Last updated: October 21, 2026
Quick Answer: you can restrict browser access on a child’s device in 3 main ways: block the browser app, allow only a short list of sites, or disable web access at the device level. How to Restrict Browser Access on a Child’s Device depends on whether the child uses an iPhone, Android phone, Windows PC, or Chromebook, and whether you want a hard block or a short allow-list of approved sites.
Key takeaways
- The most reliable setup starts at the device, not inside the browser.
- If you want a true block, disable or hide browser apps and set a device-level passcode the child cannot change.
- If you only want a few sites, use an allow-list and remove the rest of the web.
- Different platforms use different controls: Safari on iPhone, Chrome on Android and Chromebook, and Microsoft Edge on Windows.
- Browser settings alone are easy to miss; account-level and device-level controls close the loopholes.
- This approach is not for a shared family tablet where adults need normal browsing every day.
Start with the control level that actually matches your goal
Start by deciding whether you want to block browsers entirely, allow only a short list of sites, or keep browsing on but tighten the rules. That choice determines where you set the restriction and how hard it is to bypass.
If the goal is “no web at all,” browser app blocking is the cleanest path. On an iPhone, that usually means using Screen Time to remove Safari and prevent app installs. On Android, it often means disabling Chrome or the browser the device came with, then preventing new installs from the Play Store. On Windows and Chromebook, the job is usually done through account controls, since the browser is tied more closely to the profile than to a single app icon.
If the goal is “only these sites,” you need an allow-list. That is stricter than safe browsing mode. Safe browsing filters out some bad pages, but it still leaves the browser open. An allow-list does the opposite: it blocks almost everything and lets through only the domains you name.
This distinction matters because a child who can install another browser can often get around a loose setup in under 2 minutes. A child who only sees approved sites has far fewer exits. The trade-off is convenience: the tighter the setup, the more often you will need to add or remove sites yourself.
For a broader setup that includes app limits and account controls, the hub on [Parental Controls and Device Setup] should sit beside this page, not replace it.
How do I block browser access on an iPhone?
You block browser access on an iPhone through Screen Time by limiting Safari, web content, and app installs, then locking those settings with a passcode. If Safari remains available, the rest of the setup is only partial.
Begin in Settings > Screen Time and turn Screen Time on if it is off. Set a Screen Time passcode that the child does not know. That passcode is the hinge of the whole setup. Without it, restrictions are temporary.
Next, use Content & Privacy Restrictions. Turn that section on, then go to Allowed Apps or the equivalent app list on the current iOS version and switch Safari off if the option is available. If Safari cannot be fully removed, move to Content Restrictions > Web Content and choose the strictest setting available. The strongest option is typically the one that limits access to specific websites only. That turns the browser into a narrow window rather than an open door.
Then stop new browser installs. In iTunes & App Store Purchases or the app-install controls inside Screen Time, block app installs and deleting apps if those choices are available. That matters because a child can simply download Chrome, Edge, or another browser if the App Store remains open.
Finish by checking the home screen and the app library. The result you want is simple: Safari is gone or unusable, app installation is blocked, and web pages outside your allow-list do not load. If a site still opens, the restriction is not set at the right level, or another browser is still present.
A common mistake on iPhone is to set website limits but leave Safari installed and the App Store open. That costs you the first afternoon the child figures out how to bypass it. The fix is to lock both the browser and the source of new browsers.
For Apple’s own naming and settings structure, the Screen Time guidance on Apple Support is the clearest reference point.
How to restrict browser access on an Android phone or tablet
You restrict browser access on an Android device by controlling the browser app, the Google account on the device, and the ability to install new apps from the Play Store. If you only change Chrome settings, the child can often switch to another browser in seconds.
Start with the child’s account, not the browser icon. If the device uses Family Link, open the parent controls and choose the child profile. Use app controls to block or approve browsers such as Chrome, Samsung Internet, Firefox, or Edge, depending on what is installed. On many Android devices, Chrome is the default browser and the one most children open first, so that is the first app to review.
Then remove the path for new browsers. In the Play Store controls, block app installs or require approval for every download. That stops a child from replacing Chrome with a fresh browser from the store. If the phone already has a browser baked into the system, disable it where Android allows that option. Some device makers let you disable an app; others only let you restrict it. The difference matters, because a hidden browser is still a browser.
After that, tighten the web settings inside the browser you are leaving in place, if any. Chrome’s Safe Browsing can reduce risky downloads and warning-page misses, but it does not equal a full block. It is a filter, not a lock. If you want only approved sites, use the Family Link website controls or a device-level web restriction tool instead.
Check the end result by opening the browser list from the app drawer and trying a search. The correct result is either no browser opens at all, or only the sites you approved load. If an installed browser still reaches the open web, the browser app was not blocked at the account or device layer.
The main trade-off on Android is fragmentation. The menus look different on Samsung, Pixel, and other models, but the logic is the same: block the browser app, block new installs, and control the child account.
Can I stop web browsing on Windows and Chromebook?
Yes, you can stop web browsing on Windows and Chromebook, but the cleanest method depends on whether the device uses a child account or a school-managed profile. On both platforms, the browser itself is usually less important than the account that launches it.
