WhatsApp Parental Controls — Complete Setup Guide for the New Parent-Managed Accounts

WhatsApp launched Parent-Managed Accounts for under-13s in March 2026 — structural feature restrictions, Parent-PIN-gated settings, contact-only messaging by default. This guide covers the new product plus privacy settings for 13+ teen accounts plus the OS + DNS layers.

Why this guide exists now

WhatsApp historically had no parental controls. Through 2025, the only options were the recipient-side privacy settings the user could configure on their own account — same model as Telegram.

That changed in March 2026. Meta launched Parent-Managed Accounts on WhatsApp — a structural product for under-13 users, with the parent in operational control.

The launch matters because WhatsApp has roughly 3 billion users globally, and "WhatsApp is the family communication app" is true in many regions where iMessage / Google Messages aren't dominant. Many under-13s end up on WhatsApp because that's where their family communicates. Pre-March-2026, those kids had unrestricted accounts. Post-March-2026, they can be on Parent-Managed Accounts with structural protections.

This guide covers two scenarios:

Setting up a Parent-Managed Account for an under-13 (the new product)
Configuring privacy settings on a 13–17 teen's own account (closer to the Telegram-style approach since Meta hasn't shipped a teen-supervision product yet for older kids on WhatsApp)

Plus the layered approach for both.

What's available — by age

Parent-Managed Accounts (under-13 only):

Linked parent and child accounts (parent on their own phone, child on theirs)
Parent PIN gates all setting changes on the child's account
Restricted feature set — child can message and call only. No access to:
- Meta AI (the in-app AI assistant)
- Live location sharing
- Disappearing messages in individual chats
- Status (the Stories-equivalent)
- Channels (broadcast follows)
- Most of the "discover" surface
Parent manages from their device — who can contact the child, group memberships, privacy settings, profile visibility
Still end-to-end encrypted — parent cannot read messages or hear calls. The supervision is structural (which features exist) and permission-based (who can contact), not content-based.

Regular WhatsApp account (13+):

Standard recipient-side privacy settings the user can configure on their own account
No parental dashboard, no supervised version, no toggleable parental link
Disappearing messages enabled per-chat
All features available

The structural reality: WhatsApp's new parental product is an under-13 thing. For older teens, you're back to the Telegram-style approach.

Setup Part 1 — Parent-Managed Account (under-13s)

If you're setting up WhatsApp for a child under 13, this is the supported path. Available wherever Parent-Managed Accounts have rolled out (US, UK, EU, India have all rolled out as of April 2026; check WhatsApp's region notice if unsure).

You need:

Your own WhatsApp account (parent). If you don't have one, install WhatsApp on your phone and verify with your phone number.
A device for the child (could be their own phone, an old phone of yours, or an iPad/tablet) — anywhere you'd install WhatsApp.
A phone number for the child's WhatsApp. WhatsApp requires a phone number to register; Parent-Managed Accounts don't change this. Options: a SIM card on the child's phone, a VoIP number (Google Voice in the US, equivalent elsewhere), or a virtual number from a service like Hushed.
10 minutes for the initial QR-code-based pairing.

Steps

On the child's device, install WhatsApp from the App Store / Google Play.
Open the app. When prompted, choose Set up as a Parent-Managed Account (this option appears for accounts where the user enters an under-13 birthday). If your region has the rollout, the option appears prominently.
Enter the child's phone number. Verify via the SMS code (you'll receive it on the child's phone).
The child's WhatsApp displays a QR code for parent linking.
On YOUR phone, open WhatsApp → Settings → Family → Add a child → Scan QR code. Scan the code on the child's screen.
Confirm the link on both devices.
Set the Parent PIN — 4–6 digits, your child does not know. Required for any settings changes on the child's account.
Configure the initial privacy settings (covered in Setup Part 2 below).

Verify the link is active

On your phone → Settings → Family, you should see:

The child's account listed under Linked children
A summary of their current privacy settings
A Manage child's settings link

If the link doesn't appear within a few minutes, restart both apps and check again. The QR code expires after 5 minutes — re-generate from the child's app if needed.

What the child experiences

They see WhatsApp without Meta AI, without Status, without Channels, without disappearing messages, and without live location.
The settings menu shows Managed by parent badges next to anything you've locked.
They can message and call freely with people they're allowed to contact.
The Parent PIN prompt appears whenever they (or anyone) tries to change a privacy setting.

Setup Part 2 — Configure Parent-Managed Account settings

Once linked, walk through the controls in order. They live under WhatsApp → Settings → Family → [child's name] → Manage settings.

Who can message your child

This is the most important toggle. By default, anyone with the child's phone number can message them on WhatsApp.

Who can message → Contacts only (the right default — only people in the child's phone contact list can initiate a chat).
For very young kids: consider Approved contacts only if available, where YOU (the parent) approve specific contacts. If your child is the type to add random numbers to their contacts, this is the safer mode.

