Tricks catalogue

131 documented workarounds. 2 closed by the manufacturer, 39 partially mitigated, 90 open — re-check on every OS major release.

By what you’ll see

• "One More Minute" Grace Period Exploitation — Child repeatedly gains 60 seconds of extra app usage after screen time expires across multiple limited apps.
• "One More Minute" is not configurable; per-app per-day OS feature — Auf dem Kind-Gerät: nach Ablauf eines App-Limits erscheint der
• Airplane Mode / Offline Usage Glitch — Device kept in Airplane Mode / Offline state continuously during downtime; Family Link reports device offline.
• Alternate browser outside a browser-specific rule — A permitted alternate browser shows use while the browser to which site restrictions were applied shows little or none.
• Alternate DNS resolver — The family DNS resolver stops receiving queries from a device while the device still reaches Internet destinations. Network telemetry may in
• Alternative App Marketplaces — Alternative store fronts (e.g., Epic Games Store, AltStore, Mobivention) installed on device.
• Alternative or embedded browser access claim — The family’s policy names one browser but cannot state which browsers or in-app web views are in scope.
• Android ADB / Developer Options Exploitation — “Developer options” enabled in Android settings; USB debugging active.
• Android Private DNS outside the family resolver — Router DNS logs lose queries from the device even though Internet activity continues.
• Android Rooting & iOS Jailbreaking — Presence of Cydia, Sileo, Magisk, or SuperSU apps; banking/security apps report integrity check failure.
• Android secondary user outside the child's supervised profile — Android shows additional device users/profiles. Activity under the alternate profile is absent from the child’s Family Link view.
• Another phone's hotspot or tethering — The controlled device is not associated with the home access point while still showing use; the hotspot-providing device may show hotspot/te
• APK Sideloading via Third-Party Sources — Presence of installer files (.apk) in Downloads folder; apps installed from unknown sources outside Google Play Store.
• App & Website Activity not enabled — No activity summary appears although Screen Time is expected to report use.
• App Deletion and Re-installation Loop — App timer resets or activity logs show frequent deletion and redownloading of cloud-icon apps in App Store / Play Store.
• App-age restriction omitted — The Apps restriction was not reviewed after device setup or age change.
• Apple ID Passcode Reset Bypass — Screen Time passcode is reset using child’s own Apple ID credentials if recovery was assigned to child’s account instead of parent’s account
• Ask to Buy / Purchase Approval Request Spamming — Parents flooded with dozens of purchase/download approval notification prompts until yielding.
• Backup restore: what survives Screen Time and Family Link? — Auf Apple: nach iCloud-Backup-Restore sind Bildschirmzeit-
• Birthdate Manipulation in Account Settings — Child account suddenly acquires adult account privileges, or age rating blocks cease functioning.
• Birthday 18 — Apple Screen Time does not auto-end; user must confirm — Vor dem 18. Geburtstag: Bildschirmzeit-Einstellungen werden vom
• Bootloader unlocking as a route to a modified Android system — A device may expose an unlocked-bootloader state/warning or other integrity signals depending on device and vendor. Developer Options being
• Browser secure-DNS setting not reviewed in the family plan — The device’s system DNS is set to the family resolver, yet a browser’s secure-DNS setting is on and points elsewhere; the browser loads bloc
• Browser-managed DoH overrides the system resolver — The device’s system DNS is set to the family resolver, yet a browser-level secure-DNS setting is on and points elsewhere; the browser reache
• Cellular data instead of home Wi-Fi — The phone is absent or idle in the home-router activity log while device-side Screen Time/Digital Wellbeing or carrier usage indicates conti
• Child stops Google Family Link supervision with parent approval (under 18) — Auf dem Eltern-Gerät: E-Mail-Benachrichtigung an die Eltern-Adresse
• Chrome website restrictions not configured — Parent cannot identify the current Website restrictions, allowed/blocked sites, permissions or extension policy.
• Content & Privacy Restrictions not enabled — The child is in Family Sharing, but Content & Privacy Restrictions / Beschränkungen is off or unavailable in the child’s Screen Time set
• Controls not reviewed after updates or age changes — No review date, no device/account inventory, or the settings do not match the child’s present age and routines.
• Device inventory omits a Chrome-capable device — The child uses Android, Chromebook, iPhone/iPad, Windows, Mac or Linux beyond the parent’s inventory.
• Device-Level Google Account Removal — Device vanishes from Family Link active device list; Google services stop syncing.
• Direct Web Distribution App Installs — Safari prompts user to trust developer domain and install app directly from website interface.
• Disguised Vault / Calculator Apps — App icon appears as a generic calculator or utility, but opening it reveals a passcode prompt unlocking hidden photos, web browsers, or chat
