Carrier Parental Controls: Verizon, AT&T, and T-Mobile Set Up and Compared

The layer most parents skip — and why it matters in 2026

Most parents set up parental controls on the device: Screen Time on the iPhone, Family Link on the Android. That's the right instinct — but it leaves a gap that catches nearly every family at some point.

Device controls work on the device itself. The moment your child connects to a friend's Wi-Fi, a school network, or just uses a browser or app the device filter doesn't reach, those controls have less leverage. And a router filter, no matter how carefully configured, stops at your front door.

Carrier controls work differently. Each of the three major carriers — Verizon, AT&T, and T-Mobile — offers a parental control subscription. Rather than filtering at the device OS or the home router, these services install a companion app with a VPN-style profile on the child's phone. All of the child's internet traffic routes through that VPN before it reaches the internet — which means the filter applies on Verizon cellular, on school Wi-Fi, at a friend's house, and at a coffee shop. The carrier's network isn't the enforcement point; the app on the child's phone is.

That's the distinction. The filter lives on the device but is managed by you, and the child can't disable it from Settings the way they can turn off a plain content restriction. (They can try — we'll cover the bypass methods below. But the baseline is stronger than most parents assume.)

What's new in 2026: Verizon rebranded its long-running Smart Family service as Verizon Family, restructured pricing into a free and a Plus tier, and bundled the Plus tier at no extra charge for customers on the Unlimited Ultimate plan (for plans changed on or after May 7, 2026). If your family is on Unlimited Ultimate and hasn't opened the Verizon Family app, the parental controls are already included.

AT&T and T-Mobile haven't rebranded their products, but both have been actively updated. This guide covers all three.

---

What carrier controls actually do — and don't

Carrier parental controls overlap with — but don't replace — device-level controls and router filters. It's worth knowing what you're getting before signing up.

What they do:

• Filter web and app content by category (adult content, gambling, social media, and similar) via a companion app running on the child's phone
• Track your child's real-time location and send geofence alerts
• Set time windows when data access is blocked ("school hours," "bedtime")
• Pause internet access from your phone with a single tap
• Show usage reports — which apps were used and which sites were visited
• Block calls and texts to specific numbers (on the carrier's own voice network)

What they don't do:

• Read the content of messages sent through encrypted apps. iMessage (Apple-to-Apple), WhatsApp, Signal, and Snapchat's messaging function use end-to-end encryption. The carrier's filter knows traffic went to those apps; it cannot see what was written.
• Guarantee blocking of all HTTPS content. Modern websites use encrypted connections. Carrier services can block by category, but they cannot inspect encrypted payloads; some requests slip through on all three platforms.
• Cover devices without the companion app. The filter runs on the child's phone because the app is installed there. A second device — a friend's old phone, a tablet without cellular, a laptop — is outside the filter unless you add separate coverage.
• Replace device-level controls. Carrier controls and Apple Screen Time or Google Family Link solve overlapping but different problems. You want both, not one or the other.

---

Verizon Family and Verizon Family Plus

What happened to Smart Family?

In late 2024, Verizon retired the Smart Family name and replaced it with Verizon Family, restructured into two tiers. If you had Smart Family set up, you were migrated automatically. If you're searching for Smart Family in the My Verizon app, look for Verizon Family instead.

Verizon Family (free): Available to any Verizon postpaid customer. Includes basic location sharing and Safe Walk SOS. Does not include parental controls, content filtering, or screen time management.

Verizon Family Plus: The tier with parental controls. Includes content filtering, time restrictions, pause internet, call and text monitoring, driving insights, and location alerts.

Pricing

Plan	Monthly cost
Legacy Verizon plans	$14.99/month per account
myPlan unlimited tiers (Welcome, Plus, Ultimate)	$10/month as a myPlan perk
Unlimited Ultimate (joined on or after 5/7/26)	Included — no extra charge

One subscription covers the entire account, not per line. If you have four children on the plan, one $10 or $14.99 payment covers all of them.

