Android doesn’t make content filtering obvious, but the tools are already built in — you just need to know where to find them. This guide covers four methods to block inappropriate websites on an Android phone or tablet without downloading anything from the Play Store: Google SafeSearch, Chrome Safe Browsing, Google Family Link, and Private DNS. Each takes under five minutes to set up. Every path below is verified against Android 17, the current release.
Parents protecting a child’s device should go straight to Method 3 (Family Link) — it’s the most comprehensive built-in option and the only one that blocks private/incognito browsing. For full device protection, combine it with Method 4.
Method 1 — Enable Google SafeSearch
SafeSearch is Google’s built-in content filter. When it’s on, explicit images, videos, and websites are filtered out of Google Search results — so searches for inappropriate topics return clean results rather than adult content. Note that Google’s default SafeSearch setting now blurs explicit images rather than removing them, so on a child’s device always choose the stricter Filter option, which blocks explicit results entirely. It’s the fastest method to set up and works without any downloads, but it only applies to Google searches made through the Google app or Chrome. It won’t block a specific URL someone types directly into the address bar.
On the Google app (affects all Google searches on the device)
- Open the Google app on the Android device.
- Tap the profile picture or initial in the top-right corner, then tap Settings.
- Tap General.
- Tap SafeSearch and choose Filter. Blur, the default, only blurs explicit images; Filter blocks explicit results entirely.
On Chrome (search results inside the browser)
- Open Chrome and navigate to google.com/safesearch.
- Select Filter.
- Tap Save. The setting is tied to the Google Account signed into Chrome, so it syncs to other signed-in devices automatically.
| Important limitation SafeSearch only filters Google Search results — it does not block websites accessed by typing a URL directly, by clicking a link shared in a message, or by using a different search engine like Bing or DuckDuckGo. Treat it as a useful first layer, not a standalone solution for a child’s device. |
Method 2 — Turn On Chrome Safe Browsing
Chrome’s Safe Browsing feature warns you before you visit websites known to contain malware, phishing attempts, or dangerous downloads. It’s a security feature rather than a content filter for inappropriate material — but enabling Enhanced Safe Browsing adds real-time protection against deceptive and harmful sites and should be on by default on any child’s device. Google’s Safe Browsing documentation explains what each protection level covers.
- Open Chrome on the Android device.
- Tap the three-dot menu in the top-right corner and select Settings.
- Tap Privacy and Security.
- Tap Safe Browsing.
- Select Enhanced Protection. This checks URLs in real time against Google’s database of dangerous sites — it’s the highest level of protection available.
| Best used alongside SafeSearch Safe Browsing and SafeSearch serve different purposes. SafeSearch filters content based on appropriateness. Safe Browsing blocks known dangerous and deceptive sites. Both take under a minute to enable and should be turned on together as a baseline for any child’s device. |
Method 3 — Set Up Google Family Link (Recommended for Children)
Google Family Link is Android’s official parental control system. It’s free, built by Google, and the most powerful no-app-purchase option available: you can block specific websites, filter all mature content in Chrome, block private browsing entirely, approve or reject app downloads, and set daily screen time limits — all from your own phone. Family Link is the recommended method for any parent setting up a child’s Android device.
What you need before you start
- Your Android phone (the parent device — you manage everything from here)
- The child’s Android phone (the device you’re setting up controls on)
- A Google Account for your child. If your child is under 13, you can create a supervised Google Account through the setup process.
Setting up Family Link and blocking websites
- On your Android phone: open the Google Play Store, search for Google Family Link, and install it. It’s made by Google and is free.
- Open Family Link and tap Get Started. Follow the prompts to create or link your child’s Google Account.
- When prompted, install the companion app on your child’s device — this completes the supervised account setup. The on-screen instructions guide you through it.
- Once connected, open Family Link on your phone and tap your child’s name.
- Tap Controls > Content restrictions > Google Chrome and Web.
- Select Try to block explicit sites. This enables Google’s category-level filter for adult content across all Chrome browsing (Google’s Family Link guide documents each option).
- To block a specific website: tap Manage sites > Blocked > Add a site. Enter the URL and tap Block.
- To allow only specific approved websites: tap Manage sites > Approved > Add a site, then change the Chrome setting to Only allow approved sites.
| Family Link blocks private/incognito browsing automatically When Family Link is active on a child’s device, Chrome’s private browsing mode is disabled completely. Your child cannot open an incognito tab to bypass the filters. This is the main reason Family Link is the recommended method for children’s devices — the other methods in this guide don’t prevent incognito browsing. |
| Managing settings remotely Once set up, you manage everything from the Family Link app on your own phone. You don’t need to touch your child’s device to change settings, add blocked sites, or adjust screen time limits. Changes apply immediately and your child receives a notification. |
Method 4 — Change the Private DNS to a Family Filter
Changing the Private DNS setting routes all internet traffic through a filtering server that blocks inappropriate content before it reaches the browser. Unlike the methods above, Private DNS works across every browser and app on the device — Chrome, Firefox, Samsung Internet, in-app browsers, all of them. Android 9 and later (most phones in use today) supports Private DNS natively — no technical knowledge or account required.
The two best free family-safe DNS options are Cloudflare for Families and CleanBrowsing. Both are free and take about two minutes to configure.
Option A — Cloudflare for Families (blocks malware and adult content)
- On the Android device, go to Settings.
