Canopy Parental Controls and Safety Guide

Canopy official logo

Canopy parental controls help families filter explicit online content, manage supported app use and receive protection alerts. Parents manage the account through Canopy, while Canopy Shield protects each child device. For example, families can choose filtering categories, schedule internet breaks and review location alerts. This guide explains setup, sensitive image features and the important differences between devices. However, filtering cannot guarantee safety or replace conversations and the child accounts inside other services.

Table of contents

Age Rating and Child Safety Warning

Canopy is a family filtering tool, with separate adult accountability options. Its app rating does not make social media or other online services suitable for every child. Therefore, check those services’ age requirements separately. Explain filtering, photo alerts and location before enabling them. Protect the management password, because it can approve exceptions and weaken protection. Image detection can be wrong and may expose sensitive personal information.

Canopy Setup and Restrictions

Set Up the Canopy Parent Account

The management app and Shield app have different purposes. Each protected device needs a profile.

  • Open Canopy’s official website and choose Start Free Trial if you want to create an account.
  • Review the plan, full billing period, renewal and trial terms before completing registration.
  • Install Canopy for management on your own phone, or sign in to the Canopy web dashboard.
  • Use Add Device to create the intended child device profile, then open its official Shield installation link on that device.
  • Enable parent notifications so that protection and access requests can reach you.

Why it matters: The management app alone does not filter the child’s device. Moreover, profile selection matters because rules belong to individual devices. The current help says settings cannot simply be copied between separate profiles.

Install Canopy Shield on Android

Use the guide for the actual phone manufacturer and Android version.

  • On the child phone, open Canopy’s official installation page or the link from your management app.
  • Choose Install Shield and install the official Canopy Shield app through Google Play when directed.
  • Open Shield, select Protect this device where shown, then I have an account. Sign in using the parent account and choose the correct profile.
  • Select Continue with installation, review the terms and complete the accessibility, overlay and usage access prompts for your Android version.
  • Review the optional Uninstall Protection and finish the permission wizard. Select Open App when setup completes.

Why it matters: Samsung, Pixel and Xiaomi do not share every setup screen. The Android installation index identifies a Family Link conflict. Therefore, plan a working replacement before altering existing Google protection. Xiaomi help specifies Enterprise Mode for full protection, so confirm the model’s exact requirements with support.

Browser and Android Certificate Choices

Canopy uses a trusted filtering certificate to inspect supported encrypted browsing. Android 15 and later offers a dedicated browser route.

  • After Shield installation, open the setup landing page and choose Install Canopy Browser if you want the provider’s browser with its certificate included.
  • Choose Install in Google Play and make it the default browser if it will be your child’s agreed browser.
  • If using another supported browser, choose Install Certificate on the setup page and use only Canopy’s official Download Certificate link.
  • Follow the device specific Security or Security & privacy route to More security settings, Encryption & credentials, Install a certificate and CA certificate.
  • Review Android’s certificate warning. If you choose to trust this filtering arrangement, authenticate and select the official myca.crt from Downloads.
  • Test the exact browser afterwards. Firefox has separate certificate requirements, so use its current Canopy instructions or ask support.

Why it matters: A trusted certificate gives the service significant visibility into supported HTTPS traffic. Therefore, understand the privacy tradeoff and avoid certificates from another source. This is different from ignoring a website’s invalid certificate warning.

Install Canopy Shield on iPhone or iPad

The website installation route uses an Apple management profile.

  • On the child device, open Safari, visit Canopy’s official installation page and sign in.
  • Select the intended profile, or choose Add Device first. Select Start Now, then Next, and allow the Canopy MDM Profile download.
  • Open Apple Settings, then Profile Downloaded, and select Install.
  • Enter the device passcode, review the management information and complete Trust and Install when requested.
  • Return to Safari while Shield installs. Open Canopy Shield and review the required permissions and Allow notifications prompt.

Why it matters: Complete installation in a trusted location if Apple Stolen Device Protection introduces a security delay. Moreover, do not remove a school profile or turn off all restrictions as routine troubleshooting. Optional removal prevention needs additional computer setup.

Install Canopy Shield on Windows

Windows setup uses a device pairing code and requires a restart.

  • Open Canopy’s official installation page on the computer, sign in and select its profile.
  • Keep the six letter pairing code visible and choose Download.
  • Run the official canopy.exe installer and review the administrator permission prompt.
  • Enter the pairing code and choose Install. Review the removal prevention choice before proceeding.
  • Choose Restart now, then check the Canopy Shield icon in the system tray.

