How to Block Websites on Router: Step Guide
Blocking sites on the router covers every device at once. Here are three ways to do it and the limits of each.
Blocking a website on your router stops it on every device connected to your WiFi, without installing anything on phones or laptops. You can use the router own URL filter, its parental controls, or a filtering DNS service.
Blocking a website on your router stops it on every device connected to your WiFi, without installing anything on phones or laptops. You can use the router’s own URL filter, its parental controls, or a filtering DNS service.
Here is how each method works and which one to choose.
Three ways to block websites
| Method | Best for | Limits |
|---|---|---|
| Router URL or keyword filter | A few specific sites | HTTPS and apps may bypass it |
| Parental controls | Kids profiles and categories | Features vary by brand |
| DNS filtering | Whole categories like adult or malware | Devices with custom DNS can bypass it |
The HTTPS row is the limit I explain first when someone asks why a block did not work.
Block a site with the router filter
- Log in to your router admin page. Find the address with our Router IP Finder, or try 192.168.1.1 or 192.168.0.1.
- Open Access Control, Website Blocking, URL Filter or Block Sites.
- Add the domain, for example example.com, or a keyword.
- Apply to all devices or chosen ones, and set a schedule if you want.
- Save, then restart the browser to test.
The menu-name hunt is the part I budget extra time for on a first setup.
Where to find it by brand
| Brand | Menu |
|---|---|
| TP-Link | Parental Controls or Access Control, Website Blocking |
| Netgear | Content Filtering, Block Sites |
| ASUS | Firewall, URL Filter |
| Linksys | Parental Controls, Block specific sites |
| D-Link | Advanced, Website Filter |
The brand-menu row is the one I point at first when someone cannot find the setting.
Block categories with DNS
Set your router DNS to a filtering service such as Cloudflare for Families (1.1.1.3) or OpenDNS FamilyShield (208.67.222.123). See how to change DNS on your router.
For me, the category block is the option I pick first for a whole-house setup.
Why blocks sometimes fail
- Mobile data and VPNs skip the router.
- Browsers with secure DNS can bypass DNS filters. Turn it off on kids devices.
- Apps may use different domains than the website.
- Cached pages may still show until the browser restarts.
The VPN bypass is the gap I warn about first when a block seems to fail.
Router blocking vs apps on each device
Blocking at the router covers every device at once, including smart TVs and consoles that can’t run filtering apps. But it has limits: it’s usually all or nothing per device, and clever users can get around it with mobile data or a VPN.
Many families combine both: router or DNS filtering for the whole house, plus the built-in parental controls on kids’ phones (Screen Time on iPhone, Family Link on Android). Both layers together is the setup I fall back on in most homes.
Use a family-safe DNS
Changing your router’s DNS to a filtering service blocks adult and malicious sites for every device without adding rules one by one.
- Cloudflare for Families: 1.1.1.3 and 1.0.0.3 block malware and adult content.
- OpenDNS FamilyShield: 208.67.222.123 and 208.67.220.123.
- CleanBrowsing Family: 185.228.168.168 and 185.228.169.168.
Enter the two addresses in your router’s WAN or DNS settings, save, and restart devices. See our change DNS on router guide for brand-specific steps. The restart-after-save step is the one I never skip when I set a family DNS.
Blocking on specific devices only
Sometimes you only want to block sites on one device, like a child’s tablet, without affecting everyone. Options:
- Use your router’s per-device or per-profile filters, if available.
- Use Screen Time (iPhone, iPad, Mac) or Family Link (Android, Chromebook) on that device.
- On Windows, Microsoft Family Safety filters websites in Edge.
- Set a family DNS on that device only, in its network settings.
The per-device route is the one I suggest first when only a child’s tablet needs blocking.
What router blocking can’t do
- It can’t block individual pages within a site, only whole domains.
- It can’t see inside apps that use their own servers or encrypted DNS.
- It doesn’t apply when devices use mobile data.
- It can be bypassed with a VPN unless you also block VPN apps.
Knowing these limits helps you combine methods instead of relying on one. Knowing the limits first is the habit I keep before I promise any block will hold.
Block a site on just one Windows PC
- Open Notepad as administrator.
- Open C:WindowsSystem32driversetchosts.
- Add a line: 0.0.0.0 example.com (and another for www.example.com).
- Save and restart the browser.
It’s a quick fix for one computer, but easy for anyone with admin rights to undo. The hosts-file trick is the one I reach for when only a single PC needs blocking.