Who can call your child

Who can call → Contacts only.
WhatsApp calls are E2E encrypted but the calls themselves are still a contact vector.

Group memberships

Who can add me to groups → Contacts only or Nobody.
The "Nobody" option requires a per-group invite acceptance — slightly more friction but the safer default for under-12s.

Profile visibility

Profile photo → Contacts only.
About (status text) → Contacts only.
Last Seen and Online → Contacts only or Nobody.

Read receipts (the blue checkmarks)

This is a privacy preference, not a safety setting. Worth setting to Off if you want to reduce the social pressure on your child to respond immediately.

Save the settings

Each save requires the Parent PIN. The child cannot reverse these from their own device while linked.

Setup Part 3 — Privacy settings for 13–17 teen accounts

If your kid is 13+, they get a regular WhatsApp account. Walk through these settings together.

The path: Settings → Privacy on the teen's own account.

Last Seen and Online

Last Seen and Online → Who can see my Last Seen → My Contacts.
Reduces pressure to respond immediately and limits stranger-side reconnaissance.

Profile photo and About

Profile photo → Who can see → My Contacts.
About → Who can see → My Contacts.

Status (the Stories-equivalent)

Status → Who can see my status updates → My Contacts (or a custom list of close friends).

Read receipts

Editorial preference, not safety. Off reduces interpersonal pressure.

Live location

Off by default. Don't enable unless there's a specific reason (family carpool coordination, etc.).

Disappearing messages

Default disappearing messages timer for new chats → set to 24 hours or 7 days if your teen wants ephemerality. Per-chat settings are individually configurable.

Block and report

Walk through the Blocked Contacts flow with your teen. They should know how to block someone unwanted: long-press the chat → Block.
The Report flow sends 5 most-recent messages from that user to WhatsApp moderation, plus blocks them. Useful when something concerning happens.

Two-step verification

Enable on the teen's account: Settings → Account → Two-step verification. Sets a PIN that's required when re-registering the WhatsApp number on a new device. Prevents account takeover.

Setup Part 4 — Lock down at the OS / network layer

WhatsApp's parental controls cover the (under-13) Parent-Managed Account. Two more layers cover gaps for both age groups.

Time limits via OS controls

WhatsApp has no native daily time limit. Use OS-level controls:

iOS Apple Screen Time: set a daily time limit on the WhatsApp app + the WhatsApp web (combined).
Android Family Link: same model.
Windows Microsoft Family Safety: applies to WhatsApp Desktop.
macOS Apple Screen Time: same model.

(Cross-links: Apple Screen Time, Google Family Link, Windows 11 Microsoft Family Safety.)

Network layer (DNS filtering)

For "no WhatsApp during school hours" or "no WhatsApp after 10 pm" boundaries, DNS-level filtering catches it. Block: whatsapp.com, whatsapp.net, web.whatsapp.com. For phones on cellular, deploy DNS at the device level via NextDNS.

(Cross-link: NextDNS for Families guide.)

App-install restriction

Most parents who decide WhatsApp shouldn't be on a younger kid's device remove the app + restrict reinstall:

iOS: Settings → Screen Time → Content & Privacy Restrictions → iTunes & App Store Purchases → Installing Apps → Don't Allow.
Android Family Link: require parent approval for Google Play installs.

This is the most-effective WhatsApp-specific control for parents who don't want their kid on WhatsApp at all.

Common bypass attempts

Ranked by frequency:

1. "I'll just use my friend's WhatsApp."

Can't be beaten technically. Conversation territory.

2. "I'll create a second WhatsApp on a different phone number."

Works for older teens with access to virtual numbers (Google Voice, etc.).
Counter: device-level app-install restrictions catch new WhatsApp installs.

3. "I'll change the Parent-Managed Account settings myself."

Doesn't work — the Parent PIN gates changes.
Counter: pick a genuinely random PIN, store in your password manager. Don't pick the kid's birth year, your house alarm code, etc.

4. "I'll use WhatsApp on the web (web.whatsapp.com)."

WhatsApp Web requires the phone-app account to be active (it's a companion experience). For Parent-Managed Accounts, the web version inherits the parent-managed restrictions.
For 13+ regular accounts, web.whatsapp.com is fully functional.
Counter for 13+: DNS-level blocking of web.whatsapp.com.

5. "I'll use Disappearing Messages to hide what I'm saying."

Available only on regular accounts (13+); Parent-Managed Accounts have it disabled.
For older teens: this is conversation, not technical fix.

6. "I'll move conversations from WhatsApp to Signal/Telegram/iMessage to avoid Parent-Managed restrictions."

The restrictions only apply to WhatsApp. If your kid migrates to a less-restricted platform, you've solved one problem and started another.
Counter: same OS-level restrictions on the substitute apps. (Cross-link: Telegram guide.)

7. "I'll factory-reset the phone to remove the Parent-Managed link."