- Tap Network & Internet (or Connections on Samsung devices).
- Tap Private DNS.
- Select Private DNS provider hostname.
- Type family.cloudflare-dns.com and tap Save.
Option B — CleanBrowsing Family Filter (stricter content blocking)
- Follow the same path: Settings > Network & Internet > Private DNS > Private DNS provider hostname.
- Enter family-filter-dns.cleanbrowsing.org and tap Save.
How to check it’s working
- Open a browser on the device and try navigating to a known adult website URL.
- The DNS filter should show a block page rather than the site content.
- You can also confirm the connection at 1.1.1.1/help in the browser — it will confirm your DNS is routing through Cloudflare.
| One limitation to know Private DNS applies to Wi-Fi and mobile data, but some devices reset the setting when switching to a new Wi-Fi network. Verify the setting is still active after the device connects to a different network for the first time. Also, a determined user can change the DNS setting back through Settings — for children’s devices, combine Private DNS with Family Link, which adds account-level protection that’s harder to remove. |
Which Method Should You Use?
Each method works differently. Here’s a side-by-side summary to help you choose:
| Method | All browsers? | Blocks incognito? | Best for | Strength |
| 1. Google SafeSearch | Chrome only | No | Quick first layer | Light — hides explicit results, doesn’t block direct URLs |
| 2. Chrome Safe Browsing | Chrome only | No | Malware & phishing | Security focus — not a content filter |
| 3. Google Family Link | Chrome + apps | Yes ✓ | Children’s devices | Strong — specific URLs, categories, blocks incognito |
| 4. Private DNS | All browsers & apps ✓ | Yes ✓ | Whole-device filter | Strongest built-in — filters every browser and app |
These four methods filter inappropriate content by category. To block specific individual sites instead, such as one game or social platform, see how to block specific websites on Android.
For parents protecting a child’s Android device: set up Google Family Link (Method 3) and Private DNS (Method 4) together. Family Link blocks incognito browsing and lets you manage specific sites remotely; Private DNS covers every browser and app outside Chrome. Together they’re the most comprehensive built-in setup available without paying for anything.
For a shared family device or your own phone: enabling SafeSearch (Method 1) and Safe Browsing (Method 2) takes about two minutes and provides a solid baseline filter for Google searches and dangerous sites.
| Once the controls are in place Website filtering is one layer of a broader approach. Equally important are the screen time rules you set by age, and understanding how kids work around parental controls — because technical filters work best when children understand why boundaries exist, not just that they do. |
Frequently Asked Questions
Can I block websites on Android without downloading any app?
Yes. Three built-in methods require no Play Store downloads: Google SafeSearch filters explicit content from Google Search results; Private DNS blocks inappropriate sites across every browser and app on the device; and Google Family Link provides comprehensive parental controls including Chrome content filtering, specific URL blocking, and incognito mode blocking. Family Link involves a brief setup process linking your child’s Google Account, but it’s entirely free.
Does Google Family Link work on all Android browsers, or just Chrome?
Family Link’s web content filtering applies primarily to Chrome. If a child uses a different browser — Firefox, Samsung Internet, or any other — the Chrome-specific filters don’t carry over. To cover all browsers, combine Family Link with Private DNS (Method 4), which filters at the network level regardless of which browser is open. Family Link also blocks incognito mode in Chrome, which Private DNS alone cannot do.
What’s the best free DNS for blocking adult content on Android?
Cloudflare for Families (family.cloudflare-dns.com) is the most widely used option — it’s fast, free, and blocks both malware and adult content. CleanBrowsing’s family filter (family-filter-dns.cleanbrowsing.org) is stricter and covers a broader range of adult content categories. Both are configured in Settings > Network & Internet > Private DNS with no account or payment required.
Can my child turn off the website filters?
It depends on the method. SafeSearch can be turned off by anyone with access to the Google Account settings, so it’s not sufficient on its own for a child’s device. Private DNS can be changed in Settings unless you restrict access to Settings separately. Google Family Link is the most resistant to bypass: it locks Chrome’s content settings behind your parent account and disables incognito mode — changes require your approval. Pairing Family Link with Private DNS gives you the most durable protection. For a full look at common bypasses, see our guide on how kids get around parental controls on iPhone — most of the same principles apply on Android.
Does blocking websites on Android affect all users on the device?
SafeSearch and Private DNS apply to the entire device — every user account will be subject to the filter. Google Family Link is account-specific: it only applies to the supervised Google Account. If a device is shared between a parent and child, Family Link controls only the child’s session when they’re signed in with their supervised account, leaving the parent’s session unrestricted. This makes Family Link a better choice for shared devices than a system-wide DNS filter alone.
Putting It All Together
The most protective no-download setup for a child’s Android device is Google Family Link combined with Private DNS. Family Link handles Chrome-specific controls — including blocking incognito browsing and letting you manage websites remotely — while Private DNS provides a whole-device filter that covers every browser and app. Together they close most of the gaps that exist when either is used alone.
Website filtering answers the question of what your child can’t access. Equally important is what they can. For younger children especially, pairing content controls with a curated app — like Jellie’s App, which offers manually reviewed, ad-free video for young children — means the content question is answered before it even reaches the filter. You can also read our complete guide on setting up iPhone and iPad parental controls if your child uses an Apple device alongside their Android.