How to block websites on iPhone without extra apps?

How To
1

I want to block access to certain websites on my child’s iPhone without using any third-party apps or paid tools. Are there built-in iOS settings that allow me to restrict specific sites? I’ve heard about Screen Time and Safari controls, but I’m not sure how to properly set them up or whether they’re effective enough for this purpose.

2

Hey DerekChandler, you are in luck, iOS actually has pretty solid built-ins for this, no extra downloads needed. Here is a quick run-through:

Turn on Screen Time
• Settings → Screen Time → Turn On Screen Time → choose “This is My Child’s iPhone.”
• Create a Screen Time passcode (different from the device passcode), so your kid cannot just turn it off.

Set up Website Restrictions
• Still in Screen Time → Content & Privacy Restrictions → toggle it on.
• Tap Content Restrictions → Web Content.

  • You can choose “Limit Adult Websites,” which automatically blocks known adult sites, plus you can manually add URLs under “Never Allow.”
  • Or pick “Allowed Websites Only” if you want a super-tight whitelist (breaks all other sites).

Lock down alternative browsers
• If your kid tries Chrome or Firefox, go back to Content & Privacy Restrictions → Allowed Apps and switch off Safari (and any other browser). They won’t have a way to browse.

Pro tips:
• Always set the Screen Time passcode to something your child does not know.
• After setup, test it yourself by trying to visit a blocked site in Safari, confirm it actually shows the blocked screen.
• If you pick “Limit Adult Websites,” still manually add specific sites you want blocked under Never Allow.
• Periodically review the Screen Time reports to see what sites are being visited.

3

Okay so I went through this exact process last summer when I caught my 11-year-old watching stuff that had no business being on a kid’s screen. Set up Screen Time that same night and I want to share what actually worked for us vs what I thought would work.

What I did step by step:

  1. Went to Settings > Screen Time > This is My Child’s iPhone
  2. Set a 6-digit Screen Time passcode, totally different from the phone’s unlock code
  3. Turned on Content & Privacy Restrictions
  4. Tapped Content Restrictions > Web Content > Limit Adult Websites
  5. Manually added about 15 sites I specifically wanted blocked under the Never Allow section
  6. Went back and disabled every browser except Safari under Allowed Apps
  7. Set App Store installs to require my Apple ID password so she could not download Chrome

What actually surprised me was how good the automatic filter is. I thought I would have to manually block everything but the built-in list catches a huge amount. I mostly just added a few specific social platforms and some gaming-related forums that were not on Apple’s list.

The part that tripped me up: YouTube. The website filter does NOT stop YouTube through the app. My daughter could not open a sketchy site in Safari but she could still find inappropriate content inside YouTube itself. Had to go to Allowed Apps and remove the regular YouTube app entirely, then we set her up with YouTube Kids instead.

One thing I tell every parent who asks me about this, go test it yourself after setup. Sit down with the phone and actually try to visit a blocked site. See what happens. Do not just assume it worked because you pressed the right buttons.

It is not a perfect system but honestly? For an 11-year-old it does the job without paying for anything extra.

4

Software engineer here who has also set this up for two kids. Let me break down how Screen Time actually works under the hood because understanding the architecture helps you configure it better.

How the filtering actually works:

  1. Safari uses a content classification system tied to Apple’s servers
  2. When your child tries to load a URL, Safari checks it against Apple’s categorized domain database
  3. If the domain is in a blocked category OR in your Never Allow list, Safari intercepts the request before it even loads
  4. This happens at the DNS level within Safari’s sandbox, it is not a VPN or network proxy

What this means practically:

  • The filter is per-app. It only affects traffic routed through Safari and WebKit-based browsers
  • Third-party browsers like Chrome use their own rendering engine on iOS but still go through WebKit, so restrictions technically apply there too, BUT only if those apps are installed and not blocked
  • In-app browsers (Twitter, Instagram, Reddit link previews) are a gray area. Some honor Screen Time restrictions, some open content in their own WebKit instance and bypass the content filter entirely

The technical gaps you should close:

  1. Disable the App Store or require Apple ID approval for installs, this prevents downloading browsers or VPN apps
  2. Go to Content & Privacy Restrictions > Allow Changes > VPN > Don’t Allow, this blocks VPN configuration
  3. Under Content Restrictions > Apps ,set the age rating to your child’s age. This removes apps from the home screen that do not meet the rating even if previously installed
  4. Check Mail and Podcasts too. Both can serve web content and both have varying levels of Screen Time compliance

One thing that surprises people: Screen Time restrictions survive a regular iOS update but get wiped by a factory reset. If you are using Family Sharing, you get a notification if someone tries to sign out of iCloud which is usually the first step before a reset. Enable that notification.