How it works

The Verizon Family app sits on your phone (the parent). When you add a family member, their phone receives a pairing request. Once they accept, the Verizon Family Companion app installs a VPN profile on their device. All internet traffic on the child's phone routes through this VPN, which Verizon uses to enforce content filtering. The filter applies on Verizon cellular and on any Wi-Fi network the child connects to — the VPN is on the device, not on the carrier's towers.

Call and text monitoring is different: that feature reads Verizon's own call and text records, so it applies to Verizon cellular calls and SMS only — not iMessage, WhatsApp, or other data-based messaging.

What Verizon Family Plus covers

Content filtering: Three preset levels (young kids, older kids, teens) that block age-inappropriate content in those categories. You can also build a custom allowlist and blocklist. SafeSearch is enforced across search engines. Verizon uses Mobicip's filtering technology as the engine.

Time restrictions: Block specific hours when the line cannot make calls, send texts, or access data or Wi-Fi — for school, bedtime, or any window you set. Restrictions are per line.

Pause internet: One-tap button to suspend data and Wi-Fi access on a specific line.

Call and text monitoring: See which numbers a line called or texted (numbers only, not content). Block specific numbers.

Location: Real-time map location per line. Location alerts when a family member arrives at or leaves a saved place. Location is available with the Plus tier; the free tier includes basic location sharing.

Driving Insights: After each drive, a report shows the trip's speed, hard-braking events, and whether the phone was used while driving. This is a Plus-tier-only feature and requires that the Companion app is running.

Safe Walk SOS: The child can tap an SOS button that sends their current location to family members.

Setup steps

1. Download the Verizon Family app on your phone (App Store or Google Play).
2. Sign in with your My Verizon credentials. Only the primary account holder or account manager can subscribe.
3. If you're on a myPlan: Open the My Verizon app → Shop → Products & plan perks → Verizon Family → add the perk. Or follow the enrollment flow inside the Verizon Family app.
4. Add each family member's line. Each child's phone receives a pairing request.
5. On the child's phone, accept the pairing and install the Verizon Family Companion app. The Companion installs the VPN profile that enables content filtering on all networks.
6. Set content filter levels and time restrictions per line.

The honest limit

A VPN profile on a phone is not unbreakable. On Android, Verizon includes PIN protection that prevents the child from removing the Companion app without the parent's PIN. On iOS, a determined child can attempt to delete the app or the VPN profile from Settings — the Companion will attempt to re-enable itself, but a phone that's been factory-reset wipes the Companion entirely, and the cellular filter resumes only after re-pairing.

App-based VPN filtering also has an inherent bypass: an external VPN app. If a child installs a VPN and routes traffic through it, the outer traffic the Companion's VPN sees is encrypted tunnel data — the filter cannot categorize what's inside. We'll cover this in the bypass section.

Verizon Family Plus does not include app store purchase blocking in its current documented feature set.

---

AT&T Secure Family

What it is — and who can use it

AT&T Secure Family works for any U.S. family, regardless of wireless carrier. You do not need to be an AT&T wireless customer. A family on Verizon or T-Mobile can subscribe to AT&T Secure Family and install the Companion app on their children's phones. This makes it the most carrier-flexible option of the three.

The service uses the same approach as Verizon Family: a Companion app installs a VPN profile on the child's device. All traffic routes through AT&T's filtering servers via that VPN, regardless of whether the child's phone is on AT&T cellular, another carrier's cellular, home Wi-Fi, or school Wi-Fi.

Pricing

$7.99 per month, for up to 10 family members and up to 30 devices. A 30-day free trial is available for new subscribers. At full capacity that's under $1 per device per month — the lowest per-device cost of the three services covered here.

What AT&T Secure Family covers

Content filtering: Three levels:

Level	Intended for	What it does
High	Younger children	Allows kid-safe content; blocks violence, adult content, gambling, and most mature categories
Medium	Pre-teens	Blocks mature and adult-oriented content; allows most general-use platforms
Low	Teens	Blocks explicit content; allows nearly all platforms

AT&T documents up to 28 filter categories that parents can adjust individually on top of the base level. Documented categories include: Objectionable Content, Social Media, Messaging, Games, Downloads, Videos, Malware, Dating, Gambling, and others.

