Short answer: create a child Google account through Family Link, sign the tablet in with it, then change four things — require approval for every download, set content rating limits in Play, block or remove Chrome, and take payment methods off the account. Everything else is optional. Family Link controls what gets installed; it does not police what happens inside an app you approved, and that part is still your call.
Most Family Link guides are written for parents of teenagers, which is why they spend so long on location sharing and web filtering. For a 2 to 8 year old the job is much narrower and much more achievable: make the tablet a device that can only run things you chose, and take away every route to a store, a browser, or a payment.
That is genuinely a ten-minute job. Here it is, in order, with the parts you can skip marked as skippable.
Before you start
Two things save time later.
- Factory reset a hand-me-down device. Supervision attaches during setup. Converting an existing adult profile into a supervised one is fiddly and often incomplete; wiping first is faster than fixing it afterwards.
- Do not hand over your own account. A child using an adult Google account gets adult defaults, adult YouTube, your saved cards, and none of the controls. The child account is the thing that unlocks everything in this guide.
Step 1: Create the child account
Install Family Link on your phone. Use it to create a Google account for your child, or to add one that already exists. There is no minimum age for a supervised account created by a parent — the significant number is 13, which is where a child can hold an unsupervised account in the US, with some countries setting it higher.
Worth being clear about what this account is for. At 4, it is not your child's identity; it is the handle you need in order to have controls. Keep the password. Do not teach it to them.
Step 2: Link the device
Sign the tablet in with the child account and follow the supervision prompts. When it asks which apps to allow, be more restrictive than feels natural — it is far easier to switch something back on later than to notice, three weeks in, that a browser has been sitting there the whole time.
Step 3: Require approval for every download
This is the setting that does the most work. In Family Link: Controls → Content restrictions → Google Play → Apps & games → Require approval.
From then on, every attempted install sends a request to your phone, which you approve or decline. For this age group it converts the tablet from an open device into a closed one, and it does so without any argument, because the child never sees a refusal — they see a request going to you.
While you are in there, set the same requirement for in-app purchases, and set content rating limits for apps, games, films and TV. Ratings are a coarse filter. They remove the obviously wrong results and they do not tell you whether an app aimed at 3 year olds is full of ads — that check is a separate two-minute job, covered in what to check before you download.
Step 4: Remove the browser
For a child under about 7, block or hide Chrome. A browser is the single widest opening on the device: it routes around every app-level control you just set, and there is essentially nothing a 5 year old needs it for.
Go through the app list in Family Link and switch off anything else that is not needed — the store front end, mail, maps, the app-store-installed extras that came with the tablet. The target is a home screen with six things on it, all of which you chose.
Step 5: Take the money off
Remove saved payment methods from the child account and require authentication for all purchases. Note that download approval and purchase authentication are separate settings, and a Play gift card balance can slip past the second if the first is not on. Turn on both.
This is also the moment to think about what you are installing generally. A device with no payment method attached and a handful of one-time-purchase apps is a much calmer object than one with three subscriptions running through it — the reasoning is in kids apps without subscriptions.
Step 6: Daily limits and bedtime — use with care
Family Link's Daily limit and Bedtime lock the device at a set point. They are useful, and they are also the feature most likely to backfire with a young child.
The problem: a device that locks mid-puzzle creates exactly the interrupted ending that causes meltdowns. For a 3 or 4 year old, a lock screen appearing without warning is not a limit, it is a betrayal by the tablet. The routine you actually keep — a known slot, ended on a finished activity — does the real work, as covered in screen time rules that stick.
Practical setting: put the Family Link limit generously above your real routine, so it only catches the days that get away from you, and let the daily rule be a human one. Bedtime is more useful than the daily cap for this age, especially if the tablet ever ends up in a bedroom — which it should not.
Step 7: Test it yourself
Pick up the child's tablet and spend two minutes trying to break out: install something, open a browser, find the store, reach YouTube through a link. Whatever you manage in two minutes, a determined 6 year old manages in five, generally by a route you would not have thought of.
This step takes almost no time and catches the one setting everybody forgets.
What Family Link cannot do
Worth stating plainly, because the setup can create a false sense of completion.
- It does not see inside approved apps. An app you approved can still show ads, run pop-ups, push in-app purchases, or link out to the web. Family Link has no visibility into any of it.
