App & Website Filtering

How to Force Google Safe Search

Learn how to Force Google Safe Search on your network and devices.

Tech Lockdown Team

Updated July 15, 2025

One of the most important features for browsing the internet is SafeSearch, especially if you are focused on self-control. For many of us, we want to filter the search results page to exclude explicit results, especially image and videos. However, making sure that it is difficult (or outright impossible) for the search results filter to be turned off can be challenging, but it can be done. In this guide, we'll walk you the best ways to force Google SafeSearch.

We recommend combining multiple SafeSearch enforcement techniques together to ensure reliable enforcement.

The Google Search Engine has the most reliable and easy to enforce SafeSearch feature, but other search providers also provide SafeSearch features as well.

We will focus on two areas in this guide:

Enforcing SafeSearch so that it is locked on
Restricting access to Search Engines that don't have a SafeSearch feature

Choosing an Approach For Enforcing SafeSearch

On Windows and Mac computers, the Google Chrome browser can be configured with a policy that protects settings like SafeSearch. On iOS devices, the Safari browser can be configured to enforce SafeSearch.

For specific instructions about how to enforce SafeSearch for each device type, jump straight to the correct section here:

Enforce SafeSearch on All Devices with a DNS Content Policy

A universal way to automatically toggle on Google SafeSearch on all types of devices is using a DNS Filtering service, specifically DNS filtering services that specialize in blocking adult content , since these are likely to support enforcing SafeSearch. Once you've identified a service, these are the general steps:

1). Enable SafeSearch for Supported Search Engines

Configure the content filtering policy to enable SafeSearch and apply it to Search Engines that support SafeSearch.

For example, using the Tech Lockdown Content Policy , we'll create a new SafeSearch rule and adjust the schedule so that it's always on:

2). Connect devices to the DNS Policy

You can connect your home router or configure specific devices to point to this DNS Content Policy .

Tech Lockdown provides two types of ways to connect to DNS filtering:

Configuring the DNS settings on the device to point to the filter
Using an app, which adds a VPN connection that points to the filter

To ensure that DNS SafeSearch enforcement continues to work, you have to protect that connection so that it is not intentionally or accidentally bypassed. Tech Lockdown members get access to several powerful bypass prevention tools. For example, our VPN enforcer for iOS .

Enforce SafeSearch on iPhone and iPad

In addition to connecting your iPhone to a DNS Content policy to enforce SafeSearch, there are a few other methods that adults can consider.

Reliably Protect SafeSearch Settings with Supervised Mode

The most reliable way to turn on SafeSearch and to prevent an iPhone or iPad user from turning off this mode is to enable supervised mode on the iOS device. This allows you to protect certain iPhone settings , like SafeSearch.

First, you need to enable supervised mode on the iOS device. Supervised mode unlocks powerful features on your iPhone that are especially helpful if you're an adult managing your own restrictions. Once this mode is enabled on the device, you can easily install config files that enforce settings in a way that can't be overridden.

Config Files need to be configured and created with an Apple Config Generator . To generate a config file that enables SafeSearch, make sure that Apple's adult content filter is enabled.

As an example, here's what it looks like when using Tech Lockdown's Config Generator:

Supervised Mode is required to properly enable and enforce Config Files.

Optionally, Force SafeSearch on Safari with Screen Time

Screen Time can be used to force Apple's built-in content filter on iPhone devices. This can be fairly easily disabled if you know what you're doing, so consider supervised mode for a more enforceable alternative.

Go to Settings > Screen Time and make sure Content & Privacy Restrictions are enabled.

Go to App Store, Media, Web, & Games.

Under Web Content, make sure Limit Adult Websites is enabled.

While this is a solid option, I'd recommend using supervised mode instead.

Enforce SafeSearch on Mac

In addition to connecting your Mac computer to a DNS Content policy to enforce SafeSearch, there are a few other methods that adults can consider.

Reliably Enforce Browser Restrictions with Config Files

Config Files can be used to reliably enforce settings across multiple browsers at once. These restrictions work on the browser level and can't be undone by the user; SafeSearch is completely enforced and can't be overridden.

Similar to how Google's SafeSearch page will display a message when SafeSearch is enforced by a Content Policy, you'll see a message like this:

Config Files will need to be customized with an Apple Config Generator to enforce SafeSearch.

If done correctly, you'll see a message saying "Your browser is managed by your organization" when you go into Chrome's settings panel.

Once a browser setting is protected, it won't be possible to override it by changing the setting in the browser interface.

Use the Terminal Application

Some browsers let you manually set SafeSearch through the Terminal application. This method works alongside the DNS-enforced SafeSearch.

