How To Restrict Websites | Block Sites Across Devices

Use device settings, browser rules, and router filters to block sites, then lock changes with a passcode.

To restrict a website and have it stay restricted, you need two decisions up front: what you’re blocking and where you’re blocking it. A block set in one browser can vanish the moment someone switches browsers. A block set on your router can cover the whole home, yet it won’t follow a phone on cellular data.

This guide breaks the job into layers—device, browser, and network—so you can pick the smallest change that solves your case, then add a second layer when you need the block to stick.

Pick Your Goal Before You Touch Settings

“Restrict websites” can mean different outcomes. When your goal is clear, the setup takes minutes instead of turning into a cycle of trial and undo.

Focus Blocks For Yourself

When you’re blocking a few distracting sites for your own work time, a browser rule or extension is usually enough. It’s fast, easy to change, and it won’t break other apps. The trade-off: it only applies to that browser profile.

Safer Browsing For A Child Account

If the block is for a child, use account-based controls. You’ll get cleaner enforcement and fewer workarounds than a single browser add-on. On Apple devices, Screen Time can restrict web content and also block specific sites by URL through the built-in settings path. Apple’s Screen Time web content settings show where to add sites under “Never Allow.”

Whole-Home Blocking On Wi-Fi

If you want the same restrictions on laptops, tablets, consoles, and guest devices, set the rule on the router or at the DNS layer. That covers the household Wi-Fi in one place. Phones can still bypass it on mobile data, so pair this with device rules when needed.

Where To Restrict Websites So The Block Sticks

Think in layers. The closer the block is to the network, the more devices it can cover. The closer it is to a user account, the more it can follow a person across compatible devices. For most homes, one device rule plus one network rule is a strong combo.

Layer Best Fit What It Stops
Browser extension Fast focus blocks on one browser Loads in that browser profile
Browser settings or policies Managed devices and shared computers Sites in that browser (when enforced)
Device hosts file One computer, no extra tools Domain resolution on that device
Parental controls (account-based) Child accounts Web access tied to the account
Device DNS filtering Roaming laptops and phones Domains using that DNS route
Router DNS filtering Whole-home coverage on Wi-Fi Domains for devices using router DNS
Router firewall / URL filtering Advanced home networks Traffic based on router features
App-level limits Stopping a single app’s web view Web access inside that app

How To Restrict Websites On Windows

Windows offers three practical routes: account-based web filtering for families, a local domain block on the PC, or a router rule that covers the home network.

Use Microsoft Family Safety For Kid Accounts

If your goal is kid browsing limits, Microsoft Family Safety can filter websites and searches when the child uses Microsoft Edge with Family Safety set up. Microsoft describes the steps in its guide to Microsoft Family Safety web and search filters, including turning on filtering and adding allowed or blocked sites.

To reduce bypass attempts, keep the organizer account password private, set the child’s Windows login as a standard user, and remove extra browsers if the rule only applies to Edge.

Edit The Hosts File For A Simple Domain Block

The hosts file can map a domain name to a non-working address so the browser can’t reach it. It’s blunt, yet effective for blocking a full domain on a single PC.

  • Open Notepad as Administrator.
  • Open: C:\\Windows\\System32\\drivers\\etc\\hosts.
  • Add: 127.0.0.1 example.com and 127.0.0.1 www.example.com.
  • Save, then restart your browser.

If the site still loads, clear DNS cache on the PC or reboot. Old lookups can linger.

Prefer Router Rules When Multiple PCs Share Wi-Fi

If two or more devices need the same block, a router-based rule saves time and stays consistent when you add a new device later.

Restrict Websites On Mac, iPhone, And iPad

Apple’s Screen Time is the main tool for device-level web restrictions. It can limit adult sites, allow only approved sites, and block specific URLs. The passcode is the lock—set one that the restricted user doesn’t know.

What To Set First In Screen Time

  • Turn on Content & Privacy Restrictions.
  • Set Web Content to a restricted mode, then add blocked domains under “Never Allow.”
  • Limit installing apps if you don’t want new browsers added as a workaround.

