Taking back control: How to block websites on Safari and Chrome

Blocking websites outright can provide peace of mind. But there are several ways to do so, depending on the browser, the device, and your technical ability. Read on for a step-by-step guide.

Blocking websites on desktop browsers

Google Chrome

Using extensions

One of the easiest ways to block websites on Chrome is via an extension. That’s because the browser doesn’t allow regular/non-admin users to do so. Software developers have created many popular free browser add-ons tailor-made to block websites. These can be found on the chromewebstore, where both the performance rating and instructions are available.

As a point of caution, ESET does not endorse the use of any specific browser extension since there are potential risks of exploitation by malicious actors or malware. ESET security products offer various Browser Privacy & Security functions including URL blocking.   

Steps:

1. Open the Chrome Web Store and search for the extension you require.
   
2. Click "Add to Chrome" and “Add extension” in the pop-up box, to install the extension.
   
3. After installation, click the extension icon in the toolbar.
   

Enter the website URLs you want to block and save changes.

Parental controls

If you’re a concerned parent, try Windows 11 built-in parental controls. (Note: the macOS/iOS version of parental controls, Screen Time, is shown below, but is not available on Chrome).

Steps:

1. Go to the Windows menu and click Settings > Accounts.
2. Scroll down to “Family” > “Add Someone.”
3. A new window will pop-up. Ignore the email address box and click the text “No Microsoft account? Create one for a child.”
4. After creating the account, you can access it through your Microsoft account page.
5. Go to “Content filters” > “Blocked sites.” Then, enter the URL of the site you want to block.
6. Click “+” to add the domain to your block list. 

Enterprise-level blocking

If you run a Chrome Enterprise environment and are an administrator, you can block specific websites across multiple devices using URLBlocklist and URLAllowlist policies.

Steps for administrators:

1. Access the Google Admin console.
   
2. Navigate to Devices > Chrome > Settings.
   
3. Under "Content", click "URL Blocking."
   
4. Enter the URLs you wish to block under "Blocked URLs."
   
5. You can also specify exceptions under "Blocked URL exceptions."
   
6. Click "Save" to apply the settings.

These instructions will work for any device or enrolled browsers on Windows, Mac, Linux or Android. More information is available here.

Windows system-wide blocking

Windows also offers a method of blocking websites. It’s slightly more advanced and will require you to use an administrator account.

Steps:

1. Search for "Notepad" in the Start menu.
2. Right-click on "Notepad" and select "Run as administrator."
3. In Notepad, go to File > Open.
4. Navigate to C:\Windows\System32\drivers\etc.
5. Click on "hosts".
6. In the pop-up “Select an app to open hosts” Click the "Notepad" icon.
7. At the bottom of the file, add new lines. For each website you want to block, type 127.0.0.1 followed by a space, then the website's domain (eg 127.0.0.1 www.ft.com).
8. Go to File > Save.
9. Restart your browser/computer.

Safari on macOS

Using Screen Time

A handy macOS feature that enables management and monitoring of web usage, including website blocking, is Screen Time. You can use it to block categories of web content and specific sites—for you and your children.

Steps:

1. Click the Apple menu and select "System Settings."
2. Go to "Screen Time" > "Content & Privacy."
3. Toggle "Content & Privacy Restrictions" to ON.
4. Click "Content Restrictions" then “Web Content."
5. Choose "Limit Adult Websites" or "Allowed Websites Only."
6. To block specific sites, click "Customize", then add the URLs under "Restricted."
   

Using Terminal

If you’re feeling confident, you can also edit the hosts file to block websites on a macOS, no matter what the browser. As such, it works in a similar way to that described above for Windows.

Steps:

1. Open "Terminal" from the Utilities folder.
2. Enter sudonano/etc/hosts and press Enter.
3. Add a new line with 127.0.0.1 followed by the website’s domain (e.g., 127.0.0.1 www.example.com).
4. Press Control-O to save and Control-X to exit.
5. Flush the DNS cache by entering sudo dscacheutil - flushcache; sudo killall -HUP mDNSResponder.

Blocking websites on mobile devices

iOS devices (iPhone and iPad)

Using Screen Time

The Screen Time feature in iOS is a simple but effective tool to restrict access to specific websites.

Steps:

1. Open "Settings" and tap "Screen Time."
2. Tap "Content & Privacy Restrictions" and enable it.
3. Tap "App Store, Media Web & Games" > "Web Content."
4. Select "Limit Adult Websites."
5. Under "Never Allow", tap "Add Website" and enter the URL you want to block.

Using App Limits

To limit time spent on specific websites:

1. Go to "Settings" > "Screen Time" > "App Limits."
2. Tap "Add Limit" > "Websites."
3. Click "Add website" (or check one from the existing list), add the website URL and set a time limit (minimum of 1 minute).

Android devices

Using Digital Wellbeing & parental controls

Android's Digital Wellbeing feature helps monitor and limit app usage. However, it doesn’t provide built-in website blocking. For more website blocking options, third-party apps are available on the Google Play store.

*As a point of caution, ESET does not endorse the use of any specific browser extension since there are potential risks of exploitation by malicious actors or malware. ESET security products offer various Browser Privacy & Security functions including URL blocking.   