Why it matters: Confirm Windows compatibility first. In particular, the current supported device page excludes ARM based Windows systems. Keep the administrator login private and test browsing after the restart.

Install Canopy Shield on Mac

Mac setup uses the official disk image and a device profile.

  • Open Safari, visit the official Canopy installation page and choose I’m on Mac.
  • Sign in, choose Select profile, select the intended device and note the six letter pairing code.
  • Choose Download, open CanopyMac.dmg from Downloads and launch its Canopy installer.
  • Choose Open when appropriate for the official installer. Enter the pairing code if requested and select Next.
  • Select Install, authenticate with the Mac administrator account, then choose Done.

Why it matters: The Mac installation guide says removal prevention is enabled automatically. Therefore, understand the later authorised removal process before installation. A supported minimum version is not a reason to keep an outdated operating system.

Install Canopy Shield on Chromebook

Chromebook installation requires Google Play support and additional certificate configuration.

  • Open the official Shield installation link on the Chromebook and choose Download, then Open with Play Store.
  • Install and open Shield. Review the disclaimers, choose Canopy Shield, then I have an account, and sign in.
  • Select the profile and choose Continue With Installation.
  • Complete Accessibility, display over other apps, usage data and VPN permissions. Review removal prevention and its Device Manager request.
  • Grant location if needed and follow the guide’s system CA certificates installation for the official myca.crt file.
  • In Chrome, open Settings, Privacy and Security, Security, then Manage Certificates.
  • Open Authorities, choose Import, select Canopy’s official certificate and review the trust choices. Complete Finish in the installation wizard.

Why it matters: Certificate and management permissions are powerful. Moreover, a school managed Chromebook may prevent these changes. Involve the school rather than modifying its management or importing an unverified certificate.

Canopy Safety Settings and Why They Matter

Canopy Content Protection Levels

Categories and individual exceptions can use different protection levels.

  • Open the parent dashboard or management app and select the intended device profile.
  • Open Content Filtering, then Categories.
  • For each relevant category, choose Filtered, Enhanced or Blocked according to the protection needed.
  • Use Unfiltered only for a deliberate exception. Check the saved result and test the category on the child device.

Why it matters: Filtered applies normal content filtering, while Blocked denies access. In contrast, Enhanced can redirect selected native apps to filtered browser versions. Unfiltered removes Canopy’s filtering for that category.

Choose Enhanced Filtering

Enhanced filtering also targets partial nudity, including swimwear and lingerie, and may change how an app opens.

  • Select the device in the Canopy dashboard and open Content Filtering or Advanced Settings in the layout shown.
  • Choose the category’s protection level and select Enhanced.
  • Review any replacement browser shortcut on the child device and test the services your child needs.
  • If a needed service stops working, review its category and specific exception rather than unfiltering everything.

Why it matters: The specific app rule guide excludes Enhanced app protection on Windows and Mac. Moreover, the stricter setting can block harmless or educational material. It is a filtering choice rather than a judgement about a child.

OurPact Individual App Rules

An app can have its own rule, while some browser rules follow their category.

  • Select the device and open Content Filtering, then Applications or Apps.
  • Use Sort or search to find the app.
  • Choose the appropriate protection level beside its name.
  • For iPhone apps needing management approval, ask your child to review the Netspark management request and select OK if they agree.
  • Review the app again on the child device to confirm the result.

Why it matters: Each iPhone app can request management separately unless the device is already supervised. In addition, browsers shown as By category usually follow Web Browsing, with individual Unfiltered or Blocked overrides. This does not establish access to all private messages.

Manage Website Exceptions

Specific addresses can override normal category filtering.

  • Open the selected device’s Content Filtering, then Websites/IP.
  • Choose the plus icon and enter the intended website address.
  • Select Filtered, Enhanced, Blocked or a deliberate Unfiltered exception.
  • Choose Add Website. To return it to normal filtering later, remove the exception with Remove.

Why it matters: An unfiltered exception can expose more content than expected. Therefore, keep the address precise and review exceptions regularly. Website rules do not replace privacy and contact controls inside an allowed service.

Canopy App Screen Time Limits

Daily app limits become available after the device reports use of that app.

  • Select the device and open Screen Time in the dashboard or management app.
  • Review the used apps list and select an app.
  • Set its daily allowance and save the change.
  • On iPhone or iPad, ensure a device passcode is enabled through Face ID & Passcode or Touch ID & Passcode if tracking does not work.
  • Review optional limit notifications and test the app after its allowance ends.

