← All guidesCanopy Families
Security guide8 min read

How to set up parental controls on BT Smart Hub 2

The BT Smart Hub 2 is the most widely issued router in the UK, but out of the box it has no content filtering at all. This guide walks through every security setting a parent should change — from locking the admin panel to blocking adult content at the DNS level, which protects every phone, tablet, and games console on your network automatically.

Before you start
  • Changing your Wi-Fi passphrase will disconnect every device in your home. Have the new password written down before you start.
  • The BT Smart Hub 2 does not support DNS-over-HTTPS (DoH), so DNS filtering can be bypassed by a child who knows to change their device's DNS settings. Pair it with device-level controls for the strongest protection.
  • BT's admin panel only loads from devices already on your BT network — it will not work over mobile data or a VPN.

Step 1 — Log into the BT Smart Hub admin panel

  1. Make sure you are connected to your BT Wi-Fi (not mobile data).
  2. Open any web browser and type http://192.168.1.254 in the address bar, then press Enter.
  3. You will see the BT Smart Hub login screen.
  4. Enter the admin password. This is printed on the back label of your hub under the heading "Admin password" — it is different from your Wi-Fi password.
  5. Click Log in.
If http://192.168.1.254 does not load, try http://bthomehub.home. If neither works, the hub's IP may have changed — check it via Settings → Network on a Windows PC or System Settings → Wi-Fi → Details on a Mac.

Step 2 — Change the default admin password

Do not use the same password as your Wi-Fi. If a child learns one, they should not gain access to the other.
  1. Click Advanced Settings at the top of the page.
  2. Enter your current admin password when prompted.
  3. Click Hub Options → then Change Admin Password.
  4. Enter the current password, then type a new strong password (12+ characters, different from your Wi-Fi password).
  5. Click Apply. Log back in with the new password.

Step 3 — Enable WPA2 or WPA3 Wi-Fi encryption

  1. In Advanced Settings, click Wi-Fi.
  2. Under 2.4 GHz and 5 GHz settings, confirm Wi-Fi Security is set to WPA2 or WPA2/WPA3 Mixed.
  3. Change your Wi-Fi passphrase to something long and random — at least 16 characters mixing letters, numbers, and symbols.
  4. Click Apply. All devices will disconnect and need to reconnect with the new passphrase.
Write the new Wi-Fi passphrase on a piece of paper and store it somewhere physically secure — not saved in the browser or a notes app on a shared device.

Step 4 — Set up a guest Wi-Fi network for smart home devices

  1. In Advanced Settings, click Wi-Fi, then select the Guest tab.
  2. Enable Guest Wi-Fi.
  3. Set a guest passphrase (different from your main network).
  4. Click Apply.
  5. Connect smart TVs, speakers, games consoles, and IoT devices to the guest network — not your main network.
Putting IoT devices on a separate network means if one is compromised, it cannot access your children's devices or your computers.

Step 5 — Configure DNS filtering with NextDNS

The BT Smart Hub 2 may reset DNS settings after it receives a firmware update or after a power cut. Check your NextDNS analytics weekly for the first month to confirm traffic is being filtered.
  1. Create a free account at nextdns.io and note your Profile ID.
  2. In Advanced Settings, click Home Network.
  3. Find DNS Addresses (it may be under Advanced → DNS settings or similar).
  4. Set Primary DNS to 45.90.28.159 and Secondary DNS to 45.90.30.159. Note: if you're a Canopy Pro member, use your personalised DNS addresses from your Safety dashboard instead.
  5. Click Apply.
  6. On your NextDNS dashboard, enable the categories you want to block: Adult Content, Gambling, and AI Chatbots are recommended starting points.

Step 6 — Enable BT Parental Controls

  1. Open a browser and go to mybt.bt.com.
  2. Sign in with your BT account.
  3. Go to Products → Broadband → Manage Parental Controls.
  4. Switch on Safe Settings to block adult content across your connection.
  5. Choose the filter strength appropriate for your children's ages.
  6. Click Save changes.
BT Parental Controls work at the BT network level — before content even reaches your hub — which means they apply even if someone changes DNS on their device. Use them alongside NextDNS for defence in depth.
🌳

Want Canopy to manage this for you?

Canopy Families guides parents through every security step — DNS setup, device controls, and content filtering — and keeps your protection up to date as your children grow.

Start free — takes 5 minutes