- Content ratings are not a safety review. An E-for-Everyone rating says nothing about advertising volume, dark patterns, or data collection. The Data safety card tells you more than the rating does.
- It does not stop tracking. An approved app with an analytics SDK collects what it collects.
- It is not a supervision replacement. For under-8s, the device being in a shared room is worth more than any setting in the app.
The honest summary: Family Link is a very good gate. It is not a filter, and it is not a judgement. The list in signs a kids app is not safe is the judgement part, and it stays with you.
How this fits with the 2026 app store changes
Age signals and parent-approval flows are arriving across app stores, partly under the app store accountability laws we cover in app store age verification in 2026. In practice that means more of the machinery you are setting up manually here becomes the default, and more apps will behave differently when they detect a child account.
Two implications. First, doing this properly now means the automatic version lands on top of a correct setup rather than a muddle. Second, an app that requires no account, collects nothing, and works offline is unaffected by any of it — which is a decent reason to prefer that shape of app while everything else churns.
A minimal setup that works
If you want the version with nothing optional in it:
- Child account created through Family Link, password known only to you.
- Downloads require approval; purchases require authentication; no card saved.
- Chrome and the store removed from the child's device.
- Six to ten apps on the home screen, all chosen by you, all checked for ads.
- Bedtime set; daily limit set loosely as a backstop.
- Airplane mode as the everyday state, if the apps you chose work offline. Nothing gets in, nothing gets out, and battery lasts a flight — see offline kids games.
That last one is underrated. For a young child, a tablet that lives in airplane mode with eight offline apps on it is close to the safest configuration available, and it takes no ongoing management at all. The full device walkthrough is in how to set up a tablet for kids safely.
Frequently asked questions
What age can a child have a Google account with Family Link?
There is no minimum age for a supervised child account created by a parent through Family Link. The threshold that matters is 13, the age at which a child can hold an unsupervised Google account in the US under COPPA, with some countries setting it higher. For a 2 to 8 year old, the account exists so that you have controls, not so that they have an identity, and it should be created and held by you.
Is Google Family Link enough to keep a child safe?
No, and it is not designed to be. Family Link controls what can be installed, how long the device runs, and which sites Chrome will load. It does not inspect what is inside an app you approved, so it will not stop ads, in-app pop-ups, tracking, or unsuitable content within an app that passed the content rating. Approval is the useful part; the judgement about which apps to approve is still yours.
How do I stop my child downloading apps without asking?
In Family Link on your own phone, open Controls, then Content restrictions, then Google Play, and set apps and games to require approval. Every install attempt then sends a request to your phone. Also remove saved payment methods from the child account and require authentication for purchases, since approval and payment are separate settings and a gift card balance can bypass the second.
Should I use Family Link screen time limits for a toddler?
Use them as a backstop, not as the rule. A device that locks mid-puzzle produces exactly the interrupted ending that causes meltdowns, so a device-level limit can create more conflict than it prevents for a 3 or 4 year old. A predictable slot in the day, ended on a finished activity, works better. Set the Family Link limit generously above your actual routine so it only catches the days that get away from you.
What is the difference between Family Link and screen pinning?
Family Link governs the whole account: what is installed, how long the device runs, what Chrome loads. Screen pinning locks the device to one app right now, so a child cannot swipe out of a game into your email or the store. They solve different problems and work well together, especially when you hand your own phone to a child in a waiting room. We cover the second in screen pinning and guided access.
Does Family Link work if the tablet is offline?
Partly. Existing limits and blocks continue to apply on the device, but changes you make from your phone will not reach the tablet until it reconnects, and reported activity will be out of date. This is a reason to get the setup right before a trip rather than expecting to adjust it from a plane, and a reason to load fully offline apps ahead of time.
The bottom line
Four settings do ninety per cent of the work: approval for every download, content rating limits, no browser, no saved card. Do those, test the device yourself for two minutes, and stop there. The remaining risk is not something a settings screen can reach — it is which apps you approve, and that is a two-minute check per app rather than a feature you can switch on.
An app that passes the check
Sticker Builder is the kind of app this setup is designed to let through. Children ages 2 to 8 drag stickers onto the right spot to complete a cheerful scene. No account, no login, no ads, no in-app purchases, no chat, no AI, and no data collected — the Google Play Data safety card reports none. It works fully offline, so it runs happily on a tablet left in airplane mode, and it costs a one-time $1 with no subscription.
Get Sticker Builder on Google Play →