How to Lock SafeSearch on Google: Guide for Administrators & Parents

Download Article

Keep your searches safe and protected with this easy-to-use guide

Written by Darlene Antonelli, MA

Last Updated: April 21, 2025 Fact Checked

Download Article

• Using Family Link
|
• Using Google Workspace for Education
|
• Using a Chromebook (Workspace & Enterprise)
|
• Mapping Domains in Windows
|
• Mapping Domains in macOS
|
• Forcing SafeSearch on Your Network
|
• Tips

|Show more |Show less

SafeSearch blocks explicit images, videos, and websites from Google search on devices and networks you manage. If you are a parent or administrator, you can prevent users from disabling SafeSearch by locking it. Though users can get around the setting if they're determined enough, locking SafeSearch will keep most inappropriate content out of your users' search results. Here's how to lock SafeSearch on Chromebook, Windows, Mac, and Linux, and networks you manage at home, work, or school.

Quick Steps

1. Go to Family Link at https://g.co/YourFamily.
2. Select the family member.
3. Select Content restrictions.
4. Select Google Search.
5. Make sure Filter is on.

Steps

Method 1

Method 1 of 6:

Using Family Link

Download Article

1. 
   1
   Go to https://g.co/YourFamily. Use this method to lock SafeSearch if you manage a Family Group on Google.

   • You can also open the Family Link mobile app to follow these steps on your iPhone, iPad, or Android.
2. 
   2
   Select the family member. You'll see more options.

   • Click or tap Go to Family Link if prompted.
   Advertisement
3. 
   3
   Click or tap Content restrictions. It's centered on the page next to a filter icon.
4. 
   4
   Select Google Search. It's near the middle of the menu next to a colored "G" icon.
5. 
   5
   Make sure Filter is selected. Only the parent or guardian managing the family can change this; the child account or managed account is unable to change this and it's greyed out.
Advertisement

Method 2

Method 2 of 6:

Using Google Workspace for Education

Download Article

1. 1
   Sign into your Google Admin account at https://admin.google.com/. Use this method if you are an admin for a Google Workspace for Education.

   • Note that users in your organization who are under 18 already have SafeSearch locked as well as other restrictions, and you don't have to do anything.
2. 2
   Click ☰. This will open a menu.
3. 3
   Click Apps. It's a 3x3 grid icon.
4. 4
   Click Additional Google Services. You'll see a message at the top of the page.
5. 5
   Click Change. You can change the restrictions in the organization.
6. 6
   Select Settings for all organizational units and turn on everything. This changes the setting universally, so everyone in your organization has the same restrictions applied.
7. 7
   Click Save. It can take up to 48 hours for this change to take effect.
Advertisement

Method 3

Method 3 of 6:

Using a Chromebook (Workspace & Enterprise)

Download Article

1. 1
   Sign into your Google Admin account at https://admin.google.com/. Use this method if you manage Chromebooks, such as a teacher or organization with access to any of the following: Google Workspace, Chrome Browser Enterprise Support, Chrome Enterprise Upgrade, ChromeOS devices bundled with Chrome Enterprise Upgrade, and Cloud Identity.

   • Any restrictions you place on this Chromebook will not work if the user signs into the device with a different Gmail account.
2. 2
   Click ☰. This will open a menu.
3. 3
   Click Devices. It's next to an icon of a phone and laptop.
4. 4
   Click Chrome > Settings. The User & browser settings page will open.

   • If you have Chrome Enterprise, go to ☰ > Chrome browser > Settings instead.
5. 5
   Find the SafeSearch entry. It's sometimes hidden in the Content menu header.
6. 6
   Make sure SafeSearch is locked. For K-12 domains, the default is always "Always use SafeSearch for Google Web Search queries." For all other domains, this is set to "Do not enforce SafeSearch for Google Web Search queries."

   • If you need to, turn the lock on.
7. 7
   Click Save. Click Override if you're editing a group within the organization, or click Inherit to reset the default settings.
Advertisement

Method 4

Method 4 of 6:

Mapping Domains in Windows

Download Article

1. 
   1
   Open Notepad as an administrator. Press the Win key and type in Notepad, then right-click the first search result and select Run as administrator to open the app.
2. 
   2
   Open your hosts file. Press Ctrl + O to open a file, then find your hosts file.

   • It's usually located here: C:\Windows\System32\drivers\etc\hosts
3. 
   3
   Open Command Prompt. Press the Win key and type in command prompt, and click the first search result to open the app.
4. 
   4
   Type cmd and press ↵ Enter. This ensures that no previous coding in Command Prompt affects the current reading.
5. 
   5
   Type ping forcesafesearch.google.com and press ↵ Enter. Take note of the IP address.

   • The IP address is written after "forcesafesearch.google.com."
6. 
   6
   Enter this IP address in the hosts file in Notepad. You'll need to enter it in a specific order.

   • For example, write 216.239.38.120 www.google.com #forcesafesearch.
7. 
   7
   Save the hosts file. Go to File > Save or press Ctrl + S.

   • This will prevent any Windows computer on your network, using any browser, from turning off SafeSearch.
Advertisement

Method 5

Method 5 of 6:

Mapping Domains in macOS

Download Article

1. 
   1
   Open Terminal. You can search for Terminal using LaunchPad or find it in the Utilities section of Finder.
2. 
   2
   Type ping forcesafesearch.google.com and press ↵ Enter. Take note of the IP address.

   • The IP address is written after "forcesafesearch.google.com."
3. 
   3
   Enter sudo nano /private/etc/hosts and press ⏎ Return. This opens the host file.
4. 
   4
   Enter the IP address in the hosts file. You'll need to enter it in a specific order.

   • For example, write 216.239.38.120 www.google.com #forcesafesearch.
5. 
   5
   Press Control+O and ⏎ Return. This saves your changes and closes the window.
Advertisement

Method 6

Method 6 of 6:

Forcing SafeSearch on Your Network

Download Article

1. 
   1
   Update your DNS configuration. A personal gateway, for example, would not be able to work this way. You must be the manager of a network at a school or workplace.
2. 
   2
   Set the DNS entry for google.com to a CNAME for forcesafesearch.google.com. This requires a bit more technical ability.
Advertisement

Expert Q&A

Search

Add New Question

Ask a Question

200 characters left

Include your email address to get a message when this question is answered.

Submit

Advertisement

Tips

• Even if SafeSearch is locked, it is still possible to bypass the setting by using a VPN (if blocked on the network) or a different Google account (if blocked at the account level).
  Thanks

  Helpful 0 Not Helpful 0

Submit a Tip

All tip submissions are carefully reviewed before being published

Name

Please provide your name and last initial

Submit

Thanks for submitting a tip for review!

Advertisement