Exclude Bing if you use Copilot

Entering the commands related to Microsoft/Bing search will disable Bing Copilot. Omit the associated commands/hosts file entries if you do not want them disabled. Use the Content Policy to schedule when Bing SafeSearch is enabled instead.

Do the following for each command below:

Copy/paste each command into terminal

Enter your Mac's password, if prompted

Press the enter (return) key

Google SafeSearch if Google chrome is installed:

defaults write com.google.Chrome.plist GoogleSafeSearch -int 1

Bing SafeSearch if Microsoft edge is installed:

defaults write com.microsoft.edge.plist ForceBingSafeSearch -int 2

Similar to a Config File, you should see a message like this when you open your browser's settings page:

Configure your computer's Hosts File

The Hosts file is a special file on your Windows or Mac computer that allows you to override DNS settings for specific website domains. You can use it to force Google SafeSearch at the most fundamental level on your system. As a bonus, this is the method Google itself recommends .

Here are the options you'll want to copy to your computer's Hosts file:

# Google SafeSearch
216.239.38.120 google.com
216.239.38.120 www.google.com
216.239.38.120 google.co.uk
216.239.38.120 www.google.co.uk

# Bing SafeSearch
204.79.197.220 www.bing.com
204.79.197.220 bing.com

# DuckDuckGo SafeSearch
52.149.247.1 duckduckgo.com

# Yahoo SafeSearch
98.137.11.163 search.yahoo.com
98.137.11.163 www.search.yahoo.com

# Yandex SafeSearch
77.88.55.80 yandex.com
77.88.55.80 www.yandex.com

To get started, you'll need to know how to access and edit your hosts file. See our dedicated guide for blocking websites with the Hosts file for more information about how to do this.

Enforce SafeSearch on Windows

In addition to connecting your Windows computer to a DNS Content policy to enforce SafeSearch, there are a few other methods that adults can consider.

Use Command Prompt to Force SafeSearch on Browsers

Some browsers let you manually set SafeSearch through the Terminal application. This method works alongside the DNS-enforced SafeSearch.

Exclude Bing if you use Copilot

Do the following for each command below:

Open Command Prompt as an Administrator

Copy/paste each command into Command Prompt

Press the enter (return) key

If you have Google Chrome installed:

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome" /v ForceGoogleSafeSearch /t REG_DWORD /d 1 /f

If you have Microsoft Edge installed:

reg add HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge /v ForceBingSafeSearch /t REG_DWORD /d 2 /f

If done correctly, you'll see a message saying "Your browser is managed by your organization" when you go into Chrome's settings panel.

Once a browser setting is protected, it won't be possible to override it by changing the setting in the browser interface.

Configure your computer's Hosts File

Here are the options you'll want to copy to your computer's Hosts file:

# Google SafeSearch
216.239.38.120 google.com
216.239.38.120 www.google.com
216.239.38.120 google.co.uk
216.239.38.120 www.google.co.uk

# Bing SafeSearch
204.79.197.220 www.bing.com
204.79.197.220 bing.com

# DuckDuckGo SafeSearch
52.149.247.1 duckduckgo.com

# Yahoo SafeSearch
98.137.11.163 search.yahoo.com
98.137.11.163 www.search.yahoo.com

# Yandex SafeSearch
77.88.55.80 yandex.com
77.88.55.80 www.yandex.com

To get started, you'll need to know how to access and edit your hosts file. See our dedicated guide for blocking websites with the Hosts file for more information about how to do this.

Go Further By Blocking Non-SafeSearch Browsers

After you've enforced SafeSearch, you'll likely want to ensure that SafeSearch cannot be bypassed by using a search engine that doesn't have the SafeSearch feature.

These are the most well-known Search Engines with SafeSearch features:

Google Search
Bing Search
DuckDuckGo
Brave search
Yahoo

Combining DNS-based SafeSearch Enforcement with Allow and Block rules

The most comprehensive approach to restricting search engines that aren't on your approved list is using the DNS-based approach we detailed earlier in this guide.

Here are the steps for restricting access to search engines without a SafeSearch feature using Tech Lockdown's DNS Content Policy

1). Enable SafeSearch for the Search Engines category

Make sure you have a SafeSearch rule created with the Search Engines category selected

2). Allow specific Search Engines

Create a new Allow rule below this that allows specific Search Engine apps:

3). Block the Search Engines category

Finally, create a new Block rule below this that blocks the Search Engines category.

The final result should look like this:

Note: You must order your rules this way for this to work properly.