On Windows, start with a child Microsoft account and Family Safety controls. The browser is often Microsoft Edge, but the bigger issue is whether the child can sign in with a different local account or install another browser. Set the child account so installs require adult approval, then remove admin rights from the child profile. If Edge is the only browser on the machine, you can combine browser restrictions with app-install limits and website controls. If Chrome or Firefox is already installed, block those too.
On Chromebook, the browser is Chrome, so the answer is more direct. Sign the child into a supervised Google account, then use the device’s managed controls to limit sign-in, extensions, and website access. If the Chromebook is for school, some restrictions may already be enforced by the organization. If it is a family Chromebook, the child’s Google account and the Chromebook login matter more than a browser setting buried in Chrome itself.
For both systems, the result you want is the same: the child cannot add a new browser, cannot log in under a different profile, and cannot open unrestricted sites through the default browser. If the device still allows a guest session, disable that too. Guest mode is a common loophole because it can sidestep the child profile entirely.
A frequent mistake on Windows is blocking Edge and forgetting Chrome. A frequent mistake on Chromebook is assuming Chrome itself is the issue while the real bypass is a different account. The browser is only one layer.
For Microsoft’s account controls, the Family Safety documentation is the right place to check the menu names. For Chromebooks, Google’s Family Link and Chromebook supervision settings are the relevant references.
How do I allow only certain websites?
You allow only certain websites by using an allow-list, not a general filter. That means the child can visit only the domains you approve, such as a school portal, a homework site, or a family information page.
The exact setting name changes by platform, but the logic stays the same. In Apple’s Screen Time web settings, choose the option that limits access to specific websites only. In Android Family Link, use website controls tied to the child’s account. On managed Windows or Chromebook setups, use the device or profile policy that restricts web access to approved domains. If your platform does not offer a built-in allow-list, a browser restriction alone will not do the job.
Build the list narrowly. Add the main domain, not every page by hand unless the tool requires it. For example, a school site may work with the root domain, while a reading app may need both the main site and a content subdomain. If pages fail to load, the usual cause is that the allow-list is too narrow and missing a login or media domain.
Keep the list short. Ten approved sites are easier to maintain than 50. Every extra site is another place a child can roam. If a service uses embedded video, outside sign-in, or third-party payment pages, it may break under a strict allow-list. That is the trade-off: fewer open doors, more maintenance.
The result you want is easy to recognize. Approved sites load normally, while everything else throws a block page or never resolves. If the browser still opens random search results, you are not on an allow-list yet.
This is the right choice for younger children and school tablets. It is the wrong choice if the child needs open access for research, coding, or older-student projects that depend on many sources.
What still slips through when browser access is “blocked”?
The most common slip is a second browser, a second account, or a guest session. Blocking one app is not enough if the child can sidestep it in 30 seconds.
A child can also get around weak controls by using a built-in web view inside another app, a messaging app with a browser, or a browser installed before restrictions were turned on. That is why the order matters: block the browser, stop new installs, remove alternate accounts, then tighten website access.
Another miss is leaving safe browsing on and assuming it equals a lock. Safe browsing helps warn about dangerous pages, downloads, and some risky sites, but it does not prevent all browsing. It reduces exposure, not the underlying access. If the goal is no web access, a warning screen is not enough.
Check these bypass paths one by one:
- App installs: If the Play Store, App Store, Microsoft Store, or browser downloads are still open, another browser can appear.
- Alternate profiles: A guest login or spare user account can bypass child settings.
- Sync and cloud settings: A browser synced from another device may reappear with bookmarks and extensions.
- Saved app shortcuts: A web clip or bookmarked site can still open a browser if the browser itself remains active.
- School or work profiles: Managed accounts may follow separate rules from family settings.
The fix is not one setting. It is a chain: child profile, browser block, install block, and website rules. Leave out any one of those and the setup is soft enough to fail.
If the device is shared with adults, this may not be the right tool. A shared family iPad or Android tablet often works better with separate adult and child profiles plus scheduled access windows instead of a total browser ban.
For browser-level warnings and website reputation controls, Google Safe Browsing and Microsoft Edge safety features are worth checking, but they should sit under a real restriction plan, not replace it.
Can I block all browsers on my child’s phone?
You can get very close, but the exact result depends on the phone’s operating system and whether the child can install apps. On iPhone, Screen Time plus app-install limits can remove most browser access. On Android, you usually need account controls, app blocking, and store restrictions together. If the child controls the passcode, the block is weak.
How do I allow only certain websites?
Use an allow-list setting, not a general safe-browsing filter. That lets only approved domains load and blocks the rest of the web. On iPhone, that is usually under Screen Time web content restrictions. On Android, Windows, and Chromebook, the exact menu varies, but the setting must be tied to the child’s account or device policy.
Can a child use a different browser to bypass controls?
Yes, if new browser installs are still allowed. A blocked Chrome app does not stop Safari, Edge, Firefox, or a browser downloaded later. That is why browser access controls need two parts: block the browser you can see and block the path to install another one. If either is open, bypass is possible.
How do I disable web browsing on a tablet?
Disable the browser app, block new app installs, and turn on the strictest website restriction the tablet supports. On iPad, that usually starts with Screen Time. On Android tablets, it usually starts with the child account and Play Store controls. If the tablet is shared, a full disable may be too blunt and may interfere with adult use.
Drafted with AI; not yet reviewed by a person.
