A filtered router covers every device in the house at once, which makes it one of the best free moves you can make, and it has two soft spots that quietly undo it. The admin page logs in with a password you probably know, where DNS gets changed back in under a minute. And the reset hole on the back takes a paperclip that wipes every limit in ten seconds. Closing both, plus adding a scheduled curfew, makes the router a genuine layer, but it never escapes one ceiling: it cannot follow a phone onto cellular. So the honest setup locks the router and puts the real wall on the device, which is what TKO’T does for free. Defense-only, as always.
Lock the admin page
The DNS you set on the router only holds if the router’s admin page does not. Change the default admin password to something you do not keep, and point the router at a family-filtering resolver, then hand the login to someone you trust, the same held-credential principle as every other lock: the filter belongs to the house, the login belongs to one person who is not the one fighting the urge. Without this, the router filter is a setting you can flip back the moment you want to, which at 1 a.m. you will.
Close the paperclip reset
The physical reset is the router’s factory-reset escape: hold the recessed button and every custom setting, including your DNS filter, reverts to defaults. There is no software lock for a paperclip, so the answer is physical and behavioral: put the router somewhere genuinely inconvenient and semi-public (not the bedroom, not arm’s reach of the person it is guarding), and accept that a reset is slow, obvious, and re-undoable, you simply reapply the filter (and re-pin DNS so a browser’s own encrypted DNS cannot route around it) and change the password again. For a kid resetting it, placement plus the knowledge that a reset is visible and gets noticed does most of the work; for yourself, the friction of reconfiguring is usually longer than the urge. The honest note is the usual one: physical access beats physical locks eventually, the goal is slow and visible, not impossible.
Add a scheduled curfew
Most routers can schedule internet downtime, cutting the network for chosen devices during set hours, which answers the common “disable the internet at 11pm” search directly and for free. A network that is simply off during your weak night window is a wall that needs no willpower, the calm version of you sets the curfew and the 1 a.m. version finds the network dark, with SafeSearch enforced the rest of the day. Lock the schedule behind the same admin password held elsewhere so it cannot be lifted in the moment.
The ceiling, and the layer that beats it
Now the structural truth the router cannot escape: a phone steps off the home network with one tap to cellular data, and the router filter, curfew and all, becomes irrelevant. Same for a factory reset of the phone itself during a craving, the network never enters the picture. This is why the router is a layer, never the wall. The wall has to live on the device: on-device DNS and an on-device screen layer that travel onto cellular and any other network, plus tamper resistance so the phone reset and the on-device disable are both slow and witnessed. Lock the router for the whole-house coverage it gives free, then stop trusting it to do the job only the device can.
Frequently asked questions
How do I lock my router admin page so I can’t change the DNS back at night?
Change the router admin password to one you do not keep and hand it to someone you trust, so reverting the DNS needs the person who holds it. Lock any scheduled curfew behind the same password. Treat the router as a whole-house layer, but pair it with on-device filtering, because the router cannot reach a phone that switches to cellular data.
How do I stop my router from being factory-reset with a paperclip by my kid?
There is no software lock for the physical reset button, so the fix is placement and visibility: put the router somewhere inconvenient and semi-public rather than in a bedroom, so a reset is awkward, obvious, and gets noticed. Accept that a reset is reversible, you reapply the filter and change the password, and lean on on-device filtering for the coverage a router reset would remove.
Is there a free app that disables the internet at 11pm every night?
Most routers can do this natively for free with a scheduled downtime or access-schedule feature, cutting the network for chosen devices during set hours, no app needed. Lock the schedule behind an admin password held by someone else so it cannot be lifted in the moment. For coverage that survives a switch to cellular, add an on-device blocker with its own scheduled lockdown.
How do I stop myself from factory-resetting my phone during a craving?
Make the reset slow and witnessed rather than impossible: on iPhone, a Screen Time passcode held by someone else is required to erase the device, and a full wipe-and-reinstall takes the better part of an hour, far longer than an urge lasts. TKO’T’s tamper resistance adds to that friction, so the nuclear option stops being a quick escape and becomes a deliberate, obvious process.
Is locking the router enough to block porn at home?
No, it is a strong free layer with a hard ceiling: it covers every device on your wifi at once, but it cannot follow a phone onto cellular data or survive a device that leaves the network, and a physical reset undoes it. Lock the router for the household coverage, then put the real, travel-with-you wall on each device with on-device DNS and screen-level filtering.