Location tracking: Real-time GPS and Wi-Fi location on an interactive map. Breadcrumb trail showing location history. Saved places with arrival and departure alerts (scheduled or triggered by arrival/departure). Location accuracy is approximately 495 feet — enough to confirm your child is at school or a friend's house, not precise to a room.

Time limits: Daily, weekly, or monthly caps on internet and app access. An internet countdown displays on the child's device showing how much access time remains. Pause internet on demand.

App store blocking: You can block access to the Apple App Store (iOS) and Google Play (Android), preventing new app downloads and in-app purchases.

Usage reports: Up to 30 days of web and app usage history.

Two-app setup (required)

AT&T Secure Family requires two separate apps — one on the parent's device and one on the child's.

1. The primary account holder (only) subscribes to AT&T Secure Family — via the AT&T app, att.com, or the Secure Family app.
2. Parent downloads the AT&T Secure Family app on their phone.
3. Parent adds each child in the app and sends a pairing invitation (via SMS, email, or QR code on the child's device).
4. Child downloads the AT&T Secure Family Companion app and accepts the invitation.
5. For content filtering and time limits: the Companion app prompts the child (or parent) to install a VPN profile. This profile is what routes the child's traffic through AT&T's filtering servers.
6. For location tracking only: as of a 2025 update, the VPN profile is optional. Skip the VPN setup if you only want location monitoring and alerts.

Device requirements: iOS 16 or higher for Apple devices; Android 13.0 or higher for Android. Parent and child devices don't need to match.

The honest limit

The Companion app's VPN profile is the mechanism that enforces content filtering and time limits. If a child removes the Companion app — which is possible on an unlocked device — all filtering stops until the app is reinstalled and re-paired. AT&T's Companion app attempts to detect removal and prompt re-installation, but a factory reset defeats this entirely.

AT&T Secure Family has no driving insights or telematics features. Content inside end-to-end encrypted messaging apps is not visible. HTTPS traffic may not be fully filtered in every category.

---

T-Mobile FamilyMode

What it is — and what to know about T-Mobile's free alternatives

T-Mobile offers two different parental control tools, and they work very differently. It's worth knowing which one you're looking at:

• Web Guard (free): A network-level filter that works only on T-Mobile cellular data. The moment a phone connects to any Wi-Fi network, Web Guard is inactive. It's better than nothing on cellular, but it doesn't follow the child.
• FamilyMode ($10/month): The full service. Uses a companion app with a VPN-style profile on the child's device — the same approach as Verizon Family and AT&T Secure Family — so filtering applies on T-Mobile cellular, home Wi-Fi, school Wi-Fi, and any other network. This is the product this guide covers.

Pricing

Component	Cost
FamilyMode subscription	$10/month per account, any number of lines
FamilyMode Home Base (hardware, optional)	$20 one-time purchase
Web Guard	Free (cellular-only; not recommended as the primary solution)

FamilyMode requires at least two lines on the account. It is not available on single-line plans.

The Home Base: The $20 device is a small plug-in box that connects to your home router. It extends FamilyMode's content filters and time restrictions to non-phone devices on your home Wi-Fi — laptops, game consoles, smart TVs, and tablets that don't have cellular service and can't install the FamilyMode app. If your family's only concern is phones, you don't need the Home Base. If you want to cover the gaming console and the kids' laptops, you do.

What T-Mobile FamilyMode covers

Content filtering: Four levels:

Level	Access
High	Kid-safe content; Education and similar categories
Medium	General-use platforms; blocks mature and adult content — intended for pre-teens
Low	Nearly all platforms; blocks only explicit content — intended for teens
None	No filtering

Parents can customize on top of the base level, blocking or allowing specific apps and websites. T-Mobile's own documentation notes that "filters may not block all content you consider objectionable and may not filter some secured (HTTPS) traffic" — an honest acknowledgment of the limits of category-based VPN filtering.