Why it matters: The app is blocked when its allowance ends. However, apps without usage data cannot yet receive a limit. The detailed help identifies the passcode requirement specifically for Apple devices, while a general article describes a broader screen lock requirement. Confirm behaviour on the actual device.

Approve Extra Time and Limitless Apps

Extra time changes today’s access to one app without rewriting its normal daily allowance.

  • On the blocked child app screen, choose Request More Time and select an offered duration, such as five, fifteen or thirty minutes.
  • Send the request to the parent management app.
  • On the parent device, review the app, child device and requested time, then approve or deny it.
  • If you choose password approval in person, enter the management password yourself without disclosing it.
  • Use Limitless only as a deliberate temporary exception and return the app to its regular rule afterwards.

Why it matters: The original allowance remains unchanged. Moreover, only one request per app can be pending at a time. A child who knows the management password can approve access without sending a parent request.

Canopy Immediate Internet Pause

Pause Internet disconnects supported mobile internet access. It differs from turning protection off.

  • Open the management interface and select Pause Internet.
  • Find the intended protected device and turn its Pause Internet toggle on.
  • Confirm the child receives the pause notice.
  • To restore access, return to the same device and turn the toggle off.

Why it matters: The current guide limits this feature to Android and iPhone. In contrast, offline apps may remain usable, and it is not a universal device lock. Preserve essential contact and accessibility routes.

Canopy Scheduled Internet Breaks

Schedules apply recurring internet pauses, such as bedtime.

  • In the management app, select the device and open Times & Limits.
  • Open Pause Internet and select Add new beside Scheduled Pause.
  • Name the break, choose days, and set its start and end times. Save the schedule.
  • In the web dashboard, the equivalent route is the device’s Protection Status, Show more, Pause Internet, then Schedule Pause.
  • Use Edit to change a schedule or Delete to remove it.

Why it matters: Older references call this Focus Time. However, a scheduled internet pause is not a measured daily app allowance. Check mobile platform support and test the actual bedtime effect.

Canopy Sexting Deterrence

This optional feature detects selected images stored on the protected device. It is separate from filtering websites.

  • Select the child device in the management app and open Sexting Deterrence.
  • Enable its top switch only after discussing the feature with your child.
  • Choose Change to Standard or Change to Strict for the desired level.
  • Review any alert calmly and check the context. Turn the feature off through the same section when no longer necessary.

Why it matters: Standard targets full nudity, while the stricter level also targets partial nudity. Private or encrypted folders are not scanned. Furthermore, the FAQ says these features do not monitor videos taken on the device. Do not forward sexual images of a child.

Canopy Android Removal Prevention

Removal prevention makes unauthorised changes harder. It is different from receiving an alert after removal.

  • Select the Android device in the parent app or dashboard.
  • Open Settings, find Removal Prevention and turn it on.
  • Check the child app’s required permissions and protection status.
  • If you later remove Shield yourself, use the same section to turn removal prevention off first.

Why it matters: The provider describes protection against removal, permission changes and some reset attempts. However, no app should be treated as impossible to bypass. Protect the administrator password and investigate a lost connection.

Canopy iPhone Removal Alerts

Removal alerts notify the parent after a supported removal or disabling event.

  • Enable Canopy notifications on the parent device.
  • Review alerts in the management app or web dashboard.
  • If a removal alert arrives, contact your child and check Shield and the device profile together.
  • Review the separate computer based Removal Prevention option if you need stronger supported supervision.

Why it matters: The current removal alert guide says alerts start enabled. In contrast, an alert does not itself stop removal. Do not describe ordinary iPhone installation as identical to supervised removal prevention.

Canopy iPhone Removal Prevention with Windows

This optional supervision process changes the device configuration and can leave an Apple managed device notice.

  • Back up the child device first and check the provider’s current compatibility instructions.
  • Use the official Windows Removal Prevention download linked from Canopy help and run its installer.
  • Connect the unlocked iPhone by USB, select Trust and choose Start in the computer wizard.
  • Follow the wizard’s temporary passcode and Find My iPhone steps only as part of this agreed setup. Keep the device physically secure.
  • Choose Next as instructed and keep the cable connected through the restart and configuration.
  • On the device, complete Enroll this iPhone. Wait for its home screen before choosing Finish and OK on the computer.
  • Restore the device passcode, biometrics and Find My immediately. Confirm both Canopy protection and normal device security.

Why it matters: This is more intrusive than receiving alerts. Moreover, removing Shield later may leave the managed notice until an appropriate restore. Do not erase a device merely to remove a cosmetic notice.

