macOS Screen Time — The Complete Parent Setup Guide for a Mac

Set up and lock down a kid's Mac with macOS Screen Time and Family Sharing — once you've confirmed it isn't a school-managed machine you can't control.

First, the question that decides everything: who manages this Mac?

Before you touch a single setting, answer one question — because it changes what you can actually do.

Is this a personal Mac you (or your child) own, or a school-issued one?

Personal Mac — you bought it, it's signed in to a family Apple Account. You have full control through Family Sharing and Screen Time. This guide is for you.
School-managed Mac — issued by a district, signed in to a school account, enrolled in the school's device-management system (MDM). On these, the school's profile takes precedence. Your Family Sharing and Screen Time controls largely won't apply, and may not even appear. The school controls what's filtered and monitored — which often means school hours and school content only, with little or nothing after 3 p.m.

How to tell in ten seconds: open System Settings → General → Device Management (or Profiles). If there's a configuration profile from a school or MDM vendor, it's managed. If that pane is empty, it's yours to control.

If it's school-managed, your real levers are the network layer (DNS filtering at home, covered below) and the conversation — not Screen Time. Don't burn an afternoon fighting controls that a school profile is silently overriding. The rest of this guide assumes a personal Mac.

What macOS Screen Time actually does — and doesn't

Screen Time is built into macOS and is the same system you may already know from an iPhone or iPad. Set up through Family Sharing, it lets you manage and monitor a child's Mac remotely, from your own Mac, iPhone, or iPad — you don't have to physically grab their laptop every time.

What it does well:

Blocks apps and the web during hours you set (Downtime — bedtime, school).
Caps daily time on specific apps or whole categories (App Limits).
Filters adult websites and lets you build an allow-list for younger kids.
Requires your approval before new apps install, and blocks in-app purchases.
Limits who your child can message and FaceTime.
Shows you a weekly report of where the time actually went.

What it doesn't do:

It can't read your child's messages or see content other people send them.
It only governs their user account on the Mac — a second account, the guest account, or signing into a different Apple Account sidesteps it (we cover this under bypasses).
A determined teen with admin rights and time can find workarounds. The goal is reasonable friction and visibility, not a perfect cage.

A Mac is a full computer, not a phone — so the OS-level account setup (below) matters more here than it does on iOS.

The four layers (how this guide is organized)

Real control on a Mac is never one switch. It's four layers, and Screen Time is only the first:

Account-level supervision — Family Sharing + Screen Time (Parts 1–3).
OS-level lockdown — how the Mac's user accounts are set up (Part 4).
Network-level filtering — DNS at the router, which catches what the on-device filter misses and covers every device in the house.
The conversation — the only layer that scales as they get older.

None of the first three alone is enough. Skip the OS-level account setup and the rest is a screen door.

Family Sharing is what makes remote management possible. If your child isn't already in your family group with their own (correctly-aged) Apple Account, start here.

On your Mac, open System Settings, click your name at the top, then click Family.
If your child isn't in the group: click Add Member, then follow the onscreen prompts to create the child's account (their real name and birthday — the birthday is what triggers the age-appropriate defaults).
On the child's Mac, sign out of any adult Apple Account and sign in with the child's account (System Settings → Sign in, or Users & Groups — see Part 4).

Why the real birthday matters: for younger child accounts, macOS turns on some web-content and safety settings by default — typically the adult-content web filter and Communication Safety (the exact set and the age threshold vary by country or region). Lie about the age at signup and those age-based protections never engage.

Setup Part 2 — Turn on and configure Screen Time

You can do all of this from your own Mac once Family Sharing is set up.

Open System Settings → Screen Time (it's in the sidebar; scroll down if you don't see it).
Click the Family Member pop-up menu and choose your child. (No pop-up? You're not signed in, or Family Sharing isn't set up — back to Part 1.)
Click Set Up Screen Time For Your Child, click Continue, and walk through the prompts.
Set a Screen Time passcode your child does not know when prompted (or under Lock Screen Time Settings). This is load-bearing — without it, they can simply switch everything back off.

Then configure the three settings that do the real work:

Downtime — Screen Time → Downtime → schedule the hours almost all apps are blocked (e.g., school nights 9 p.m.–7 a.m.). Use Always Allowed to keep Messages and a few essentials reachable during Downtime.

App Limits — Screen Time → App Limits → Add Limit → pick a category (Social, Games, Entertainment) or a specific app, set a daily cap. Set social and video apps lower than the rest.

Communication Limits — Screen Time → Communication Limits → restrict who your child can call, message, and FaceTime to Contacts Only during normal hours, and especially during Downtime. (This governs Apple's Phone, FaceTime, and Messages — not third-party chat apps, which have their own settings.)

Setup Part 3 — Content & Privacy restrictions

This is the filter layer. Screen Time → Content & Privacy → turn it on. When you set up a child account, some of these are already set by default; review each:

App Store, Media, Web & Games — set web content to Limit Adult Websites (the baseline filter) or Allowed Websites Only (a strict allow-list for younger kids). Set movie/TV/app age ratings to match your child.
Intelligence & Siri — controls Apple Intelligence, Siri, and whether Siri shows explicit results. Turn off explicit language; decide whether AI features are appropriate for their age.
Store Restrictions — require approval (or block) for installing and deleting apps and for in-app purchases. "Ask to Buy" routes app and purchase requests to your device for approval.
App & Feature Restrictions — toggle which built-in apps and features are allowed.
Preference Restrictions — prevents changes to the Screen Time settings themselves. Turn this on so your child can't quietly undo your work.