• DNS over HTTPS in a browser or app — Expected DNS queries disappear while HTTPS traffic continues. With application DoH, the resolver exchange is carried over HTTPS and may rese
• DNS64/NAT64 routes IPv4 destinations through IPv6 — An IPv4-blocked destination resolves and reaches when the device is on a carrier or hotspot that uses DNS64/NAT64; the IPv4 rule never fires
• Downtime: emergency numbers and Always Allowed always work — Während Downtime: das Kind kann immer noch Notrufnummern anrufen,
• Dual SIM or eSIM creates a second cellular context — The device shows two cellular lines in its status indicators; cellular-data use is high while the home Wi-Fi is idle; the device’s carrier s
• Encrypted ClientHello removes SNI visibility — A network product that previously classified HTTPS destinations by SNI may lose that hostname signal while encrypted traffic continues norma
• Encrypted ClientHello removes the hostname signal from a router filter — A browser on the device negotiates an ECH-enabled connection; the router sees an encrypted ClientHello to a server without the destination h
• Exception-request pressure — Repeated requests appear at the same time, app, or stated urgency.
• Factory Reset / Recovery Mode Bypass — Device reboots into factory setup wizard; all user data wiped.
• Factory reset: what survives on Screen Time and Family Link? — Auf Apple: nach „Erase all content and settings” und Re-Setup
• Family Link assumed to be a content filter — The plan contains only Family Link and no service- or browser-level content settings.
• Family Link regional availability assumed — Setup or features differ from the documentation used in another country.
• Family Link used outside supported device scope — An iPhone, iPad, Windows/Mac/Linux computer, or school-managed account appears in the child’s actual device/use inventory.
• Friend or School Device Borrowing — Child reports accessing blocked content or social media while at school or visiting friends’ homes.
• Gaming Console / Smart TV Web Browsing — Child uses web browser apps or YouTube on PlayStation, Xbox, Nintendo Switch, or Smart TVs during downtime.
• Google purchase approval assumed to cover all billing — The household policy names Family Link but not the payment system or store to which it applies.
• Guest network outside the parental-control policy — The device appears in the guest-network client list rather than the primary LAN, or obtains an address from a guest VLAN/subnet that has dif
• Guest Profile / Multi-User Switch — Device status bar shows user switcher icon; main user profile inactive while device in use.
• HTTPS web proxy or relay outside a domain-only block — The expected blocked destination is absent from logs while an allowed intermediary service carries substantial browsing activity. This is on
• iCloud Private Relay bypasses a router filter — Router DNS log shows queries resolving through the same encrypted endpoint as Safari traffic; Safari loads a blocked destination when the ho
• iCloud Private Relay not disabled in the family plan — The Apple Account on the child’s device has Private Relay turned on; a router-side block that targets a hostname by DNS still resolves becau
• iOS DFU Mode / Restore via Mac/PC — iPhone connected to iTunes/Finder in recovery mode; operating system reinstalled.
• iOS TestFlight Beta Testing Installs — TestFlight app installed; apps displaying orange beta indicator dots next to app titles.
• IPv6 path outside an IPv4-only filter — A destination fails when reached over IPv4 but remains reachable over IPv6; router logs show IPv6 flows not matched by the intended rule.
• IPv6 privacy extensions fragment device identity — The device shows multiple IPv6 addresses in addition to its link-local address; router logs show short-lived IPv6 flows that do not match th
• Jailbroken iPhone undermines trusted-OS assumptions — Device integrity anomalies, unsupported modifications, instability or management-compliance failures may be clues. No single consumer-visibl
• Leaving / Changing Family Group — Notification sent to Family Organizer that member left family group; loss of location tracking and purchase sharing.
• MAC-randomisation or router identifier mismatch — A router rule refers to an identifier but the vendor does not show a stable, documented device association.
• Modern VPN protocols are harder to classify on the wire — A classifier marks a flow as probable VPN but cannot name a protocol; the device shows an active tunnel that the router cannot identify.
• Network time synchronisation bypasses manual clock filters — The device clock returns to a correct time after a manual change; time-based Screen Time or Family Link schedules reappear after the child h
• Non-Google search outside SafeSearch — Search/browsing history shows queries through another search product while SafeSearch itself remains correctly locked.
• Non-persistent Wi-Fi MAC randomization — Repeatedly changing randomized client identities for what appears operationally to be the same handset; multiple stale DHCP/client entries;
