Why this matters:How to recognise this workaround on your side, and what closes it on your side — without telling you how to do the workaround.
How common it is: Private Relay is on by default for many Apple IDs. Specific family-plan misconfiguration rate is not established.
Detection
The Apple Account on the child’s device has Private Relay turned on; a router-side block that targets a hostname by DNS still resolves because the request never reaches the family resolver.
Fix (technical)
For the child’s Apple Account, turn Private Relay off in iCloud settings. On a supervised device, deploy the configuration profile that disables Private Relay at the system level. Verify the setting on the device itself rather than only in the parent account.
Fix (relational)
Private Relay is a privacy feature with legitimate uses. State the rule plainly: the household decides which devices use it, and the child’s device is currently set to not.
Residual risk
Disabling Private Relay reduces privacy on untrusted networks. For travel and public Wi-Fi, a parent may decide to keep it on; the trade-off should be made consciously and reviewed once a year.
Sources
-
saferinternet-technischer-kinderschutz
-
esafety-vpn-faq-2026
Why trust this page?
Belief-disclosure in plain language. Everything the page claims is sourced; instructions are tested against the software version stated above; nothing is bought or affiliate-linked.
- Standing of evidence
- Primary (first-hand or regulatory source)
- Last verified
- 2026-08-20
Sources used on this page, in the order they appear:
- No external sources were cited.