Set Up iPhone Removal Prevention with Mac

The Mac process uses the provider’s tool and a supervised device configuration.

  • Back up the child iPhone using Finder, the device’s General tab and Back Up Now.
  • Download the official Mac Removal Prevention tool from Canopy help, open its disk image and launch it.
  • Connect the unlocked iPhone by USB, select Trust and choose Start in the tool.
  • Complete its temporary passcode and Find My steps. Restore these protections immediately after setup.
  • When the wizard requests Full Disk Access, review the request for Canopy_Removal_Prevention and authenticate with your Mac administrator account.
  • Keep the cable connected through configuration. On the restarted child device, complete Continue, Apply configuration and Next if those are the screens shown.
  • Wait for the home screen, then choose Finish and OK on the Mac. Recheck device security and Canopy protection.

Why it matters: The published Mac screenshots use older system layouts. Therefore, confirm the current process before changing security settings. Keep the backup and seek support if the device version differs from the guide.

Canopy Location Sharing and Place Alerts

Location alerts require child permission and parent notifications.

  • On iPhone, open Settings, Privacy & Security, Location Services, then Canopy Shield, and select Always.
  • On Android, open Settings, Location, App permissions, then Canopy Shield, and select Allow all the time where offered.
  • In the management app, select the child profile, open Location Tracking and enable it.
  • Select Add New Location, enter the address and name, then choose Add Location.
  • Review saved places and edit or remove them when no longer necessary.

Why it matters: The guide describes an approximate 150 metre boundary, not exact doorway detection. Moreover, network access, battery settings and stale updates affect alerts. A device location does not establish a child’s safety.

Check Reports, Notifications and Protection

Protection status and usage information help you check whether setup is working.

  • Select the device and check for Device is Protected and its active feature information.
  • Open Screen Time to review device usage and the list of today’s used apps.
  • On the parent phone, open system Settings, Notifications, then Canopy, and allow alerts.
  • On the child device, open Canopy’s safe filtering test page in the browser you intend to use.
  • Recheck permissions and contact support if the test or expected updates fail.

Why it matters: The guide describes up to fourteen days of total screen time, while the app list shows today’s usage. However, a passing browser test does not prove that every app, video or message is filtered.

Network Exceptions and Protection Pause

These options weaken filtering rather than creating a child screen break.

  • For a school or work network problem, contact its IT team and review the network warning.
  • Open Troubleshoot Wi-Fi Networks from the protected computer’s Canopy tray menu to inspect Filtered or Unfiltered status.
  • If an administrator deliberately changes a network exception, review the password and confirmation prompts and document the gap.
  • To restore a paused filter, open the device overview in the management dashboard and turn Protection on.
  • If temporarily turning Protection off for troubleshooting, choose a short duration and confirm it resumes. Avoid Indefinitely for a child device.

Why it matters: An unfiltered network or Protection pause removes filtering. In contrast, Pause Internet restricts internet access. Never assume a pause label always means stronger protection.

Canopy AI Assistant and Accountability

The management assistant can change rules. Adult accountability options are a different feature.

  • Before opening the management assistant icon, select the intended device profile.
  • Ask for an explanation first if you are uncertain. Review any proposed filtering exception before allowing it.
  • For an adult plan’s human accountability option, use Send Invite, check the address and wait for the person to Accept.
  • If using AI Ally, understand that it can discuss and approve eligible protection changes. Confirm its role in your family plan before enabling it.

Why it matters: The management assistant is not available as a child Shield chat. Moreover, AI Ally can remember previous interactions and may approve changes. Neither feature replaces a trusted adult, and an adult accountability partner is not the same as a full parent dashboard manager.

Remove Canopy Shield and Device Profiles

Removal requires approval when protection or an accountability arrangement is active.

  • On a protected mobile device, open Canopy Shield, its side menu and Remove Canopy.
  • Approve the removal request from the parent dashboard or management app, then repeat Remove Canopy on the child device if requested.
  • For supervised iPhone removal prevention, use this authorised request process rather than assuming a dashboard toggle removes Apple supervision.
  • For Windows or Mac, open the Canopy icon, choose Uninstall, then Send Request. Approve it in the management account and return to Uninstall on the computer.
  • After Shield is uninstalled, open Account Settings and use the device profile’s Delete button if you no longer need it.

Why it matters: The newer iPhone guide says removal prevention cannot simply be switched off in the dashboard, unlike older generic instructions. Furthermore, deleting a device entry and uninstalling Shield are not billing cancellation.