• Notification Preview Response Bypass — Child receives incoming notifications and uses quick-reply interface directly from lock screen or notification shade during limited hours.
• Notification-preview exposure — A child appears to know about a parent notification or decision before the adult discussed it.
• Organizer cannot remove under-13 child without deleting their Apple Account — Im Bildschirm Einstellungen > Familie > [Kind] fehlt der
• Other-caregiver device not included in the plan — The family plan has no shared rule for devices outside the main home.
• Over-broad web-access choice — The configured choice is Unrestricted when the family intended a restricted browsing policy.
• Parent Apple ID Account Sign-In Override — Device name changes or parent’s personal messages/iClouds sync onto child’s device.
• Parent receives notification when child leaves Family Sharing or stops supervision — Apple: rote Ausrufezeichen-Markierung in der Einstellungen-App auf
• Parent-device or approval-channel exposure — An adult’s approval channel is used unexpectedly or no adult can explain a setting change.
• Per-app VPN leaves untargeted apps outside the tunnel — A VPN is active on the device but a specific browser or app reaches the Internet through the carrier’s default path; the per-app VPN profile
• Permission request framed as an emergency or school need — The same stated need recurs without a pre-agreed verification route, or a request arrives with urgency that discourages reflection.
• Personal hotspot on the child's device itself — The child’s phone is logged on the home Wi-Fi but the cellular-data indicator shows heavy use; another device in the household joins a Wi-Fi
• Privacy-change restriction omitted — The child’s Beschränkungen page permits privacy-setting changes without the parent’s intended review.
• Private DNS not locked on the supervised device — The Android device’s Private DNS setting is on and points to a resolver the household has not configured; the family DNS resolver receives n
• Public or foreign Wi-Fi instead of the managed home network — The child device disappears from the home access point while remaining in active use; home DNS/filter logs contain no corresponding requests
• Purchase/download restriction omitted — Parent cannot show the child’s purchase/download configuration.
• Randomized MAC defeats MAC-address-only child rules — The router shows a different/private MAC identity than the physical device identity, or a child device appears as a new client after identit
• Recovery restore disrupts local device state — The device has been erased/reconfigured, disappears and reappears in management/account inventories, or requires setup again.
• Relative or co-parent approval inconsistency — The child receives conflicting answers or the adults cannot name a common minimum rule.
• Removing a manually installed configuration profile on an unsupervised Apple device — The expected configuration profile is no longer present; the associated VPN/filter/certificate disappears or stops operating. A genuine MDM
• Reset Screen Time passcode via Apple Account recovery — Auf dem Gerät, das nach dem Bildschirmzeit-Code fragt:
• Roblox block expected to interrupt a current session — A child remains in a game after the parent has blocked it.
• Roblox blocked-game search visibility mistaken for access — A blocked game remains visible in Roblox search results.
• Roblox content maturity not configured — Parent cannot identify the selected content maturity setting.
• Roblox gift-card redemption outside monthly limit — A family’s policy treats the monthly limit as the sole spending rule while gift cards are possible.
• Roblox monthly spending limit not enabled — The parent cannot show a current monthly spending limit and a linked parent-privilege account.
• Roblox parent account not linked — The adult tries to change a child setting but has no parent account linked to the child’s account.
• Roblox Xbox purchase coverage assumed — Roblox spending controls are configured but Xbox store controls have not been reviewed.
• Router MAC rule not rebound after OS update — A device-pause or schedule that used to apply to the child’s device no longer applies after a recent OS update; the router’s client list sho
• Router reset or home-network credential exposure — Unexpected router configuration changes, unknown devices, or an inability to account for who administers the home network.
• Router-only rule assumed to cover foreign Wi-Fi or a hotspot — The plan has no guidance for school, travel, friends’ homes or other carers’ networks.
• Router-only rule assumed to cover mobile data — The protection plan names only the home router and has no device or mobile-provider layer.
• School or library device joins the home Wi-Fi — The home router’s client list shows a new device whose hostname or DHCP fingerprint does not match the household inventory; the device is on
• Screen Time passcode recovery fails: three documented cases — Auf dem Gerät: nach Eingabe des Apple-Account-Passworts erscheint
• Screen Time settings not locked — Lock Screen Time Settings was never completed or the parent cannot confirm it is active.
• Second device left outside the control inventory — Phones, tablets, laptops, consoles, smart TVs, toys or watches are missing from the household review.
