look new.
- Mobile data
- It bypasses a home filter.
- Bypasses
- VPNs and secure DNS can avoid the filter.
- The app
- Deco is managed only through the app.
- TP-Link help
- Quote the serial number.
Stop boundary
When this stops being a self-service repair
- !Do not rely on a filter alone
- !Talk with children about online safety
- !Contact TP-Link if rules fail after these steps
Evidence ledger
Sources behind this answer
Exact questions
Common questions
Why do my parental controls not work?+
The device is not in a profile or is bypassing the router.
Can a phone escape on mobile data?+
Yes.
Why does a device appear as new?+
A private address changed.
Can a VPN bypass them?+
Yes.
Is there a web admin for it?+
No, only the app.