Using third-party applications

Apps available on the Google Play store can block both websites and apps on Android devices.

*Ensure that you consider ratings and reviews carefully as third-party apps can come with risks.

Steps:

1. Download and install your chosen 3rd party URL blocker from the Google Play Store.
2. Open the app and grant the necessary permissions.
3. Tap the "+" icon to add websites to block.
4. Enter the URLs and save your changes.

Cross-platform website blocking solutions

DNS-level blocking

DNS-level blocking can restrict access to websites across all devices on a network. Popular options are discussed in communities like Reddit. The benefits of taking a DNS-level approach to blocking is that it offers content filtering by blocking access to specific domains, one option even backed by the European Union, DNS4EU.

Steps:

1. Go to your router admin panel using 192.168.01.1 (may differ for each router, check router manual or bottom side of the device).

2. Find DNS server settings (differs from router to router).

3. Change the DNS server setting to a reliable setting limiting access to malicious or adult content.

Router-level website blocking

Similar to the above method, blocking websites at the router level also means that all devices connected to the network are covered.

Steps:

1. Access your router’s admin panel (usually by entering 192.168.1.1 or 192.168.0.1 in a web browser).
2. Log in with your admin credentials.
3. Navigate to the section for website filtering or access restrictions.
4. Enter the URLs you want to block and save the settings.
   

Note: The exact steps may vary depending on your router’s make and model.

SafeSearch

To filter content deemed explicit by Google, enable SafeSearch in any supported browser.

Steps:

1. Go to the Google homepage.
2. Click on "Settings" in the bottom right corner.
3. Click "Search settings."
4. Click on "SafeSearch."

Top tips for effective website blocking

• Set clear objectives: Understand why you want to block websites. Is it for enhancing your productivity, improving security and privacy, or to protect your children?
• Combine methods: There’s no one-size-fits-all method, so consider multiple blocking techniques (e.g., browser extensions and DNS-level blocking) to provide more robust protection.
• Regularly review settings: Your goals may change over time, as will the list of websites you want to allow/block. So periodic audits are important to ensure your policy remains relevant.
• Allow list versus Deny list: Do you want to allow everything and block specific sites (more common), or block everything and only allow a small number of sites (better for young children).
• Educate users: Be sure to sit down with family members to discuss why you’re restricting access to certain types of content. Getting their buy-in means they’ll be less likely to try and circumvent any measures.
  

Insights from an ESET expert

“With the rapid improvement of technologies such as generative AI models, machine translation tools, semi-automated bots like Telekopye, and web templates, it’s now alarmingly easy to create fake, phishing, and malicious websites. AI-driven tools are enabling the creation of an increasing amount of inappropriate and deepfake content, raising urgent concerns about children’s exposure to deepfake pornography and violent material. On top of this, the wave of misleading ads and fast-spreading investment scams—like the Nomani campaigns tracked by ESET—shows just how quickly these threats can multiply, putting people at risk of identity theft, manipulation, and financial or reputational harm.

To avoid risks like these, a layered approach is not an option but a necessity, using all available protective measures ranging from parental controls, browser extensions, and security software with web filtering on individual devices, to network-level solutions such as router-based blocking, secure DNS services, and properly set up firewalls. Combining smart technology with ongoing awareness is probably the only defense approach effective against today’s fast-evolving online threats.”

-          Ondrej Kubovič, ESET Security Awareness Specialist

Take control of your online security and privacy

Blocking harmful websites on your computer or phone is just the first step. With ESET, you get comprehensive protection to safeguard your browsing, financial transactions, and personal data:

• Multilayered Anti-Phishing – Stay safe from deceptive links and scams.
• Safe Banking & Browsing – Secure your online payments and protect sensitive financial transactions.
• Browser Privacy & Security – Prevent trackers from collecting your data for a more private browsing experience.
• Unlimited VPN – Maintain online anonymity, even on public Wi-Fi.

Experience worry-free browsing today! Try ESET HOME Security Ultimate and protect what matters most to you and your family.

Are you self-employed or a small business owner? Avoid distractions in your daily work and protect your business with ESET Small Business Security.

Frequently asked questions

Can I block websites on all browsers simultaneously?

Yes, by deploying DNS-level blocking or configuring restrictions at the router level, you can block sites across all browsers and devices on a network. Google’s SafeSearch will also work across browsers. If you’re on a Windows machine then editing the host’s file will work across browsers, and the same is true for using Terminal on a macOS.

How can I prevent tech-savvy users from bypassing website blocks?

Employing multiple layers of blocking (e.g., device settings, DNS-level, and router-level) and using tools with password protection can enhance security and reduce the likelihood of circumvention. Also, if you’re blocking content for your kids, chat with them first about why you’re doing it, to get their buy in.

How do I block a website in Chrome?

Unless you are an enterprise user or have an admin account, you’ll need to use a dedicated third-party extension. Alternatively, you can use parental controls built into Windows 11 or edit the host’s file.

How do I block a website in Safari?

Using Screen Time is the easiest way, although you could also edit the hosts file via Terminal.

How do I block websites on my iPhone?

Use Screen Time or App Limits for seamless web blocking on iPhones and iPads.

How do I block websites on Android?

You’ll need to use a third-party application like those available on the GooglePlay store.