Blocking TikTok at the router is the fastest way to clear it off every screen in the house — your kid's phone, the smart TV, the tablet shared between siblings, and that old laptop in the guest room. The problem is that every router brand hides the setting in a different menu, the TikTok app talks to a long list of backend domains beyond tiktok.com, and a determined teen can tether to mobile data the second your rule kicks in. This guide walks you through the exact router-level steps for TP-Link, ASUS, Netgear, D-Link, and mesh systems, gives you a copy-paste TikTok blocklist, and shows you where router blocking falls short — so you know when to add a second layer on the device itself. For per-device methods, block TikTok on phones and computers walks each OS.
If you just want the path and you'll handle the details later, here it is in five steps:
Log in to the router admin page. Most routers live at 192.168.1.1 or 192.168.0.1. Use the admin username and password printed on the sticker on the back of the router.
Find the filter section. Look for URL Filter, Domain Filter, Parental Controls, or Access Control. Every brand names this differently, but it lives under Advanced or Security.
Add the TikTok domains to the blocklist. Start with the core five: tiktok.com, tiktokv.com, tiktokcdn.com, musical.ly, and byteoversea.com. The full list is later in this guide.
Scope the rule. Apply it household-wide, or target one device by its MAC address if you only want to block TikTok for one kid.
Save and reboot. The router pushes the rule to the DNS resolver after a restart. Open tiktok.com on the target device to confirm it fails.
Menu names differ between TP-Link, ASUS, Netgear, D-Link, and mesh systems like Eero or Google Nest Wifi. The brand-by-brand walkthroughs below cover the exact path for each, and the dedicated blocklist section gives you every TikTok endpoint to paste in.
A router block is a blunt tool. It sits at the gateway between your home and the internet and tells every device on the Wi-Fi: this domain is off-limits. That makes it the right answer in some scenarios and the wrong answer in others.
Router blocking is the right layer when:
Your child is younger and only uses Wi-Fi at home — no cellular plan, no personal hotspot.
You want a blanket household rule that applies to guest devices, smart TVs, the shared family iPad, and any device a friend brings over.
You don't need different rules for different children, just a household-wide TikTok ban.
Router blocking is the wrong layer when:
Your teen has a mobile data plan or a school-issued device with its own connection.
They regularly visit friends' houses or coffee shops with open Wi-Fi.
You want a homework-focus window or a 30-minute daily allowance for one kid while another has none.
You want to know what is happening inside TikTok — DMs, trends, content categories — not just whether the app can connect.
Think of TikTok control as four overlapping layers: a router block at the network level, a per-app time limit on the device, a scheduled downtime window, and content monitoring for what slips through. Most families need at least two layers because no single one covers cellular, off-network use, and content visibility at the same time.
TP-Link is the most common brand in the search audience, and the steps are nearly identical across the Archer and Deco lines.
Open a browser on a device connected to your TP-Link Wi-Fi and go to tplinkwifi.net or 192.168.0.1.
Sign in with your admin password (not the Wi-Fi password — the admin one you set during initial setup).
On older firmware, go to Advanced > Security > Access Control. On newer Archer models, the path is Advanced > Parental Controls.
Create a new profile (or blacklist rule) and select the child's device from the connected client list, or paste in the MAC address.
Under Blocked Content or Blacklist, add the TikTok domain list. The full list is in the next section.
Open Time Settings (still under Parental Controls) and set the schedule — for example, every day from 8 PM to 7 AM, or all day on school nights.
Save the rule. TP-Link applies it immediately on most firmware; on older Archers, reboot the router to be safe.
To confirm the block is live, open tiktok.com on the target device — it should fail to load. Try the TikTok app too: it will sit on a loading screen or throw a network error.
Mesh systems hide most of the legacy admin panel. You configure the block through the companion app instead:
Eero: create a profile per child, then add tiktok.com and the rest of the domain list under Block content or use the Eero Plus App Blocking feature for TikTok specifically.
Google Nest Wifi: use the Family Wi-Fi tab in the Google Home app to pause the child's profile, or add a site to Restricted sites.
Netgear Orbi: the Smart Parental Controls add-on in the Orbi app handles TikTok under app and site blocking.
For a router rule to catch the TikTok app and not just the website, you need every domain TikTok talks to in the background. Copy this list into your router's blacklist or DNS filter.
Core front-end domains:
tiktok.com
www.tiktok.com
m.tiktok.com
vm.tiktok.com
vt.tiktok.com
Backend and CDN domains:
tiktokv.com
tiktokcdn.com
tiktokcdn-us.com
byteoversea.com
musical.ly
A few notes on maintenance:
TikTok rotates CDN endpoints every few months, so refresh the list periodically. If the app starts loading again after weeks of silence, it usually means a new CDN.
If your router supports custom DNS, point it at OpenDNS Family Shield or NextDNS and add the same domains to the DNS-level blocklist. DNS blocks fail fast and are harder to bypass than URL filters alone.
Domain blocks do not catch traffic that runs through a VPN or that uses DNS-over-HTTPS (DoH). Chrome, Edge, and Firefox all support DoH by default, which silently routes DNS lookups around your router.