• Secondary / Legacy Unmanaged Devices — Child observed using old smartphones, iPods, or unmonitored tablets hidden around the house.
• Secondary App Instance / Parallel Space — Presence of app cloning utilities, Dual Messenger features, or secure folder environments on Android devices.
• Secondary Google / Apple Account Login — Unapproved apps appearing on device; secondary email accounts logged in under Settings or App Store.
• Shoulder Surfing / Passcode Guessing — Parental controls suddenly turned off or altered without parent intervention; child knows confidential PINs.
• Sibling Tablet / Shared Family Device Hopping — Child switches to a sibling’s tablet or shared family device once their own daily quota expires.
• Signed-out or public YouTube/web viewing outside an account restriction — Web traffic or browser Screen Time shows YouTube while the supervised/restricted account itself shows no corresponding account activity.
• Siri / Voice Assistant Notification Access Bypass — Child speaks to Siri or voice assistant during downtime to send messages or read incoming notifications without opening restricted apps.
• Siri or assistant web search outside an otherwise restricted workflow — Siri/assistant use is visible as device activity, but the opened source does not establish a parent-visible log of individual assistant sear
• Teen leaves Apple Family Sharing on their own (13-17) — Im Bildschirmzeit-Bericht des Organisators erscheint das Kind nicht mehr
• TikTok Family Pairing not linked — The parent cannot confirm that the accounts are paired or view the corresponding setting controls.
• TikTok privacy or direct-message setting not reviewed — Parent and teen cannot state the current account visibility or direct-message configuration.
• TikTok screen-time setting not reviewed — Screen-time settings cannot be shown by either the parent or teen during a joint review.
• Time zone change as a Downtime bypass (Android, parent-controllable) — Auf dem Eltern-Dashboard (Family Link): die Checkbox „Edit date &
• Time-Limited Web Content via Shared Links — Embedded web view usage inside permitted messaging or educational apps (e.g., opening YouTube links inside SMS/iMessage or school apps).
• Timezone / Date-Time Shift Bypass — System clock shows incorrect time; messages or game logs display timestamps from other time zones.
• Unenrolling from removable MDM/device management — MDM console reports unenrollment or loss of check-in; managed profiles/settings disappear.
• Unilateral Supervision Opt-Out at Age 13+ — Parents receive immediate email notification that child stopped supervision; child’s Android device enters temporary 24-hour lockout mode un
• Unlimited Time System Apps Exploitation — High battery or screen usage reported under system components; child continues using device during downtime via built-in apps.
• VPN configuration installed via personal Apple ID — A VPN configuration appears in the device’s VPN settings that the household has not installed; the configuration profile lists an installer
• VPN installed under a personal Apple ID, not the family one — The child signs in to the App Store with an Apple ID that is not the family-managed Apple ID; a VPN app appears under that account’s purchas
• VPN traffic that is difficult to classify reliably — Machine-learning and heuristic classifiers can produce a VPN probability or category, but cross-network accuracy is not constant. USENIX res
• VPN tunnel around the local filter — A persistent VPN status/configuration on the device is strong evidence of a tunnel. A router may see long-lived encrypted flows to VPN infra
• VPN, custom DNS or DNS-over-HTTPS against a network-only filter — The plan relies only on a network-layer filter but lacks vendor-documented device and account controls.
• Web App / Progressive Web App — Bookmarked app-like icons appearing on Home Screen running via browser windows without native App Store entries.
• Web Content filter does not reach in-app browsers — Auf dem Kind-Gerät: In-App-Browser (z. B. in WhatsApp, Telegram,
• Web Version / Browser Substitute for Limited Apps — High screen time logged under Safari, Chrome, or secondary web browsers while target social media/game app time remains low.
• WebRTC ICE candidates leak past a VPN tunnel — A service that is meant to be inside the VPN tunnel receives traffic from a public IP that does not match the VPN provider’s range; the devi
• Website instead of the blocked app — Browser/domain activity for the service continues despite the native app being blocked or absent.
• Widget-Based App Access During Downtime — Child interacts with home screen widgets (e.g., news feeds, messaging previews, media playback controls) while app icons are dimmed or locke
• YouTube Kids or supervised YouTube not provisioned — The child does not use the intended managed Google account or the selected experience is unavailable locally.
• YouTube Restricted Mode not reviewed — Parent cannot confirm the current Restricted Mode state for the relevant child account.
• YouTube supervision ends after self-management decision — The child is over 13 or local applicable age and has chosen to manage their own account.