Cancel Canopy and Request Account Deletion

Cancel billing through the original purchasing channel and remove protection before the subscription ends.

  • For a direct subscription, open Account Settings in the management app or web dashboard.
  • Under Your Plan, choose Edit Details, then the Click Here cancellation link and confirm.
  • For Apple or Google purchases, cancel in the original store account’s Subscriptions screen.
  • Uninstall Shield from all protected devices before the subscription expires.
  • For permanent account deletion, contact the official support assistant after removing protection and clearly request account deletion.

Why it matters: The provider warns that leaving Shield installed after expiry can interrupt internet access. Moreover, account deletion is separate and permanent. Retain confirmation and provide account identifiers only through official support.

Canopy Coverage Limits

Canopy explicitly says it does not filter rated streaming services such as Netflix in the same way as ordinary browsing. Therefore, use each streaming service’s child profile, content ratings and purchase controls. Encrypted chats, private folders, alternative devices and unsupported apps can leave gaps. Canopy filtering is not a complete record of messages or a universal contact blocker. Public help also contains older and newer menu names, so confirm any essential feature against the exact device before purchase.

How to Use Canopy Safely

First, agree what you will monitor before switching it on. Then explain which limits apply and how your child can ask for help. Also agree when you will review the rules together. For example, schoolwork, accessibility tools and contact with trusted adults may need exceptions. Finally, test these together before relying on a block.

Essential Safety Advice and Current Concerns

However, controls cannot identify every scam, harmful conversation or unsafe person. For example, a permitted app can contain grooming, bullying, sexual pressure or misleading AI responses. Therefore, set privacy, contact and purchase controls inside each app as well. An alert is a reason to check calmly with your child. It is not proof that they have done something wrong.

If something worrying happens, help your child block and report the account through the relevant app. Also keep useful usernames, links and dates. However, do not forward sexual images of a child. In an emergency involving immediate danger in Ireland, call 112 or 999. For other concerns, seek appropriate safeguarding support. CODA education does not replace an emergency response.

Platform Support and Regional Differences

The current help lists Android 12 or later, iOS 12 or later, macOS 10.13 or later, Windows 10 or later excluding ARM, and compatible Chromebooks. These are provider minimums, not advice to keep an outdated system. Confirm current store requirements, supported browser and manufacturer permissions. Some controls are mobile only. Irish and UK app store access, checkout availability and local support should be confirmed before buying, rather than assuming US marketing establishes full regional coverage. Use current operating systems and do not downgrade for older setup instructions.

Subscriptions, Renewal and Cancellation

The current US help lists Essential for one device at $9.99 monthly or $99.99 annually, Plus for three at $15.99 monthly or $119.99 annually, and Premium at $19.99 monthly or $149.99 annually. Although Premium is marketed as unlimited, the footnote specifies up to ten protected devices. The service advertises a seven day trial and a thirty day refund window from account creation, subject to its terms. These are displayed dollar prices, not an Irish euro quote. Check tax, full billing period and renewal at checkout. All plans advertise the feature set, while device compatibility still limits what works.

Safety Checklist

  • Confirm the correct child profile and every device they use.
  • Check permissions and protection status after software updates.
  • Test a harmless blocked site, an app limit and the bedtime rule together.
  • Keep trusted contact and accessibility tools available.
  • Review reports calmly and reduce unnecessary monitoring as independence grows.
  • Record the full subscription cost, renewal date and cancellation route.

Frequently Asked Questions

Does Canopy filter everything inside every app?

No. Streaming, encrypted content, private folders and platform limits create gaps. Test the actual services your child uses and enable their native child protections.

Is Pause Internet the same as pausing Protection?

No. Pause Internet restricts a supported device’s internet access. Pausing Protection turns filtering off, so it can weaken safety.

Does the unlimited plan mean any number of devices?

No. The current pricing help includes a footnote limiting Premium to ten protected devices. Confirm the current terms before paying.

Related CODA Guides

References

The instructions draw on the official help pages below. However, features and menu labels can change after app updates. These are researched guides, rather than claims of hands on product testing.

Official Canopy References 1 to 7

Further Canopy References 8 to 14

Additional Canopy References 15 to 21

More Canopy References 22 to 28

Official Canopy References 29 to 35

Further Canopy References 36 to 39

About Children of the Digital Age

Children of the Digital Age provides online safety education and training for families, schools and communities. In addition, our guidance helps adults and young people understand digital risks and make informed choices.

Send a message

Contact CODA to enquire about online safety education, training or guidance for your family, school or organisation.

    Last updated: 16 October 2026