Restrict Websites On Android

Android setups vary by maker, but the same pattern holds: use a child account for family rules, use browser blocks for personal focus, and use DNS settings when you want a device-wide domain block that follows the phone across Wi-Fi networks.

Device-Wide Domain Blocking With Private DNS

On many Android phones, you can set “Private DNS” and route DNS lookups through a chosen provider. When that provider blocks a domain or category, normal browsing fails to resolve the site. This will not catch every app that hard-codes its own DNS, but it covers a lot of day-to-day browsing.

Network Blocking With Your Router Or DNS

Router rules are ideal when you want one list that applies to the entire home Wi-Fi, including devices that don’t offer strong built-in controls.

Router Built-In Website Blocking

Some routers offer a “URL filter” or “website block” list. If yours does, add the domain, save, then restart the router if the rule doesn’t apply right away. Add both the base domain and the “www” version, since many sites answer on both.

DNS Filtering At The Router

DNS filtering works by changing where your network looks up domain names. When a blocked domain is requested, the DNS service returns a result that doesn’t lead to the real site. This covers most browsers and many apps on your Wi-Fi.

For stronger enforcement, set the router to hand out only your chosen DNS servers, then block outbound traffic to other DNS servers if your model supports it. Without that, a device can switch DNS and bypass the filter.

Test Your Block The Right Way

After you add a site to a block list, run a quick test that mirrors real use. This catches the common “works on my laptop, fails on my phone” confusion.

  • Test on Wi-Fi and on mobile data.
  • Test in more than one browser.
  • Test the base domain and common subdomains.
  • Clear cache, then try again.

Fixes When A Block Doesn’t Work

Most failures come from caching, DNS settings, or blocking the wrong thing (a URL path when the site loads from several domains). Use the table below to pinpoint the cause fast.

Symptom Likely Cause Fix
Site loads on one browser only Block set in a single browser profile Repeat the block in other browsers or move it to device/router level
Site loads on phone but not on home Wi-Fi Phone is using mobile data Turn on device-level limits or test with Wi-Fi forced on
Block works, then stops later DNS cache keeps old results Restart device, clear browser cache, or flush DNS on the computer
Only part of the site is blocked Content served from other domains Block the additional domains used for login, media, or short links
Rule works on main Wi-Fi, fails on guest Wi-Fi Guest network uses different DNS settings Mirror the same DNS settings on the guest network
User installs another browser to bypass Restrictions only cover one browser Limit installs, remove extra browsers, or use account-based filtering
VPN makes the site reachable again VPN routes traffic outside DNS/router rules Block VPN installs on managed accounts or use router tools that restrict VPN use

Lock The Settings So The Block Can’t Be Flipped Off

Most blocks fail for one reason: the person being restricted can edit the rule. You don’t need perfect enforcement; you need enough friction that “just one peek” isn’t easy.

  • Use separate accounts. On computers, keep kids on standard user accounts, not admins.
  • Set passcodes. Use a Screen Time passcode on Apple devices and avoid sharing it.
  • Limit installs. If your rule only covers one browser, block new browser installs on managed accounts.
  • Protect the router. Change the default router admin password and store it off the device being restricted.
  • Watch for VPNs. If a VPN app can be installed freely, router and DNS rules get weaker fast.

When You Should Use Two Methods

One method is fine when you’re blocking a couple of sites for your own focus on a single device. Two methods win when the stakes are higher or the user has options.

Pair a network rule (router DNS filtering) with a device rule (Screen Time, Family Safety, or OS limits) when any of these are true: the device leaves your Wi-Fi often, the user can install apps, or the same site keeps showing up across multiple devices.

A Clean Two-Layer Setup For Most People

If you want a setup that stays steady, start with router DNS filtering for home Wi-Fi, then add device-level restrictions for phones and laptops that roam. Lock settings with passcodes and admin passwords so the block isn’t one tap away from being removed.

References & Sources