Location: Real-time location per family member. Location history timeline. Safety Areas — define a named geographic zone (home, school, a friend's house) and receive a push notification when the child enters or leaves it. SOS alert feature. Find-device option.

Screen time: Daily screen time limits per device. BedTimes (scheduled overnight internet cut-off). OffTimes (scheduled blocks during the day, such as school hours). Pause internet on demand. Parents can grant bonus screen time as a reward.

App management: Approve or block specific app downloads. Restrict in-app purchases (iOS documented; Android capabilities are partial based on available documentation).

Usage monitoring: Which apps were used and which websites were visited, by line.

Setup steps

1. From a T-Mobile account with at least two lines, open the T-Mobile app on your phone, navigate to Account → More → FamilyMode, and subscribe. Alternatively, call T-Mobile or visit a store.
2. Download the T-Mobile FamilyMode app on your phone.
3. Turn off any active VPN on the child's device before pairing (required for initial setup).
4. Install the T-Mobile FamilyMode app on the child's phone.
5. Scan the SPARQ code displayed in the parent app with the camera on the child's phone to pair the devices.
6. Set filter levels, BedTimes, Safety Areas, and other controls per family member.
7. If you want home device coverage: Order the FamilyMode Home Base from T-Mobile's website or a T-Mobile store. Plug it into your home router's LAN port and follow the in-app setup to configure a Home Profile with its own filter level and schedule.

Important compatibility note: FamilyMode is not compatible with DIGITS service. Pausing internet on a DIGITS line may block all calls, including emergency calls.

The honest limit

FamilyMode's app-based VPN filters apply on any network, not just T-Mobile cellular — so a friend's Wi-Fi or school Wi-Fi doesn't bypass the filter. The shared vulnerability with Verizon and AT&T applies here too: a child who removes the FamilyMode app or disables the VPN profile disables filtering. T-Mobile documents that running an external VPN app on the child's device "may affect FamilyMode's functionality." A child who installs a VPN can route traffic around FamilyMode's filter.

The Home Base covers home devices (laptops, consoles); there's no hardware option for filtering phones at a friend's house Wi-Fi — that coverage relies on the companion app.

---

Layer 3: device-level controls still matter

Carrier controls and device-level controls solve overlapping but distinct problems. Setting up a carrier service doesn't mean you can skip the device layer.

What device-level controls do that carrier controls can't:

• Set per-app time limits (30 minutes of TikTok per day, not just a daily total cutoff)
• Restrict what apps can be downloaded without relying on the child to keep a companion app installed
• Lock down phone settings so the child can't change location permissions, install a VPN, or factory-reset the phone without a passcode
• Control in-app purchases through the device's own App Store restrictions (a stronger lockdown than most companion-app approaches)

For iPhones and iPads: Apple Screen Time. Set a Screen Time passcode different from the device passcode — without this, an older child can disable Screen Time from the Settings app in under a minute.

For Android phones: Google Family Link — Google's supervised accountSupervised accountA child or teen account formally linked to a parent's account for oversight — Google Family Link, Instagram supervision, Microsoft Family Safety, and others. The parent gets controls and limited visibility; the child keeps using the platform normally. system that gives you much stronger lockdown on Android, including limiting which apps can be installed and preventing account switching.

For a child's first phone: Setting up your child's first smartphone covers the full initial setup for both ecosystems.

The four-layer stack that holds in practice:

1. Carrier: Verizon Family Plus / AT&T Secure Family / T-Mobile FamilyMode — filters the data connection on any network via the companion app
2. Device: Screen Time or Family Link — controls which apps exist, how long they run, and whether device settings can be changed
3. Home network: Your router's content filter or a DNS filter — covers every device on your home Wi-Fi, including the ones without cellular or a carrier companion app
4. The conversation: Ongoing, specific discussion about what the usage reports actually show and what your expectations are

No single layer covers everything. The carrier filter doesn't follow the gaming console or the laptop. The router filter doesn't follow the phone out the door. Device controls don't cover what happens when a friend hands your child their unmonitored phone. All four layers address different parts of the problem.

