How can a child bypass this control?

Tricks catalogue

100 documented workarounds. 2 closed by the manufacturer, 32 partially mitigated, 66 open — re-check on every OS major release.

By what you’ll see

"One More Minute" Grace Period Exploitation — Child repeatedly gains 60 seconds of extra app usage after screen time expires across multiple limited apps.
Airplane Mode / Offline Usage Glitch — Device kept in Airplane Mode / Offline state continuously during downtime; Family Link reports device offline.
Alternate browser outside a browser-specific rule — A permitted alternate browser shows use while the browser to which site restrictions were applied shows little or none.
Alternate DNS resolver — The family DNS resolver stops receiving queries from a device while the device still reaches Internet destinations. Network telemetry may in
Alternative App Marketplaces — Alternative store fronts (e.g., Epic Games Store, AltStore, Mobivention) installed on device.
Alternative or embedded browser access claim — The family’s policy names one browser but cannot state which browsers or in-app web views are in scope.
Android ADB / Developer Options Exploitation — “Developer options” enabled in Android settings; USB debugging active.
Android Private DNS outside the family resolver — Router DNS logs lose queries from the device even though Internet activity continues.
Android Rooting & iOS Jailbreaking — Presence of Cydia, Sileo, Magisk, or SuperSU apps; banking/security apps report integrity check failure.
Android secondary user outside the child's supervised profile — Android shows additional device users/profiles. Activity under the alternate profile is absent from the child’s Family Link view.
Another phone's hotspot or tethering — The controlled device is not associated with the home access point while still showing use; the hotspot-providing device may show hotspot/te
APK Sideloading via Third-Party Sources — Presence of installer files (.apk) in Downloads folder; apps installed from unknown sources outside Google Play Store.
App & Website Activity not enabled — No activity summary appears although Screen Time is expected to report use.
App Deletion and Re-installation Loop — App timer resets or activity logs show frequent deletion and redownloading of cloud-icon apps in App Store / Play Store.
App-age restriction omitted — The Apps restriction was not reviewed after device setup or age change.
Apple ID Passcode Reset Bypass — Screen Time passcode is reset using child’s own Apple ID credentials if recovery was assigned to child’s account instead of parent’s account
Ask to Buy / Purchase Approval Request Spamming — Parents flooded with dozens of purchase/download approval notification prompts until yielding.
Birthdate Manipulation in Account Settings — Child account suddenly acquires adult account privileges, or age rating blocks cease functioning.
Bootloader unlocking as a route to a modified Android system — A device may expose an unlocked-bootloader state/warning or other integrity signals depending on device and vendor. Developer Options being
Cellular data instead of home Wi-Fi — The phone is absent or idle in the home-router activity log while device-side Screen Time/Digital Wellbeing or carrier usage indicates conti
Chrome website restrictions not configured — Parent cannot identify the current Website restrictions, allowed/blocked sites, permissions or extension policy.
Content & Privacy Restrictions not enabled — The child is in Family Sharing, but Content & Privacy Restrictions / Beschränkungen is off or unavailable in the child’s Screen Time set
Controls not reviewed after updates or age changes — No review date, no device/account inventory, or the settings do not match the child’s present age and routines.
Device inventory omits a Chrome-capable device — The child uses Android, Chromebook, iPhone/iPad, Windows, Mac or Linux beyond the parent’s inventory.
Device-Level Google Account Removal — Device vanishes from Family Link active device list; Google services stop syncing.
Direct Web Distribution App Installs — Safari prompts user to trust developer domain and install app directly from website interface.
Disguised Vault / Calculator Apps — App icon appears as a generic calculator or utility, but opening it reveals a passcode prompt unlocking hidden photos, web browsers, or chat
DNS over HTTPS in a browser or app — Expected DNS queries disappear while HTTPS traffic continues. With application DoH, the resolver exchange is carried over HTTPS and may rese
Encrypted ClientHello removes SNI visibility — A network product that previously classified HTTPS destinations by SNI may lose that hostname signal while encrypted traffic continues norma
Exception-request pressure — Repeated requests appear at the same time, app, or stated urgency.
Factory Reset / Recovery Mode Bypass — Device reboots into factory setup wizard; all user data wiped.
Family Link assumed to be a content filter — The plan contains only Family Link and no service- or browser-level content settings.
Family Link regional availability assumed — Setup or features differ from the documentation used in another country.
Family Link used outside supported device scope — An iPhone, iPad, Windows/Mac/Linux computer, or school-managed account appears in the child’s actual device/use inventory.
