← All guidesCanopy Families
Security guide7 min read

How to set up parental controls on an ASUS router

ASUS routers are among the most capable consumer networking devices available in the UK. They support DNS-over-HTTPS and DNS-over-TLS natively, include AiProtection (powered by Trend Micro) for malware and content filtering, and offer per-device parental controls with time scheduling. This guide shows you how to configure all of it.

Before you start
  • AiProtection features require the router to be registered and may phone home to Trend Micro servers. Review the privacy settings if this concerns you.
  • ASUS routers are sometimes exposed directly to the internet via UPnP. Disable UPnP if you do not specifically need it.

Step 1 — Log into the ASUS router admin panel

  1. Connect to your ASUS network.
  2. Open a browser and go to http://router.asus.com or http://192.168.1.1.
  3. Log in with username "admin" and your admin password (on the router label if not previously changed).

Step 2 — Change the admin password

  1. Go to Administration → System.
  2. Under Router Login Settings, change the username and password.
  3. Set a strong password of 12+ characters.
  4. Apply and log back in.

Step 3 — Enable WPA3 and update Wi-Fi security

  1. Go to Wireless → General.
  2. Set Authentication Method to WPA3-Personal or WPA2/WPA3-Personal.
  3. Update your Wi-Fi passphrase.
  4. Apply.

Step 4 — Set up a guest network

  1. Go to Wireless → Guest Network.
  2. Enable a guest SSID.
  3. Set a separate passphrase.
  4. Ensure "Access Intranet" is set to Off (to isolate guest devices from your main network).
  5. Apply.

Step 5 — Configure DNS-over-HTTPS with NextDNS

  1. Create a free NextDNS account at nextdns.io and note your Profile ID.
  2. In the ASUS admin, go to WAN → DNS Settings.
  3. Set DNS Privacy Protocol to DNS-over-HTTPS (DoH).
  4. Set DoH profile to Custom.
  5. Enter https://dns.nextdns.io/[YOUR_PROFILE_ID] as the DoH URL.
  6. Set Primary DNS to 45.90.28.159 and Secondary DNS to 45.90.30.159 as fallback. Note: if you're a Canopy Pro member, use your personalised DNS addresses from your Safety dashboard instead.
  7. Apply.
ASUS's DoH implementation intercepts DNS queries from all devices on the network and upgrades them to encrypted DoH queries. This prevents children from bypassing filtering by changing DNS settings on their own devices.

Step 6 — Enable AiProtection parental controls

  1. Go to AiProtection → Parental Controls.
  2. Enable AiProtection (may require agreeing to Trend Micro terms).
  3. Under Web Filtering, enable the content categories appropriate for your children.
  4. Under Client Manager, add your children's devices.
  5. Set time scheduling to restrict internet access during homework and bedtime hours.
🌳

Want Canopy to manage this for you?

Canopy Families guides parents through every security step — DNS setup, device controls, and content filtering — and keeps your protection up to date as your children grow.

Start free — takes 5 minutes