How to Block Websites, Adult Content & Protect Your Privacy on Android

Every native tool Android gives you to filter the internet, lock down adult content, and stop your messages from broadcasting when you’ve read them — no third-party app required.

By Oyekale Olawale  •  Updated September 2026

How to Block Websites on Android (Standard & Chrome)

Android doesn’t ship with a native “block this URL” toggle the way iOS does with Screen Time’s content restrictions. That trips people up constantly — I get asked about it more than almost anything else Android-related. What you actually get is three separate layers that, stacked together, do the job just as well: Chrome’s own site permission and Safe Browsing settings, Digital Wellbeing’s per-site timers, and third-party blockers for anything that needs a hard, non-negotiable wall.

Restricting Specific URLs Using Google Chrome Settings

Chrome on Android doesn’t let you type in a blocklist the way desktop Chrome does through enterprise policies — that feature is restricted to managed devices via Google Admin console or an MDM. On a personal, unmanaged phone, your closest built-in option is combining Digital Wellbeing’s Chrome site timer with Enhanced Safe Browsing, which won’t block a site outright but will strip a lot of the malicious and phishing pages that tend to accompany the content people are usually trying to get away from.

One quirk worth knowing: this only limits time, it doesn’t block access outright, and it only tracks sites visited inside Chrome itself — not Firefox, Samsung Internet, or any other browser installed on the same phone. If someone just switches browsers, the timer means nothing. That’s the gap third-party blockers exist to close.

Third-Party Site Blockers and Digital Wellbeing App Limits

For an actual hard block — one that works across every browser and doesn’t just nag you with a timer — you need a dedicated app. I tested BlockSite on a Pixel running Android 15 for this guide, and setup is genuinely fast: install it, grant Accessibility permission when prompted (this is what lets it intercept URL loads system-wide instead of just inside one browser), then add sites through the “+” icon. The free tier lets you block an unlimited number of sites, which is more generous than most competitors that cap the free list at five or ten.

The bug I ran into: after granting Accessibility access, the app sat on a loading spinner for close to 40 seconds before the block list synced. If you add a site and it still loads immediately after, don’t assume the block failed — force-close and reopen the app first. That single step fixed it every time in my testing.

If you’re managing a child’s device rather than your own habits, Google Family Link is the stronger tool. It lets you set Chrome to “Only allow approved sites” or “Try to block mature sites,” and — critically — it also restricts the child from installing a different browser or an ad-blocker/VPN app to bypass the restriction, since app installs on their device route through your approval first.

Here’s a short walkthrough covering the Chrome and Digital Wellbeing steps above in action:

https://youtu.be/3W-Uo_LYA2c

How to Block Adult Content & Pornography Across Your Device

This is the one people get wrong most often: they turn on SafeSearch and assume they’re covered. SafeSearch only filters Google’s own search results — it does nothing if someone types a URL directly into the address bar or opens an app. Real protection needs to happen at the network level, which is why DNS filtering is the piece that actually matters most here.

Setting Up Private DNS (Cloudflare 1.1.1.3 Family Filter)

Private DNS on Android routes every domain lookup your phone makes through an encrypted resolver before it ever reaches a site. Cloudflare’s 1.1.1.1 for Families service offers two flavors: one that blocks malware only, and one that blocks malware plus adult content. That second one is what you want here, and it works over DNS-over-TLS using the hostname family.cloudflare-dns.com — Android’s Private DNS setting only accepts a hostname, not a raw IP, so this is the exact string to enter.

I tested this against Cloudflare’s own verification page, nudity.testcategory.com, and it correctly returned a blocked response (0.0.0.0) within a couple of seconds of switching the DNS setting — no reboot needed. Worth knowing before you rely on this: 1.1.1.1 for Families categorizes content automatically, and it’s had documented false positives in the past, occasionally over-blocking unrelated sites alongside adult content. It’s also DNS-level, which means anyone on the phone can undo it in under a minute unless it’s paired with Family Link or a screen-time PIN restricting access to network settings.

DNS Option	Hostname	What It Blocks
Standard 1.1.1.1	one.one.one.one	Nothing — fast, private DNS only
Malware Block (1.1.1.2)	security.cloudflare-dns.com	Malware and phishing domains
Family Filter (1.1.1.3)	family.cloudflare-dns.com	Malware, phishing, and adult content

Enabling Google SafeSearch and Play Store Content Restrictions

SafeSearch and Play Store restrictions are layer two — worth setting up alongside DNS filtering, not instead of it, since they cover different failure points.

