← All guidesCanopy Families
Security guide7 min read

How to set up parental controls on Netgear Orbi

The Netgear Orbi is a premium mesh Wi-Fi system used by many UK families who want whole-home coverage. Unlike ISP-issued routers, the Orbi supports DNS-over-HTTPS (DoH), which means DNS filtering with NextDNS is encrypted and cannot be bypassed by simply changing DNS settings on a device. This guide shows you how to configure it fully.

Before you start
  • Netgear Orbi requires a separate Orbi account and app for some management features. Keep this account secure.
  • DoH support may vary by Orbi model and firmware version. Update to the latest firmware before following these steps.

Step 1 — Log into the Orbi admin panel

  1. Connect to your Orbi network.
  2. Open a browser and go to http://orbilogin.com or http://routerlogin.net.
  3. Enter username "admin" and the password on your router label.
  4. Click Log In.

Step 2 — Update firmware

  1. Go to Advanced → Administration → Firmware Update.
  2. Click Check Online.
  3. Install any available update and wait for the router to restart.
Keeping firmware up to date is critical for security and to access DoH features added in recent firmware releases.

Step 3 — Change the admin password

  1. Go to Advanced → Administration → Set Password.
  2. Enter the current password, then set a new strong password.
  3. Click Apply.

Step 4 — Enable WPA3 Wi-Fi encryption

  1. Go to Wireless Settings.
  2. Set Security to WPA3-Personal or WPA2/WPA3 Mixed.
  3. Update the Wi-Fi passphrase.
  4. Apply and reconnect devices.

Step 5 — Configure DNS-over-HTTPS with NextDNS

  1. Create a free NextDNS account at nextdns.io and note your Profile ID.
  2. In the Orbi admin, go to Advanced → Setup → Internet Setup or Advanced → Security → DNS.
  3. Look for DNS-over-HTTPS or Encrypted DNS settings.
  4. Enter your NextDNS DoH URL: https://dns.nextdns.io/[YOUR_PROFILE_ID].
  5. Enable DoH and save.
  6. Alternatively, use plain DNS: Primary 45.90.28.159, Secondary 45.90.30.159. Note: if you're a Canopy Pro member, use your personalised DNS addresses from your Safety dashboard instead.
DoH encrypts DNS queries, which means your children cannot simply change their device's DNS setting to bypass filtering — the router intercepts and upgrades all DNS traffic.

Step 6 — Enable Circle parental controls (Orbi built-in)

  1. In the Orbi admin, go to Parental Controls.
  2. Enable Circle Parental Controls (available on most Orbi models).
  3. Set up filters per device or per person.
  4. Configure time limits and bedtime schedules.
Circle requires a Circle subscription for advanced features. The free tier still provides basic content filtering and pause functionality.
🌳

Want Canopy to manage this for you?

Canopy Families guides parents through every security step — DNS setup, device controls, and content filtering — and keeps your protection up to date as your children grow.

Start free — takes 5 minutes