How to block adult websites on Android permanently

Why a simple block does not last

Many families start by changing a setting in Chrome or adding a filter in the router. Both help, and both can fall away. A child can open a different browser, switch to mobile data, turn on a VPN or change the DNS setting on the phone. Permanent blocking means closing each of those doors, not just the first one.

Think of it as four layers: a filter on the network lookups, safe search in the search engine, control of which browsers exist, and a lock on the settings that could undo the other three.

Layer 1: a filter that travels with the device

A home router filter only works at home. On mobile data or a friend's Wi-Fi it does nothing. A better approach sets a filtering DNS on the device itself, so every website lookup goes through a service that refuses adult categories wherever the phone is.

Skie locks a filtering DNS on the device. By default it uses CleanBrowsing Family unless the organisation chooses another. Because Android prevents the child changing Private DNS, the filter applies on any Wi-Fi or mobile data. If a network blocks the encrypted DNS port, the device falls back to the network's DNS and the dashboard flags it.

Layer 2: safe search and the browser

• SafeSearch is forced on, so search results drop explicit material
• YouTube restricted mode is forced on
• Chrome safe-sites filter and safe browsing are on
• Incognito mode is blocked, as are Chrome sign-in and sync
• Chrome's own secure DNS is switched off, so the filtered system DNS is used
• Chrome internals pages and view-source are blocked

Layer 3: no other doors

A filter is useless if the child installs a browser that ignores it. Skie always blocks more than 50 alternative browsers, including Firefox, Brave, Opera, Edge, Samsung Internet, DuckDuckGo, UC, Vivaldi and Tor. VPN apps, proxy apps and DNS changer apps are blocked as well. The Play Store can also be hidden so new apps are not installed in the first place.

If an app is installed after setup and is not on your list, Skie removes it silently. Apps are hidden rather than deleted, so data returns if you allow them later.

Layer 4: lock the settings

Skie blocks VPN setup, the Private DNS setting, network reset, factory reset from Settings, safe mode and developer options by default. It also forces automatic date and time, which stops an old trick of changing the clock to confuse a timed block. If someone does apply a reset from the recovery menu, Android's Factory Reset Protection is on, so the wiped device cannot be set up again without the Skie organisation's Google sign-in.

Skie is built to be tamper-proof. If anything ever did get through, the parent is alerted immediately, down to the exact device. For the wider topic, see how to stop a child using a VPN or another browser.

Test it, and know the limits

After setup, try it yourself on the child's device: search for something explicit, open a known adult domain, try Chrome and any other browser, try mobile data. Do this before handing the phone over.

Filters are good, not magic. A new site may not be categorised yet, and a filter cannot judge a photo sent in a chat app. Blocking individual sites you name is not available yet in Skie, though adult-category blocking is live. Talk to your child as well. Safe browsing for students covers the habits side.

What this protects, and what it does not

Device-level blocking covers the browser, the search engine and most in-app web views that use the system's network lookups. It cannot read what is inside an encrypted chat, and it cannot judge images shared by other people. Treat it as a strong wall around the open web, with conversation covering what a wall cannot.

Because categories are applied by a filtering service, a brand new site may not yet be listed. Report anything that gets through and consider tightening the browser to restricted or off for younger children. A one-app allow list is another route for very young children.

Keeping it permanent over time

• Leave the filter locked: do not hand the child the dashboard login
• Keep the Play Store hidden, and review the allowed list when apps change
• Check the compliance score now and then
• If you replace the device, provision it again from the dashboard so the same filter applies
• Keep the Skie app updating: it updates itself, with checksum verification
• Review the setup at each school year

If your child has already seen something

Do not punish curiosity. Children often come across adult material by accident or through a friend. Say that you are glad they told you, answer questions calmly, and explain what is now blocked. A child who feels safe telling you is a stronger protection than any filter.

Frequently asked questions