---

Common bypass attempts — ranked by effectiveness

External VPN apps (most effective; very common among older teenagers). A VPN app encrypts all traffic before it exits the device. The carrier companion app's filter sees an encrypted tunnel to a VPN server rather than web traffic it can categorize. The filter cannot inspect what's inside the tunnel. All three carrier services are vulnerable to this bypass.

Mitigation: Use device-level controls to prevent VPN profile installation. On iPhone: Screen Time → Content & Privacy Restrictions → Allow VPN configuration. On Android: Family Link gives supervised-account restrictions that prevent sideloading and unauthorized VPN apps on supported devices.

Removing the companion app (effective against all three services). If the child removes the carrier companion app — from iOS Settings or Android Settings — the VPN profile is removed with it, and filtering stops. A factory reset is the most complete version of this.

Mitigation: On iPhone, set a Screen Time passcode and restrict the ability to delete apps (Screen Time → Content & Privacy Restrictions → iTunes & App Store Purchases → Deleting Apps → Don't Allow). Verizon uses a PIN to protect the Companion app from removal on Android. On Android with Family Link, supervised accounts have stricter app-removal protections.

Switching to a different network when cellular is paused (limited effectiveness). If you use the carrier service's time restriction to block data during school hours, a phone that connects to school Wi-Fi is still routed through the companion app's VPN — so the filter still applies on school Wi-Fi. But a phone that removes the app or disables the VPN profile bypasses this entirely.

Alternative browsers (limited, varies by carrier). Some browsers handle HTTPS in ways that avoid category filters. The impact varies by which carrier's service is in use. Mitigation: device-level controls that restrict which browsers can be installed address this better than carrier filters alone.

A second device (the hard problem). Any filter you set on a specific phone doesn't apply to a second device — a friend's old phone, an iPod Touch, a sibling's tablet. This is outside the scope of carrier controls entirely. It's where the conversation matters more than any technical layer.

---

What carrier controls don't cover — the honest fence

In-app message content. iMessage (Apple-to-Apple), WhatsApp, Signal, Snapchat, and similar apps use end-to-end encryption. The carrier service knows traffic went to those apps; it cannot read what was written. None of the three services covered here — nor any legal commercial service — can access this content.

Content already downloaded. A video, game, or app downloaded before content filters were activated continues to work. Filters apply to network requests; they don't scan local storage.

Apps that bypass the filter's categorization. Some apps use CDN infrastructure or connection patterns that don't map cleanly to blocked categories. This is why all three carriers include language like "may not block all objectionable content" in their documentation.

Other lines on the account. AT&T Secure Family's companion app approach works on any carrier's device. Verizon Family Plus and T-Mobile FamilyMode apply to their own carrier's lines; a device on a different carrier is outside the filter even if it's on the same family account.

The meaning behind what you see. A usage report showing that your child visited an unfamiliar site or spent an unusual amount of time on an app is the beginning of a conversation, not the end of one. Carrier controls tell you what happened on the network; they don't tell you why, or what your child was thinking. That requires the fourth layer.

---

Quick comparison

	Verizon Family Plus	AT&T Secure Family	T-Mobile FamilyMode
Price	$10–$14.99/mo per account	$7.99/mo per account	$10/mo per account
Carrier required	Verizon postpaid	None — any U.S. carrier	T-Mobile, 2+ lines
Included in a plan	Yes (Unlimited Ultimate, 5/7/26+)	No	No
Filter follows child off home Wi-Fi	Yes (companion VPN)	Yes (companion VPN)	Yes (companion VPN)
Covers non-phone home devices	No	No	Yes (Home Base, $20 hardware)
Filter levels	Young kids / Older kids / Teens / Custom	High / Medium / Low (28 categories)	High / Medium / Low / None
App store purchase blocking	Not documented	Yes (iOS + Android)	Yes (iOS; Android partial)
Driving insights	Yes (Plus tier)	No	No
Location + geofencing	Yes	Yes (~495 ft accuracy)	Yes + Safety Areas
Pause internet	Yes	Yes + countdown timer	Yes
Survives factory reset	No (app removed)	No (app removed)	No (app removed)
Free trial	No (30-day trial on legacy Smart Family plan; unclear if still active)	30 days	No
Device limit	All Verizon lines	10 members / 30 devices	All T-Mobile lines (2+ required)

---

Operational rhythm — what to do with these tools week to week

Setting up the service once and forgetting it provides some baseline protection. But the value of these tools is in the ongoing picture they build.