Configure your computer's Hosts File

Here are the options you'll want to copy to your computer's Hosts file:

0.0.0.0 a.searx.space
0.0.0.0 beezboo.com
0.0.0.0 boomle.com
0.0.0.0 darmarit.org
0.0.0.0 dogpile.com
0.0.0.0 dynabyte.ca
0.0.0.0 ecosia.org
0.0.0.0 engo.mint.lgbt
0.0.0.0 eulie.de
0.0.0.0 fireball.de
0.0.0.0 gibiru.com
0.0.0.0 gigablast.com
0.0.0.0 go.mail.ru
0.0.0.0 haku.ahmia.fi
0.0.0.0 haku.lelux.fi
0.0.0.0 hmsearx.h0meserver.com
0.0.0.0 jsearch.pw
0.0.0.0 lite.qwant.com
0.0.0.0 lukol.com
0.0.0.0 metacrawler.com
0.0.0.0 metager3.de
0.0.0.0 metager.de
0.0.0.0 metager.org
0.0.0.0 metasearch.nl
0.0.0.0 mijisou.com
0.0.0.0 mojeek.com
0.0.0.0 neeva.com
0.0.0.0 nibblehole.com
0.0.0.0 nigma.eu
0.0.0.0 nova.rambler.ru
0.0.0.0 null.media
0.0.0.0 openworlds.info
0.0.0.0 oscobo.com
0.0.0.0 peekier.com
0.0.0.0 ransack.i2p
0.0.0.0 recherche.aol.fr
0.0.0.0 recherche.catmargue.org
0.0.0.0 results.excite.com
0.0.0.0 roteserver.de
0.0.0.0 search.0xcb.dev
0.0.0.0 search.activemail.de
0.0.0.0 search.anonymize.com
0.0.0.0 search.aol.ca
0.0.0.0 search.aol.co.uk
0.0.0.0 search.aol.com
0.0.0.0 search.azkware.net
0.0.0.0 search.biboumail.fr
0.0.0.0 search.bluelock.org
0.0.0.0 search.brave.com
0.0.0.0 search.disroot.org
0.0.0.0 search.ethibox.fr
0.0.0.0 search.gougeul.org
0.0.0.0 search.jigsaw-security.com
0.0.0.0 search.jpope.org
0.0.0.0 search.lgbtq.cool
0.0.0.0 search.mdosch.de
0.0.0.0 search.modalogi.com
0.0.0.0 search.nebulacentre.net
0.0.0.0 search.opentunisia.org
0.0.0.0 search.paulla.asso.fr
0.0.0.0 search.privacytools.io
0.0.0.0 search.seds.nl
0.0.0.0 search.snopyta.org
0.0.0.0 search.spaeth.me
0.0.0.0 search.st8.at
0.0.0.0 search.stinpriza.org
0.0.0.0 search.yahoo.com
0.0.0.0 searchencrypt.com
0.0.0.0 searchx.mobi
0.0.0.0 searx.32bitflo.at
0.0.0.0 searx.alec.ninja
0.0.0.0 searx.bar
0.0.0.0 searx.bbaovanc.com
0.0.0.0 searx.be
0.0.0.0 searx.canox.net
0.0.0.0 searx.ch
0.0.0.0 searx.com.au
0.0.0.0 searx.decatec.de
0.0.0.0 searx.deepak.pro
0.0.0.0 searx.devol.it
0.0.0.0 searx.dojocasts.com
0.0.0.0 searx.dresden.network
0.0.0.0 searx.elukerio.org
0.0.0.0 searx.everdot.org
0.0.0.0 searx.feneas.org
0.0.0.0 searx.fmac.xyz
0.0.0.0 searx.foo.li
0.0.0.0 searx.forked.io
0.0.0.0 searx.fossencdi.org
0.0.0.0 searx.gnu.style
0.0.0.0 searx.gotrust.de
0.0.0.0 searx.guillaumea.fr
0.0.0.0 searx.handskemager.xyz
0.0.0.0 searx.hardwired.link
0.0.0.0 searx.info
0.0.0.0 searx.ir
0.0.0.0 searx.kvch.me
0.0.0.0 searx.lambda.li
0.0.0.0 searx.laquadrature.net
0.0.0.0 searx.lavatech.top
0.0.0.0 searx.lelux.fi
0.0.0.0 searx.libmail.eu
0.0.0.0 searx.likkle.monster
0.0.0.0 searx.linux.pizza
0.0.0.0 searx.lnode.net
0.0.0.0 searx.louifox.house
0.0.0.0 searx.lwhr.xyz
0.0.0.0 searx.lynnesbian.space
0.0.0.0 searx.mastodontech.de
0.0.0.0 searx.maxxblow.de
0.0.0.0 searx.monicz.pl
0.0.0.0 searx.mxchange.org
0.0.0.0 searx.nakhan.net
0.0.0.0 searx.netzspielplatz.de
0.0.0.0 searx.nevrlands.de
0.0.0.0 searx.nightmare.life
0.0.0.0 searx.ninja
0.0.0.0 searx.nixnet.services
0.0.0.0 searx.nulltime.net
0.0.0.0 searx.olymp.to
0.0.0.0 searx.openhoofd.nl
0.0.0.0 searx.openpandora.org
0.0.0.0 searx.operationtulip.com
0.0.0.0 searx.org
0.0.0.0 searx.ouahpiti.info
0.0.0.0 searx.pofilo.fr
0.0.0.0 searx.privatenet.cf
0.0.0.0 searx.prvcy.eu
0.0.0.0 searx.pwoss.org
0.0.0.0 searx.rasp.fr
0.0.0.0 searx.ro
0.0.0.0 searx.ru
0.0.0.0 searx.run
0.0.0.0 searx.rxyz.rocks
0.0.0.0 searx.semipvt.com
0.0.0.0 searx.simonoener.com
0.0.0.0 searx.slash-dev.de
0.0.0.0 searx.solusar.de
0.0.0.0 searx.sp-codes.de
0.0.0.0 searx.sulu.me
0.0.0.0 searx.sunless.cloud
0.0.0.0 searx.thegreenwebfoundation.org
0.0.0.0 searx.tuxcloud.net
0.0.0.0 searx.tyil.nl
0.0.0.0 searx.vitanetworks.link
0.0.0.0 searx.wegeeks.win
0.0.0.0 searx.win
0.0.0.0 searx.xyz
0.0.0.0 searx.zapashcanon.fr
0.0.0.0 searx.zdechov.net
0.0.0.0 searxzh.cn
0.0.0.0 seeks.hsbp.org
0.0.0.0 skyn3t.in
0.0.0.0 spot.ecloud.global
0.0.0.0 startpage.com
0.0.0.0 suche.aol.de
0.0.0.0 suche.dasnetzundich.de
0.0.0.0 suche.mexmail.de
0.0.0.0 suche.uferwerk.org
0.0.0.0 suchfeuer.de
0.0.0.0 timdor.noip.me
0.0.0.0 tromland.org
0.0.0.0 trovu.komun.org
0.0.0.0 unmonito.red
0.0.0.0 webcrawler.com
0.0.0.0 websearch.excite.co.jp
0.0.0.0 wtf.roflcopter.fr
0.0.0.0 www.finden.tk
0.0.0.0 www.gruble.de
0.0.0.0 www.perfectpixel.de
0.0.0.0 www.searxs.eu
0.0.0.0 yep.com
0.0.0.0 yippy.com
0.0.0.0 you.com
0.0.0.0 zoek.anchel.nl