By mechanism

Category account

• Apple ID Passcode Reset Bypass
• Birthdate Manipulation in Account Settings
• Birthday 18 — Apple Screen Time does not auto-end; user must confirm
• Child stops Google Family Link supervision with parent approval (under 18)
• Device-Level Google Account Removal
• Guest Profile / Multi-User Switch
• Leaving / Changing Family Group
• Organizer cannot remove under-13 child without deleting their Apple Account
• Parent Apple ID Account Sign-In Override
• Parent receives notification when child leaves Family Sharing or stops supervision
• Reset Screen Time passcode via Apple Account recovery
• Screen Time passcode recovery fails: three documented cases
• Secondary Google / Apple Account Login
• Shoulder Surfing / Passcode Guessing
• Teen leaves Apple Family Sharing on their own (13-17)
• Unilateral Supervision Opt-Out at Age 13+
• VPN configuration installed via personal Apple ID

Category advanced-technical

• Android secondary user outside the child's supervised profile
• Bootloader unlocking as a route to a modified Android system
• Jailbroken iPhone undermines trusted-OS assumptions
• MAC-randomisation or router identifier mismatch
• Recovery restore disrupts local device state
• Removing a manually installed configuration profile on an unsupervised Apple device
• Router reset or home-network credential exposure
• Unenrolling from removable MDM/device management
• VPN installed under a personal Apple ID, not the family one
• VPN, custom DNS or DNS-over-HTTPS against a network-only filter

Category app-install

• Alternative App Marketplaces
• APK Sideloading via Third-Party Sources
• App Deletion and Re-installation Loop
• Ask to Buy / Purchase Approval Request Spamming
• Direct Web Distribution App Installs
• Disguised Vault / Calculator Apps
• iOS TestFlight Beta Testing Installs
• Web App / Progressive Web App

Category content

• Alternate browser outside a browser-specific rule
• Alternative or embedded browser access claim
• Encrypted ClientHello removes the hostname signal from a router filter
• Non-Google search outside SafeSearch
• Roblox block expected to interrupt a current session
• Roblox blocked-game search visibility mistaken for access
• Roblox gift-card redemption outside monthly limit
• Roblox Xbox purchase coverage assumed
• Signed-out or public YouTube/web viewing outside an account restriction
• Siri or assistant web search outside an otherwise restricted workflow
• Web Content filter does not reach in-app browsers
• Website instead of the blocked app
• YouTube supervision ends after self-management decision