A router block is great until it isn't. Here is where it stops working:
Cellular data. The router rule lives on the Wi-Fi. The moment your kid switches off Wi-Fi and onto their mobile data plan, TikTok is back. Same story for any tethered hotspot.
Friends' houses. Router rules don't follow the device. A sleepover at a friend's house, a coffee-shop Wi-Fi, a school network — all of them are outside the rule.
VPNs and DNS-over-HTTPS. A free VPN reroutes traffic through an external server, completely bypassing your router's URL filter. DoH in Chrome does the same for DNS lookups. Tech-savvy teens learn this fast.
All-or-nothing scope. Most router blocks can't say "30 minutes of TikTok for the 13-year-old, zero for the 9-year-old, unlimited for the parent." They block the domain for whoever they are scoped to, full stop.
Zero content visibility. A domain block sees connection attempts, not content. It cannot tell you that a stranger DM'd your daughter, that the algorithm pushed a self-harm video, or that the comments on her last post turned cruel.
This is why most families that start with a router block end up adding a device-level app on top. The router handles the household-wide front door. The device-level app handles the per-child rules, the cellular gap, and the content side. The dedicated parental controls for TikTok page covers exactly which gaps the device layer closes that a router block alone leaves open.
A router block lives at the network edge. NexSpy lives on the device. That distinction is the whole point: a rule that runs on your child's phone follows them onto cellular data, onto a friend's Wi-Fi, and through a VPN, because the enforcement happens before the traffic ever leaves the device. Here is how each piece maps to a gap the router left open.
The four problems that send parents looking for a second layer — cellular, friends' Wi-Fi, per-child scope, and homework windows — all collapse into one fix: enforce the rule on the device itself.
Per-app daily time limits. Set TikTok to 30 minutes a day on your 13-year-old's phone and zero on your 10-year-old's. When the limit hits, NexSpy locks the app. It does not matter whether they are on home Wi-Fi, mobile data, or a hotspot.
Downtime scheduling. School nights from 9 PM to 7 AM, homework windows on weekday afternoons, family dinner from 6 to 7 — schedule once and it repeats. Downtime applies on both Android and iOS child devices.
App and Game Blocker. Instant-block TikTok, schedule a block, or use the request-permission flow where the child can ask for temporary access and you approve or deny from the Parent Dashboard. On Android, the TikTok icon is hidden from the home screen while the block is active; on iOS, it is hidden and the child can request access through the NexSpy Kids app.
Focus Mode. During homework or bedtime, lock every app except the Phone app so emergency calls still work. The child cannot disable Focus Mode without parent approval.
This is where a domain block ends and a parental control app starts.
On Android, NexSpy includes social content monitoring across TikTok, Instagram, YouTube, Snapchat, Discord, and nine other platforms, using keyword detection and AI-assisted categories for cyberbullying, adult content, and mental health risk.
Notification Sync on Android surfaces incoming DMs and pings from TikTok, Snapchat, Instagram, WhatsApp, and other chat or gaming apps in real time.
Inappropriate Image Detection scans the photo gallery on Android and iOS using an on-device NSFW model and flags hits in the Parent Dashboard.
A router rule can only tell you the app could not reach tiktok.com. NexSpy can tell you what happened inside the app on the days it was allowed.
Yes on Android, via social monitoring and Notification Sync
Survives a free VPN
No
Yes — enforcement is on-device
One dashboard for multiple kids and OSes
No
Yes
Pick a router block when you want a household-wide front door for younger kids who only use home Wi-Fi, when you don't need per-child rules, and when you don't need content visibility.
Pick NexSpy when the child has cellular data, when you need different rules per kid, when you want homework or bedtime windows that follow the device, or when you want alerts on what is actually happening inside TikTok rather than just whether the app could connect.
Most households need both: the router for the blanket front-door rule, and NexSpy for everything that walks out the front door with the child.
Can my kid still use TikTok on mobile data if I block it on the router?
Yes. The router rule lives on your Wi-Fi, so the moment they turn off Wi-Fi and use their cellular plan, the block does nothing. To cover cellular and tethered hotspots, you need a device-level app like NexSpy that enforces limits on the phone itself.
Will blocking TikTok domains break other apps?
No. The domains in the list — `tiktok.com`, `tiktokv.com`, `tiktokcdn.com`, `musical.ly`, `byteoversea.com` — are owned by ByteDance and used by TikTok and its services only. Other apps will not lose functionality.
How do I schedule TikTok to be blocked only on weekdays?
Use the time-schedule option inside your router's parental controls. TP-Link, ASUS, and Netgear all support day-and-hour windows. If your router doesn't support schedules, a per-app time limit on the device is more flexible because it follows the child onto cellular data and off-network Wi-Fi.
Does a router block stop TikTok inside a VPN?
No. A VPN tunnels traffic to an external server, so your router never sees the TikTok domain in the first place. Block VPN apps explicitly at the device level if this is a concern.
What about new TikTok CDN domains?
Refresh the blocklist every few months. Pair the router rule with a DNS-level filter (OpenDNS, NextDNS) so new endpoints are caught at the DNS layer, and add a parental control app for content-side coverage that doesn't depend on knowing every domain in advance.
Layered guide to monitor TikTok for kids: set up Family Pairing, close the gaps with real-time keyword alerts, and pick the right iOS or Android setup.