Setup Part 4 — Lock down the Mac at the account level

This is the step that's unique to a computer, and the one most parents miss. Screen Time governs one user account. A Mac can have several — so the account setup decides whether Screen Time is a wall or a suggestion.

Open System Settings → Users & Groups and confirm:

Your child's account is a Standard account, not an Administrator. An admin can change system settings, install anything, create new accounts, and generally route around restrictions. Yours should be the only admin account; theirs should be Standard. (To change it, an admin unlocks the pane and toggles "Allow this user to administer this computer" off for the child.)
There's no spare unmanaged account. Every account on the Mac that isn't under Family Sharing Screen Time is an open door. Remove old accounts you don't recognize.
Guest User is off. A logged-in Guest session bypasses your child's Screen Time entirely. Turn Guest User off unless you specifically need it.
Automatic login is off and your admin password is strong — so they can't log into your admin account.

These four account facts matter more than any single Screen Time toggle.

Common bypass attempts — ranked by what teens actually try

Use a second user account or the Guest account. The most common, and the reason Part 4 exists. Screen Time only watches their account. Counter: Standard (non-admin) child account, Guest off, no spare accounts.
Sign into a different Apple Account. Screen Time tracks usage per Apple Account; switching accounts can shed the limits. Counter: Preference Restrictions on, and notice if their account changes.
Use a different web browser. The adult-content filter works system-wide, but allow-list/"Allowed Websites Only" behavior is strongest in Safari. A motivated kid installs another browser to dodge restrictions. Counter: require approval to install apps; back it with DNS filtering (below) so the filter doesn't depend on which browser they open.
A VPN app. A VPN tunnels around on-device and network web filtering. Counter: block app installs, and periodically check System Settings → VPN (and General → Device Management) for profiles you didn't add.
Terminal / command-line tricks or recovery mode. An admin-level user or physical access to recovery can disable protections. Counter: this is why the child account must be Standard, not admin — and why a strong admin password matters.
"I'll just turn Screen Time off." Only works without a passcode they don't know. Counter: set the passcode (Part 2) and Preference Restrictions (Part 3).

What macOS Screen Time doesn't cover — the honest fence

School-managed Macs. Covered up top — Family Sharing controls largely don't apply; the school's profile rules. Lean on DNS at home and the conversation.
Other people's devices and accounts. Anything off this Mac, or any account not under Family Sharing, is outside its reach.
Message content. It limits who can contact your child, not what is said. Communication Safety blurs detected nude images on-device, but it isn't message monitoring.
Encrypted or web-based apps. A chat that lives entirely in a browser tab or an encrypted app can sit under the radar of category-based limits.
A technically motivated teen with admin access. If they're an administrator, most of this is undone in minutes. The single most important control on this whole page is making their account Standard.

Naming the gaps honestly is the point: the controls handle the routine, the conversation handles the rest.

The network layer — catch what the Mac misses

On-device filtering only protects this Mac, and only as well as the browser allows. DNS-level filtering at your router covers every device in the house and doesn't care which browser or account is in use. It's the most durable filter you can run, and it backstops every bypass in the list above that involves the web. See our setup walkthroughs: Block adult content with DNS at your router and NextDNS for Families.

If your child also uses an iPhone or iPad, the companion setup lives in our Apple Screen Time guide — the account is shared, so the two reinforce each other. On a Windows laptop, see Windows 11 Parental Controls.

Operational rhythm

First week: confirm it's not school-managed, set the passcode, make the child account Standard, turn Guest off. That's the high-leverage 20 minutes.
Weekly: glance at the Screen Time report (Screen Time → App & Website Activity). Look for new apps, a new browser, or a sudden change in where the time goes.
Monthly: re-check Users & Groups (no new accounts, still Standard), confirm Downtime and the web filter are still on, and look for unexpected VPN or device-management profiles.
After any macOS update: updates occasionally reset or relocate settings. A 60-second pass confirms nothing flipped back.

What to actually talk to your teen about

The Mac is a school-and-creativity tool as much as an entertainment one, so the conversation is different from the phone:

Why their account is Standard, not admin — it's not distrust; it's how you keep the machine (and them) out of trouble, the same way their school account works.
What the filter does and doesn't catch — so they come to you when they hit something upsetting instead of hunting for a workaround.
The browser-and-VPN conversation — name it directly. "If you install a different browser or a VPN to get around the filter, that's the thing we talk about, not a game of cat and mouse."

The kid who understands why the controls exist works around them far less than the kid who just sees a locked door.

Bottom line

macOS Screen Time is genuinely capable — but on a Mac, the account setup underneath it matters more than the toggles. Confirm the Mac is yours to manage, put the child's account under Family Sharing as a Standard user with Guest off, then layer Downtime, limits, content filtering, and DNS on top.

Do these three things tonight:

Check System Settings → General → Device Management. If a school profile is there, stop — your levers are DNS + the conversation, not Screen Time.
Make the child's account Standard, not Administrator, and turn off the Guest User (System Settings → Users & Groups).
Turn on Screen Time for the child via Family Sharing, set a passcode they don't know, and switch on the adult-content web filter (System Settings → Screen Time → Content & Privacy).

The rest can wait for the weekend.

Sources: Apple Support — Set up Screen Time for a child on Mac, Set up content and privacy restrictions in Screen Time on Mac, and Family Sharing overview for kids and teens. Menu paths verified against current macOS (Apple occasionally relabels Settings panes between releases).