First week: Enable the service, pair all family members' devices, and set content filter levels. Choose levels that match your child's age and your family's actual baseline — not the most restrictive option available. A filter level set too strict that constantly frustrates your child creates pressure to find workarounds.

First month: Check the usage reports once a week. You're not looking for things to punish; you're building a picture of what your child actually uses. The data from these reports makes conversations more specific and less combative than general questions about "what you do on your phone."

Every few months: Review time restrictions as circumstances change — a new school semester, a different sports season, summer break. Screen time expectations for a 12-year-old are different from those for a 15-year-old. Don't leave filter levels frozen at the setting you chose years ago.

When reports show something unfamiliar: Look up what the service or site is before reacting. An unfamiliar app name is often something obvious once you know the category. A parent who panics over a gaming platform that turns out to be unremarkable loses credibility for the times when something genuinely warrants attention.

---

What to actually say to your teen about this

Carrier controls work better when a teenager knows they exist and understands why, rather than discovering them by running into a blocked site.

The most productive framing is transparency and proportion. You're not monitoring their conversations, you can't see inside their messages, and you're not trying to prevent them from using the internet. You've set a floor for what the carrier network allows — the same way schools, libraries, and most workplaces do. The filter exists because you're the responsible party on the account, not because you don't trust them.

Things worth discussing specifically:

• What the reports actually see. Be honest about what usage reports show — which apps were used and for how long, and which sites were visited — and what they don't show: the content of any message, what they were watching inside an app, or anything inside an encrypted session. Teenagers often assume more surveillance than is actually happening, which creates paranoia rather than trust.

• What the bypass methods are. Name the VPN workaround explicitly. Explain that you know it exists and you're not trying to win a technical arms race. You're asking them to agree to a floor because they're on your plan and you're the responsible party — not because a filter will prevent every bad outcome.

• Why the driving data matters. For a teen who drives, Verizon's driving insights data is worth discussing before the first trip. Knowing a report is generated after every drive — speeding, hard braking, phone-while-driving — often changes behavior more effectively than any rule.

---

Bottom line

Carrier parental controls are not a complete answer on their own. But they're the layer that genuinely travels with the phone — and that's something no router, no DNS filter, and no device-level OS setting can replicate for cellular data.

If you're on Verizon: Check first whether your plan already includes Family Plus. Unlimited Ultimate customers who changed their plan after May 7, 2026 get it bundled. If not, the $10/month myPlan perk is the straightforward add-on. The driving insights are a genuinely useful feature for households with a new driver.

If you're on AT&T — or on any carrier: AT&T Secure Family at $7.99/month is the most flexible option because it doesn't require AT&T wireless service. If your family has a mix of carriers, or if you want a single subscription to cover children on different plans, AT&T Secure Family is the only one of the three that supports that.

If you're on T-Mobile: FamilyMode at $10/month covers all lines on your account regardless of how many there are. If your main need is phone coverage, the app alone is sufficient. Add the $20 Home Base only if you want content filtering to apply to laptops and game consoles on your home network.

Three things to do tonight

1. Check whether you're already paying for this. Verizon Unlimited Ultimate customers: open the My Verizon app, go to Plan details, and look for Verizon Family. If it's there and not activated, turn it on — you're already paying for it.
2. Set up the carrier service on your child's line. Use the Medium filter level as a starting point — strict enough to block the obvious categories, loose enough that your child doesn't experience constant friction that drives workarounds.
3. Pair it with device-level controls. Set a Screen Time passcode on the iPhone or configure Google Family Link on Android. The carrier filter and the device filter together close the gaps each one leaves on its own.