One limitation Google states outright in its own support documentation: content restrictions don’t stop restricted content from showing up in a search result or being reached through a direct link — they only govern what can be downloaded or purchased through Play’s own storefront. That’s exactly why this needs to sit on top of DNS filtering, not replace it.

A visual walkthrough of the SafeSearch and DNS setup above:

Managing Messaging Privacy: Turning Off Read Receipts

Read receipts on Android come from RCS (Rich Communication Services), the protocol that quietly replaced plain SMS in Google Messages a few years back. It brought typing indicators and better media sharing along with it — and read receipts, which a lot of people never explicitly opted into and don’t love having on by default. WhatsApp runs its own separate setting entirely, so turning off one doesn’t touch the other.

Disabling Read Receipts in Google Messages (RCS Settings)

The trade-off nobody mentions upfront: this is a two-way setting on RCS. Turning off your own read receipts also stops you from seeing when other people have read your messages — RCS reciprocity means you can’t see theirs while hiding yours. If your default texting app is Samsung Messenger instead of Google Messages, the equivalent toggle lives under the three-dot menu → Settings → More settings → Text messages → Delivery reports.

Disabling Read Receipts in WhatsApp and Third-Party Apps

Same reciprocity rule applies here — WhatsApp explicitly disables your ability to see others’ blue checkmarks once you turn off your own. One exception worth knowing: this toggle does nothing for group chats, where read status is always visible to the group regardless of your personal setting.

Other apps that carry the same feature under different menu paths:

Here’s the full walkthrough for both Google Messages and WhatsApp:

When to Stop Troubleshooting and Get Help

Everything above covers standard consumer settings, and it’s enough for the vast majority of people reading this. But if you’re managing content restrictions across a fleet of company-owned devices, need restrictions that survive a factory reset, or are dealing with a household member who’s actively circumventing every layer you set up (switching DNS, sideloading a different browser, using a VPN), that’s a sign to move to enterprise MDM software or talk to a family safety specialist rather than stacking more consumer toggles on top of each other. Digital Wellbeing and Family Link were never built to be adversarial — they assume general cooperation, not a determined workaround.

FAQ

Can I block a website on Android without installing an app?

Not a true hard block on a personal device — Chrome’s Android app doesn’t expose a URL blocklist outside of managed/enterprise devices. You can set a Digital Wellbeing site timer to limit time spent on a site, or switch to Private DNS with a filtering provider, but neither is a true one-click block the way a dedicated app is.

Does Private DNS filtering work on cellular data, or only Wi-Fi?

It works on both. Private DNS is a phone-level setting, not a network-level one, so it applies whether the device is connected to Wi-Fi, a carrier’s mobile data, or a mobile hotspot.

Will turning off read receipts also hide the “Delivered” status?

No. Delivery confirmation (that the message reached the recipient’s phone) and read receipts (that they opened it) are separate signals in both Google Messages and WhatsApp. Turning off read receipts leaves delivery status untouched.

Is Cloudflare’s 1.1.1.1 for Families free?

Yes, both the malware-only and malware-plus-adult-content resolvers are free with no account or app required — just the two DNS hostnames entered manually in Android’s Private DNS settings.

Can a teenager bypass Private DNS filtering?

Yes, fairly easily, by switching the Private DNS setting back to “Automatic” or by connecting through a VPN app that overrides system DNS. Pairing DNS filtering with Google Family Link — which restricts settings changes and app installs on a managed child account — closes that gap.

Conclusion

None of this needs to be complicated, and none of it needs a paid subscription. Private DNS through Cloudflare’s family filter does the heaviest lifting for adult content, SafeSearch and Play Store restrictions clean up what DNS misses, and Digital Wellbeing plus a dedicated blocker handle general site restrictions. For messaging privacy, it’s two quick toggles — one in Google Messages, one in WhatsApp — and neither one is retroactive, so anything read before you flip the switch stays as it was. Start with DNS filtering if you only have ten minutes; it covers the widest surface area of anything in this guide.

More Android & Device Guides

• Android Touch Screen Not Responding: How I Fixed It
• Android Phone Not Charging: 5 Methods That Worked
• How to Connect AirPods to Mac, PS5, Xbox & AirFly
• How to Fix, Reset, and Charge AirPods
• 5 MacBook Mistakes I Avoid to Keep My Mac Running for Years

This guide reflects Google’s, Cloudflare’s, and WhatsApp’s published support documentation as of publication, along with hands-on testing of Private DNS, Digital Wellbeing, and BlockSite on a current Android device. It isn’t official guidance from any of those companies — for account-specific or enterprise deployment questions, confirm directly with the relevant support team.