To get started, you'll need to know how to access and edit your hosts file. See our dedicated guide for blocking websites with the Hosts file for more information about how to do this.

Using Other Website Blocking Techniques

There are many effective ways to block websites on smartphones and computers. If you're looking for additional ways to block search engines without a SafeSearch feature, reference our website blocking guide for other ideas.

Frequently Asked Questions

How to Test if Google SafeSearch is Locked on

Use these techniques to test if Google SafeSearch is enforced properly on computers and smartphones as you're implementing our suggestions.

Each platform and device type has its own menu navigation for turning on Safe Search. With this guide, you won't need to manually turn on Google SafeSearch since these techniques do that automatically. You'll use these steps to double-check that it is locked on.

When testing, open the Google Chrome Incognito Window (if it is available) or a private browsing window in other web browsers. This helps you clear the DNS cache so that you can see changes more quickly. You can also restart your browser.

Navigate to the Google SafeSearch page to check the status. You can enter this web address into your browser to go to the status page:

google.com/safesearch

If SafeSearch is enforced, you should see a message that says:

You can't change your SafeSearch setting right now because someone else, like a parent or administrator, controls settings on the network, browser, or device you're using.

If it is not enforced, you'll see the option to toggle between SafeSearch modes:

If you're using the Google app on your smartphone, you can tap your profile icon and find the SafeSearch settings from that menu:

I've tried enforcing SafeSearch, but Google's SafeSearch checker still says it's not enabled

If you've tried to enforce SafeSearch by using the Hosts file, it's strongly recommended that you clear both your browser and DNS caches. These can cause a temporary issue where SafeSearch isn't enabled until it's refreshed.

See our guide for blocking websites using the Hosts file to learn how to do this:

If you've enforced SafeSearch using either a Config File or Commands, you can usually apply these settings by quitting and restarting your browser. On Mac, make sure you fully quit the browser application to apply changes.

How to Force SafeSearch on other Search Providers

In addition to Google Search, several other search engines provide effective, safe search. Enforcement techniques are generally supported using the DNS-safesearch technique we detailed earlier, but some providers have other enforcement options. For example, some search engines provide a dedicated web address that has Safe Search locked on, like safe.duckduckgo.com.

Check out our other Safe Search guides for specific providers: