Anonymous Browsing
How to Block VPNs and Proxies on Computers and Smartphones
Block common content filtering bypass methods like VPNs and Proxies on smartphones and computers.
If you're trying to manage your own devices as an adult, chances are that you may have considered how to block VPNs or proxies that could be used to bypass restrictions you've set.
It's important to realize that you may need to use multiple approaches to fully restrict VPNs, since there are many different ways that they could be enabled:
- Many popular VPNs can be downloaded online for a computer or installed from an app store for a smartphone.
- Some browsers have "privacy-enhancing" VPN plugins or features that could unintentionally bypass content filtering.
- Some websites act as a browser proxy and should be blocked directly.
Prevent VPNs From Being Installed by Apps
One of the easiest places to start is to actively prevent VPN apps from being installed on your devices. On some devices like the iPhone and iPad, it's possible to fully restrict the ability to add new VPN profiles, whether from a VPN app or manually configured.
For example, on smartphones, a VPN app will request permission to add the VPN configuration needed to connect, but you can block this permission entirely:
By taking the proper steps to block VPNs on iPhone , you can fully restrict new VPN configurations from being added by apps or manually in system settings:
You can use an Apple Config Generator to configure this kind of restriction on an iPhone. On Android smartphones, it's possible to use device management to restrict new VPNs.
Restrict Browser Features and Extensions
Another potential way that VPNs can be enabled is by using browser extensions or privacy features built in to some web browsers.
They can be directly disabled in such a way that a user cannot re-enable them without outside help.
Step 1: Only Allow Approved Extensions
You can comprehensively block browser extensions such that only extensions that you've approved (like a password manager) can be added to your web browser.
This comprehensively blocks all VPN and proxy browser extensions that can be downloaded from the Chrome Web Store, Microsoft Store, or Firefox add-on store.
On Mac computers, you can use an Apple Config Generator to control which extensions are allowed in browsers. For Windows computers, you can use a combination of other techniques to acheive this. Learn more in our browser extension blocking guide .
Step 2: Control Browser Features
Web browsers may provide access to features that conflict with content filtering:
- Customizable private DNS settings that can override your computer's DNS (which is ideally pointed at a content filter)
- Private windows that access the Tor network for anonymous browsing
- VPN that is embedded in the browser
If you want to block tor and these other conflicting browser privacy features, you'll need to restrict these browser features.
If you have a Mac computer, you can use Apple Config Files to fully prevent VPN or privacy features from interfering with your content filter. Tech Lockdown allows you to easily apply multiple restrictions across different browsers with a single toggle:
But many browsers have other features that could interfere with content filtering, so it's important to consider these additional loopholes and disable private browsing features. We have several recommendations in our dedicated guide for disabling incognito mode if you'd like to learn more about approaches you can use on Windows computers.
Step 3: Limit which Browsers can be installed
Once you've locked down the web browsers you want to use to restrict conflicting features, you'll want to prevent other web browsers from being installed.
You can reference our app blocking guide to learn how to do this.
Block VPN Services and Proxy Websites
For more robust VPN-blocking, you should also consider directly blocking websites that could be used to browse online anonymously. These websites might be used to download VPN services or to access an embedded version within a website.
Use URL Filtering to block specific search terms or keywords
You can prevent discovery of VPN and proxy websites by blocking search terms or websites that use related keywords in the URL.
For example, you should restrict the keywords:
vpn proxy tor dns
Depending on the device you are using, you can follow our guide to block websites based on keywords .
Block VPN and Proxy Websites based on DNS Categories
The most effective option for all kinds of devices is to prevent VPN or proxy services from working at all by blocking the underlying services they need to work completely. The idea is that even if a VPN is enabled on your device, it can't function correctly because it will not be able to establish a connection properly.
If you're using a Content Policy on your devices, these are the content categories we recommend adding to a block rule for the best results:
- Anonymizer: Most websites that host VPN downloads or domains used by VPN services fall under this category.
- New Domains and Newly Seen Domains: Some proxies rely on randomly-generated domain names, so it's difficult to categorize these new domains quickly. Blocking domains that haven't had the chance to be properly categorized is a great way to prevent this.
Frequently Asked Questions
What's the most effective way to fully block VPNs on iPhone?
See our dedicated guide for blocking VPNs on iPhone for more information.
Can VPNs be blocked on my home network?
In most cases, you can block required VPN services on your router by connecting it to a Content Policy .
Can VPN Programs be blocked on Windows?
Yes, you can block programs on a Windows computer in a few different ways.
Can VPN Applications be blocked on Mac computers?
Yes, you can block apps on a Mac computer in a few different ways.
Can a VPN Be Used With a Content Filter?
In some cases, it may be possible to use a VPN while content filtering, although this depends on which content filter and VPN you're trying to use.
Some VPNs force strict controls over your device's network settings while enabled, and chances are, these kinds of VPNs will not be compatible with a content filter.
Since this goes into more details than we can cover in this article, I'd strongly recommend reading our dedicated guide for bypassing Geo-restrictions alongside a Content Filter .