Friend or School Device Borrowing — Child reports accessing blocked content or social media while at school or visiting friends’ homes.
Gaming Console / Smart TV Web Browsing — Child uses web browser apps or YouTube on PlayStation, Xbox, Nintendo Switch, or Smart TVs during downtime.
Google purchase approval assumed to cover all billing — The household policy names Family Link but not the payment system or store to which it applies.
Guest network outside the parental-control policy — The device appears in the guest-network client list rather than the primary LAN, or obtains an address from a guest VLAN/subnet that has dif
Guest Profile / Multi-User Switch — Device status bar shows user switcher icon; main user profile inactive while device in use.
HTTPS web proxy or relay outside a domain-only block — The expected blocked destination is absent from logs while an allowed intermediary service carries substantial browsing activity. This is on
iOS DFU Mode / Restore via Mac/PC — iPhone connected to iTunes/Finder in recovery mode; operating system reinstalled.
iOS TestFlight Beta Testing Installs — TestFlight app installed; apps displaying orange beta indicator dots next to app titles.
IPv6 path outside an IPv4-only filter — A destination fails when reached over IPv4 but remains reachable over IPv6; router logs show IPv6 flows not matched by the intended rule.
Jailbroken iPhone undermines trusted-OS assumptions — Device integrity anomalies, unsupported modifications, instability or management-compliance failures may be clues. No single consumer-visibl
Leaving / Changing Family Group — Notification sent to Family Organizer that member left family group; loss of location tracking and purchase sharing.
MAC-randomisation or router identifier mismatch — A router rule refers to an identifier but the vendor does not show a stable, documented device association.
Non-Google search outside SafeSearch — Search/browsing history shows queries through another search product while SafeSearch itself remains correctly locked.
Non-persistent Wi-Fi MAC randomization — Repeatedly changing randomized client identities for what appears operationally to be the same handset; multiple stale DHCP/client entries;
Notification Preview Response Bypass — Child receives incoming notifications and uses quick-reply interface directly from lock screen or notification shade during limited hours.
Notification-preview exposure — A child appears to know about a parent notification or decision before the adult discussed it.
Other-caregiver device not included in the plan — The family plan has no shared rule for devices outside the main home.
Over-broad web-access choice — The configured choice is Unrestricted when the family intended a restricted browsing policy.
Parent Apple ID Account Sign-In Override — Device name changes or parent’s personal messages/iClouds sync onto child’s device.
Parent-device or approval-channel exposure — An adult’s approval channel is used unexpectedly or no adult can explain a setting change.
Permission request framed as an emergency or school need — The same stated need recurs without a pre-agreed verification route, or a request arrives with urgency that discourages reflection.
Privacy-change restriction omitted — The child’s Beschränkungen page permits privacy-setting changes without the parent’s intended review.
Public or foreign Wi-Fi instead of the managed home network — The child device disappears from the home access point while remaining in active use; home DNS/filter logs contain no corresponding requests
Purchase/download restriction omitted — Parent cannot show the child’s purchase/download configuration.
Randomized MAC defeats MAC-address-only child rules — The router shows a different/private MAC identity than the physical device identity, or a child device appears as a new client after identit
Recovery restore disrupts local device state — The device has been erased/reconfigured, disappears and reappears in management/account inventories, or requires setup again.
Relative or co-parent approval inconsistency — The child receives conflicting answers or the adults cannot name a common minimum rule.
Removing a manually installed configuration profile on an unsupervised Apple device — The expected configuration profile is no longer present; the associated VPN/filter/certificate disappears or stops operating. A genuine MDM
Roblox block expected to interrupt a current session — A child remains in a game after the parent has blocked it.
Roblox blocked-game search visibility mistaken for access — A blocked game remains visible in Roblox search results.
Roblox content maturity not configured — Parent cannot identify the selected content maturity setting.
Roblox gift-card redemption outside monthly limit — A family’s policy treats the monthly limit as the sole spending rule while gift cards are possible.
Roblox monthly spending limit not enabled — The parent cannot show a current monthly spending limit and a linked parent-privilege account.
Roblox parent account not linked — The adult tries to change a child setting but has no parent account linked to the child’s account.
Roblox Xbox purchase coverage assumed — Roblox spending controls are configured but Xbox store controls have not been reviewed.
