Skip to main content
Online

When Your Child Has Installed a VPN

A calm, conversation-led guide for parents when a child has installed a VPN to get around parental controls — what it actually does, what risks change, and how to respond without a panic.

What is this?

A VPN, or virtual private network, sends a device's internet traffic through a remote server, so the network sees an encrypted tunnel rather than which sites are being visited. Children install VPNs for many reasons — to watch a streaming library from another country, to play with friends abroad, because a school filter is too strict, to get around home Wi-Fi parental controls, or to hide activity from a parent. Finding a VPN on your child's phone is not a worst-case discovery; it usually opens a useful conversation rather than ending one. The aim of this guide is to help that conversation, not to start an arms race.

How it works

Most home parental-control products work by inspecting traffic at the router or via a profile on the device. A VPN encrypts that traffic so the router and profile can no longer see destinations, which is why YouTube watch history, app blocks, and 'safe search' settings stop being enforced. Some VPNs are reputable paid services; many free VPNs make money by selling user data or by injecting adverts, and a few are outright malware. The practical risk profile changes in three ways: bypassed filters mean a child can reach content that age controls were blocking; logging and security depend entirely on which provider they chose; and some streaming, banking, and school services will refuse to work over a VPN.

Warning signs

Prevention steps

Lead with curiosity, not interrogation

Ask what they wanted to do that the home setup did not allow. Often the answer is mundane (a US-only show, a game with friends abroad, a school filter that blocks coursework). That answer is the actual conversation.

Talk about which VPN, not just whether

Free VPNs often monetise user data; some are run by companies in jurisdictions with no privacy regime. If your child is going to use one, a reputable paid VPN is meaningfully safer than a free one.

Move parental controls closer to the device

Router-level controls are easy to bypass with a VPN. Device-level controls (iOS Screen Time with content restrictions, Android Family Link with app blocking) are harder to bypass and survive the VPN being on.

Agree what the VPN does not unlock

A VPN does not turn off your family's rules about contact with strangers, sharing of intimate images, or what time the phone leaves the bedroom. Make that explicit so the conversation is about behaviour, not technology.

What to do if it happens

  1. 1Have one calm conversation rather than confiscating the phone first. Ask what they were trying to reach, and listen.
  2. 2Review the specific VPN they installed — its country of origin, its reviews, whether it is a known data-harvesting app. Replace it if it looks dubious.
  3. 3If the VPN was installed to reach harmful content (self-harm, pornography, extremist material), focus on the underlying need, not only the bypass. The relevant Safe Child Guide risk pages and the YoungMinds Crisis Messenger (text YM to 85258) can help.
  4. 4If the bypass was to escape monitoring by a separated parent, this is a wider family-arrangement issue — speak to the school's safeguarding lead and, if there is coercive control, Refuge (0808 2000 247).

Related topics

If you need to report this

In immediate danger: call 999. For non-emergency police matters, call 101.

Concerned about a child but it's not an emergency? NSPCC helpline 0808 800 5000. Childline for young people 0800 1111.

This is practical educational content to support families. For case-specific concerns about a child's safety, contact the NSPCC helpline on 0808 800 5000 or your local safeguarding team.

Frequently Asked Questions

Related Resources

Was this page helpful?

Last reviewed: 2026-06-14

Explore more