Category device

• Airplane Mode / Offline Usage Glitch
• Android ADB / Developer Options Exploitation
• Android Rooting & iOS Jailbreaking
• Backup restore: what survives Screen Time and Family Link?
• Factory Reset / Recovery Mode Bypass
• Factory reset: what survives on Screen Time and Family Link?
• Friend or School Device Borrowing
• Gaming Console / Smart TV Web Browsing
• iOS DFU Mode / Restore via Mac/PC
• Personal hotspot on the child's device itself
• Secondary / Legacy Unmanaged Devices
• Sibling Tablet / Shared Family Device Hopping

Category network

• Alternate DNS resolver
• Android Private DNS outside the family resolver
• Browser-managed DoH overrides the system resolver
• Cellular data instead of home Wi-Fi
• DNS over HTTPS in a browser or app
• DNS64/NAT64 routes IPv4 destinations through IPv6
• Dual SIM or eSIM creates a second cellular context
• Encrypted ClientHello removes SNI visibility
• Guest network outside the parental-control policy
• HTTPS web proxy or relay outside a domain-only block
• iCloud Private Relay bypasses a router filter
• IPv6 path outside an IPv4-only filter
• IPv6 privacy extensions fragment device identity
• Modern VPN protocols are harder to classify on the wire
• Non-persistent Wi-Fi MAC randomization
• Per-app VPN leaves untargeted apps outside the tunnel
• Public or foreign Wi-Fi instead of the managed home network
• Randomized MAC defeats MAC-address-only child rules
• Router-only rule assumed to cover foreign Wi-Fi or a hotspot
• Router-only rule assumed to cover mobile data
• VPN traffic that is difficult to classify reliably
• VPN tunnel around the local filter
• WebRTC ICE candidates leak past a VPN tunnel

Category parental-misconfiguration

• App & Website Activity not enabled
• App-age restriction omitted
• Browser secure-DNS setting not reviewed in the family plan
• Chrome website restrictions not configured
• Content & Privacy Restrictions not enabled
• Controls not reviewed after updates or age changes
• Family Link assumed to be a content filter
• Family Link regional availability assumed
• Family Link used outside supported device scope
• Google purchase approval assumed to cover all billing
• iCloud Private Relay not disabled in the family plan
• Over-broad web-access choice
• Privacy-change restriction omitted
• Private DNS not locked on the supervised device
• Purchase/download restriction omitted
• Roblox content maturity not configured
• Roblox monthly spending limit not enabled
• Roblox parent account not linked
• Router MAC rule not rebound after OS update
• Screen Time settings not locked
• TikTok Family Pairing not linked
• TikTok privacy or direct-message setting not reviewed
• TikTok screen-time setting not reviewed
• YouTube Kids or supervised YouTube not provisioned
• YouTube Restricted Mode not reviewed

Category second-device

• Another phone's hotspot or tethering
• Device inventory omits a Chrome-capable device
• Other-caregiver device not included in the plan
• School or library device joins the home Wi-Fi
• Second device left outside the control inventory

Category social-engineering

• Exception-request pressure
• Notification-preview exposure
• Parent-device or approval-channel exposure
• Permission request framed as an emergency or school need
• Relative or co-parent approval inconsistency

Category time

• "One More Minute" Grace Period Exploitation
• "One More Minute" is not configurable; per-app per-day OS feature
• Downtime: emergency numbers and Always Allowed always work
• Network time synchronisation bypasses manual clock filters
• Notification Preview Response Bypass
• Secondary App Instance / Parallel Space
• Siri / Voice Assistant Notification Access Bypass
• Time zone change as a Downtime bypass (Android, parent-controllable)
• Time-Limited Web Content via Shared Links
• Timezone / Date-Time Shift Bypass
• Unlimited Time System Apps Exploitation
• Web Version / Browser Substitute for Limited Apps
• Widget-Based App Access During Downtime