Router reset or home-network credential exposure — Unexpected router configuration changes, unknown devices, or an inability to account for who administers the home network.
Router-only rule assumed to cover foreign Wi-Fi or a hotspot — The plan has no guidance for school, travel, friends’ homes or other carers’ networks.
Router-only rule assumed to cover mobile data — The protection plan names only the home router and has no device or mobile-provider layer.
Screen Time settings not locked — Lock Screen Time Settings was never completed or the parent cannot confirm it is active.
Second device left outside the control inventory — Phones, tablets, laptops, consoles, smart TVs, toys or watches are missing from the household review.
Secondary / Legacy Unmanaged Devices — Child observed using old smartphones, iPods, or unmonitored tablets hidden around the house.
Secondary App Instance / Parallel Space — Presence of app cloning utilities, Dual Messenger features, or secure folder environments on Android devices.
Secondary Google / Apple Account Login — Unapproved apps appearing on device; secondary email accounts logged in under Settings or App Store.
Shoulder Surfing / Passcode Guessing — Parental controls suddenly turned off or altered without parent intervention; child knows confidential PINs.
Sibling Tablet / Shared Family Device Hopping — Child switches to a sibling’s tablet or shared family device once their own daily quota expires.
Signed-out or public YouTube/web viewing outside an account restriction — Web traffic or browser Screen Time shows YouTube while the supervised/restricted account itself shows no corresponding account activity.
Siri / Voice Assistant Notification Access Bypass — Child speaks to Siri or voice assistant during downtime to send messages or read incoming notifications without opening restricted apps.
Siri or assistant web search outside an otherwise restricted workflow — Siri/assistant use is visible as device activity, but the opened source does not establish a parent-visible log of individual assistant sear
TikTok Family Pairing not linked — The parent cannot confirm that the accounts are paired or view the corresponding setting controls.
TikTok privacy or direct-message setting not reviewed — Parent and teen cannot state the current account visibility or direct-message configuration.
TikTok screen-time setting not reviewed — Screen-time settings cannot be shown by either the parent or teen during a joint review.
Time-Limited Web Content via Shared Links — Embedded web view usage inside permitted messaging or educational apps (e.g., opening YouTube links inside SMS/iMessage or school apps).
Timezone / Date-Time Shift Bypass — System clock shows incorrect time; messages or game logs display timestamps from other time zones.
Unenrolling from removable MDM/device management — MDM console reports unenrollment or loss of check-in; managed profiles/settings disappear.
Unilateral Supervision Opt-Out at Age 13+ — Parents receive immediate email notification that child stopped supervision; child’s Android device enters temporary 24-hour lockout mode un
Unlimited Time System Apps Exploitation — High battery or screen usage reported under system components; child continues using device during downtime via built-in apps.
VPN traffic that is difficult to classify reliably — Machine-learning and heuristic classifiers can produce a VPN probability or category, but cross-network accuracy is not constant. USENIX res
VPN tunnel around the local filter — A persistent VPN status/configuration on the device is strong evidence of a tunnel. A router may see long-lived encrypted flows to VPN infra
VPN, custom DNS or DNS-over-HTTPS against a network-only filter — The plan relies only on a network-layer filter but lacks vendor-documented device and account controls.
Web App / Progressive Web App — Bookmarked app-like icons appearing on Home Screen running via browser windows without native App Store entries.
Web Version / Browser Substitute for Limited Apps — High screen time logged under Safari, Chrome, or secondary web browsers while target social media/game app time remains low.
Website instead of the blocked app — Browser/domain activity for the service continues despite the native app being blocked or absent.
Widget-Based App Access During Downtime — Child interacts with home screen widgets (e.g., news feeds, messaging previews, media playback controls) while app icons are dimmed or locke
YouTube Kids or supervised YouTube not provisioned — The child does not use the intended managed Google account or the selected experience is unavailable locally.
YouTube Restricted Mode not reviewed — Parent cannot confirm the current Restricted Mode state for the relevant child account.
YouTube supervision ends after self-management decision — The child is over 13 or local applicable age and has chosen to manage their own account.

Explorer

Tricks catalogue

Tricks catalogue

By what you’ll see

By mechanism

Category account

Category advanced-technical

Category app-install

Category content

Category device

Category network

Category parental-misconfiguration

Category second-device

Category social-engineering

Category time

Table of Contents