Works if your teen has admin access. Doesn't work if you've configured Family Sharing / Family Link / device-level restrictions on factory reset.
Counter: lock factory reset at the device level.

What WhatsApp parental controls don't cover

Be honest about the fence:

Message content. Parent-Managed Accounts don't surface chats. E2E encryption means parents (and Meta) can't read what's said. Same trade-off as every encrypted messenger.
Voice/video call content. Same.
Group chat content. Even on Parent-Managed Accounts where the parent controls who can add the child to groups, the messages within those groups are still invisible.
Status posts (for 13+ accounts). Stories that disappear after 24 hours.
Off-platform migration. WhatsApp is itself often the destination — kids meet on Discord/Snap and migrate to WhatsApp for "private" conversation.
WhatsApp Channels (the broadcast-follow product) — disabled on Parent-Managed Accounts; available to 13+. Channels can host political content, financial scams, religious extremism, etc. Worth knowing about for older teens.
Sextortion via WhatsApp. Documented but less common than via Snap/Discord/Telegram. The migration pattern (Snap/Insta → WhatsApp) is real because WhatsApp is perceived as more private.

Operational rhythm

For Parent-Managed Accounts (under-13):

First week: glance at Settings → Family → child once a day. Calibrate which contacts are messaging them, what groups they're in.
First month: weekly review. Watch for: unexpected new contacts (someone messaged them out of nowhere), group additions you didn't approve.
Ongoing: monthly. The dashboard doesn't show much; the rhythm is mostly setting-and-forgetting plus periodic spot-checks.
As they age toward 13: the Parent-Managed Account expires when the child turns 13. They convert to a regular WhatsApp account. Plan that conversation a few months ahead.

For 13+ regular accounts:

The dashboard doesn't exist. Operational rhythm is conversation-driven.
Check periodically that they have 2-step verification enabled (account security signal).
After any concerning behavior or platform update, check that their privacy settings haven't drifted to defaults.

What to actually talk to your teen about

Different prompts for different ages.

For under-13s on Parent-Managed Accounts:

"Has anyone messaged you that you don't know in real life?" Should be rare given the contacts-only restriction, but worth checking.
"What groups are you in?" Open question. Learn what communities they're part of.
"If someone in a group you're in messages you privately, what would you do?" The right answer is "block, tell you, leave the group."

For 13+ teens:

"Has anyone you don't know in real life ever asked you to talk somewhere off WhatsApp?" Off-platform-migration warning. Same pattern as every other platform.
"Do you use disappearing messages with anyone?" Direct question. Sometimes legitimate (sensitive personal stuff with a partner); sometimes a flag.
"Have you ever been added to a group you didn't want to be in?" Common WhatsApp pattern.
"Has anyone offered you cryptocurrency, NFTs, or 'free money' in a WhatsApp group?" Classic scam pattern.

What NOT to lead with:

"I'm reading your WhatsApp messages." You can't (E2E encryption). And the Parent-Managed Account product specifically doesn't surface content. Don't claim you can.
"WhatsApp is dangerous." Most use is mundane; painting it as uniformly dangerous teaches your teen you can't be trusted to be nuanced.

Bottom line

WhatsApp's Parent-Managed Accounts (March 2026) are a meaningful improvement for under-13 users — structural feature restrictions plus parent-PIN-gated settings. For 13+ teens, WhatsApp remains in the Telegram tier of "no built-in supervision; do what you can with privacy settings + OS layers."

The realistic stack:

For under-13:

Parent-Managed Account with all settings configured (Setup Parts 1 + 2)
OS-level time limits (Apple Screen Time / Family Link)
DNS-level filtering for hard time-of-day boundaries
The conversation — about contacts, group invites from strangers, off-platform migration

For 13+:

Privacy settings locked down (Setup Part 3)
2-step verification enabled
OS-level controls for time limits and app-install restrictions
DNS-level filtering for boundaries
The conversation — about disappearing messages, off-platform migration, scams, sextortion patterns

If you do nothing else after reading this guide, do these three things tonight:

For under-13: set up the Parent-Managed Account (Setup Part 1) — link via QR, set Parent PIN, lock contacts to "My Contacts only"
For 13+: walk through Privacy settings together, enable 2-step verification
Have a 5-minute conversation about WhatsApp group invites from strangers and what to do when one appears

The rest can wait until next weekend.

For WhatsApp the platform — the verdict on whether it's appropriate for your teen, the documented harm patterns, and how WhatsApp differs from other messaging apps — see our WhatsApp app profile. For the broader encrypted-messenger landscape, see our Telegram guide. For OS-level controls, see Apple Screen Time, Google Family Link, and Windows 11 Parental Controls. For network-level filtering, see NextDNS for Families. For the response checklist if your teen experiences sextortion (WhatsApp is a primary migration platform), see our advisory on what to do if sextortion happens to your child.

No affiliate relationship with Meta or WhatsApp.