How to Block Websites on Windows 11 for Kids

There are four practical ways to block websites on a child's Windows 11 PC: Microsoft Family Safety (free, but filters only Edge), the hosts file (free, all browsers, manual), a DNS filter (free or paid, all browsers and devices), and a system-wide app filter. The right choice depends on whether you need categories, every browser, or just a few specific sites.

A browser extension is the easiest option and the easiest to bypass: it works in one browser and the child can disable it or install another browser. For a family PC, prefer a method that sits below the browser.

Method 1: Microsoft Family Safety (free, Edge only)

Family Safety is built into Windows and free. It can filter categories, block specific sites and turn on “only allowed websites” mode. The important limitation: web filtering works fully in Microsoft Edge. When the filter is on, other browsers are blocked by default so the filter cannot be bypassed.

1. Set up a family group. Sign in at account.microsoft.com/family and add the child's Microsoft account.
2. Sign in on the child's PC. Use the child's Microsoft account in Windows and keep it a Standard user.
3. Open Content filters. In the Family Safety app or at family.microsoft.com, select the child → Content filters → Web and search.
4. Turn on filtering. Choose “Filter inappropriate websites” or “Filter inappropriate websites and searches”. Add specific sites to the blocked list if needed.
5. Test in Edge. Open a blocked site in Edge while signed in as the child. Then check what happens in Chrome or Firefox — they are usually blocked as apps.

Method 2: The hosts file (free, every browser, manual)

The hosts file maps domain names to IP addresses before the browser connects. Point a domain to 0.0.0.0 and it will not load in any browser. It works offline and needs no account.

1. Open Notepad as administrator. Press Start, type Notepad, right-click and choose “Run as administrator”.
2. Open the hosts file. File → Open → C:\Windows\System32\drivers\etc\hosts. Change the file type to “All files” so the file is visible.
3. Add one line per domain. For example:

   0.0.0.0 example.com
   0.0.0.0 www.example.com

   Add both the bare domain and the www version. Subdomains need their own lines.
4. Save and flush DNS. Save the file, then open Command Prompt as administrator and run ipconfig /flushdns.
5. Test every browser. Open the site in Edge, Chrome and Firefox. All three should fail.

Limitations: it is manual, there are no categories, and a child with administrator rights can edit the file. It is a good tool for a handful of specific sites, not for filtering the open web.

Method 3: DNS filtering (all browsers, all devices)

DNS filtering blocks domains at the resolver level. The browser never learns the site's address, so it works in every browser and in many apps. You can set it on the router (whole home) or on the PC (one device).

1. Choose router or PC. Router-level covers every device, including phones. PC-level covers only this computer.
2. Set the DNS addresses. On Windows: Settings → Network & internet → your adapter → DNS server assignment → Edit → Manual → IPv4 on. Enter the two addresses.
3. Flush the cache. Run ipconfig /flushdns in Command Prompt.
4. Test a blocked site. Open a known adult site in two different browsers. Both should fail.

Method 4: A system-wide app filter

A dedicated filter runs as a Windows service, so the child cannot turn it off from a browser and it applies to every browser. ScreenRhythm Pro uses a DNS-based filter with four categories: adult content, gambling, ads and trackers, and social networks. It is system-wide, not a per-browser extension.

• Good for: a family that wants one switch for the main categories in every browser.
• Not for: custom URL lists or per-site rules. ScreenRhythm does not offer a custom blocklist; use the hosts file or Family Safety for specific sites.
• Free plan: the filter is part of Pro. The free plan covers time limits, breaks, schedule and screen lock.

Which method should you use?

Questions

ScreenRhythm is our product. We describe Microsoft Family Safety, DNS filters and the hosts file honestly, including their limits. This article is general information, not legal advice.