← All guidesCanopy Families
Security guide7 min read

How to set up parental controls on Virgin Media Hub

Virgin Media's Hub 3, Hub 4, and Hub 5 are powerful routers, but they come with no content filtering enabled. This guide covers the Hub 3, 4, and 5 — how to lock down the admin panel, configure DNS-based filtering with NextDNS, and switch on Virgin Web Safe, which blocks adult content for every device on your broadband connection before it reaches your router.

Before you start
  • Virgin Media Hub 3 is known to reset some settings after firmware updates. After any hub restart, verify your DNS settings are still in place.
  • Hub 5 users in Modem Mode: your hub acts as a pass-through to a separate router. DNS settings must be applied to that router, not the Hub 5.
  • Virgin Web Safe is linked to your Virgin Media account — secure your account credentials so a determined teenager cannot disable it.

Step 1 — Log into the Virgin Media Hub admin panel

  1. Connect a device to your Virgin Media Wi-Fi.
  2. Open a browser and go to http://192.168.0.1.
  3. Enter your admin credentials. The default username is "admin".
  4. For Hub 3: the default password is "changeme".
  5. For Hub 4 and Hub 5: the default password is the serial number printed on the hub label.
  6. Click Sign in.
If http://192.168.0.1 does not load, the hub IP may be different. Check it on a Windows PC under Settings → Network → Wi-Fi → Properties, or on a Mac under System Settings → Wi-Fi → Details.

Step 2 — Change the default admin password

The Hub 3's default password "changeme" is well-known. Change it immediately — it is the first thing anyone with local network access will try.
  1. Once logged in, go to Advanced Settings.
  2. Click Security → Change Password.
  3. Enter a new strong password (12+ characters) and confirm it.
  4. Save changes and log back in.

Step 3 — Verify Wi-Fi encryption settings

  1. In Advanced Settings, go to Wi-Fi.
  2. Confirm the security mode is WPA2 or WPA2/WPA3.
  3. Update your Wi-Fi passphrase if it is still the factory default.
  4. Apply and reconnect devices.

Step 4 — Create a guest Wi-Fi network

  1. In Advanced Settings, go to Wi-Fi → Guest Network.
  2. Enable the guest Wi-Fi.
  3. Set a unique guest passphrase.
  4. Apply.
  5. Move smart TVs, consoles, and smart speakers to the guest network.

Step 5 — Configure DNS filtering with NextDNS

Virgin Media Hub 3 firmware updates can reset custom DNS back to Virgin's default servers. Check your NextDNS logs periodically to confirm traffic is being filtered.
  1. Sign up for a free account at nextdns.io.
  2. In the Hub admin, go to Advanced Settings → Security.
  3. Look for DNS Settings or Custom DNS Servers.
  4. Set Primary DNS to 45.90.28.159 and Secondary DNS to 45.90.30.159. Note: if you're a Canopy Pro member, use your personalised DNS addresses from your Safety dashboard instead.
  5. Save.
  6. In your NextDNS dashboard, enable the privacy and security categories appropriate for your family.

Step 6 — Enable Virgin Web Safe

  1. Go to my.virginmedia.com and sign in with your Virgin Media account.
  2. Go to Account Settings → Network Controls, or search for "Web Safe" in the account menu.
  3. Switch Web Safe on.
  4. Select the appropriate level: "Family Safe" for households with children.
  5. Changes apply within minutes across all devices on your connection.
Virgin Web Safe operates at the Virgin Media network — upstream of your hub — so it applies even if a device uses its own DNS settings. It is the most reliable layer for network-level filtering on Virgin broadband.
🌳

Want Canopy to manage this for you?

Canopy Families guides parents through every security step — DNS setup, device controls, and content filtering — and keeps your protection up to date as your children grow.

Start free — takes 5 minutes