For a parent without a technical background this all sounds complex but the UI Apple built for it is actually quite straightforward. Just follow Krytexis’s steps above to get the basics in place and then come back to plug the specific gaps I mentioned.

5

Nobody has brought up Family Sharing yet and it is genuinely the piece that makes all of this manageable long term.

Here is the scenario: you spend 20 minutes setting up Screen Time perfectly on your kid’s iPhone. Three weeks later they ask you to allow a new educational site for a school project. Without Family Sharing, you have to physically grab their phone, enter the Screen Time passcode, navigate to the settings, add the site, and hand it back. Annoying but doable.

Now multiply that by every time they need a new site, every time you want to check what they have been looking at, every time you want to adjust their screen time limits. It gets old fast.

With Family Sharing set up, here is what changes:

  1. Go to Settings > Your Name > Family Sharing > Add Member > Create Child Account
  2. Once they are in your family group, go to YOUR Settings > Screen Time > tap their name
  3. From your phone you can now see their full usage report, every website visited, how long on each app, what they searched
  4. You can approve or deny Screen Time extension requests remotely (kids can tap “Ask For More Time” and a notification comes to your phone)
  5. You can change restrictions anytime from your phone without touching their device

The weekly summary email is also really useful. Every Monday I get a breakdown of my daughter’s top sites and apps from the previous week. It is not surveillance — it is more like a general health check. If I see something I do not recognize I can look into it then.

To set up Family Sharing: Settings > your Apple ID name at the top > Family Sharing > Add Member. You will need their Apple ID or create one for them if they do not have one. Kids under 13 need a parent to create a child Apple ID.

This whole setup took me maybe 30 minutes once and now managing their restrictions is a 2-minute thing from my couch.

6

Jumping in with some specifics on the URL blocking part because there are a few non-obvious things that will trip you up if you do not know them.

When you add a site to the Never Allow list, here is what you should actually type:

Now here is where it gets interesting. Some sites serve content from multiple domains or subdomains. Blocking reddit.com might not block i.redd.it which is where Reddit hosts images. So a clever kid could potentially still see image content even with the main domain blocked. For sites like this you need to add each subdomain separately.

Common ones worth knowing:

Testing your blocks properly:

  1. Add the domain to Never Allow
  2. Open Safari on the child’s device
  3. Try the exact URL you blocked, should show the blocked screen
  4. Also try www. version and https:// version
  5. Try a direct link to a piece of content on that site, not just the homepage

One more thing, the Limit Adult Websites automatic filter is updated by Apple periodically but it is not real-time. New adult sites that launched recently may not be in the database yet. This is why the manual Never Allow list matters for anything specific you want blocked that Apple has not categorized yet.

If you are blocking something that keeps slipping through despite being in your Never Allow list, try adding both the domain and the www subdomain. Some edge cases require both.

7

I have set this up three times now across two kids and one nephew and let me save you from every mistake I made because I made all of them.

Mistake 1: Used the same passcode as the phone unlock code.
My son figured out the Screen Time passcode within a day because I was not thinking. He watched me enter it once. Use something completely different that you never type in front of them. I now use a PIN I have only in my password manager.

Mistake 2: Did not disable other browsers before locking Safari.
I set up all the Safari restrictions perfectly. Proud of myself. My son just opened Chrome which was already installed and browsed freely. Always check Allowed Apps and toggle off any browser that is not Safari. Then delete the app too for good measure.

Mistake 3: Forgot to block app installs.
Blocked the browsers that were installed but forgot the App Store was wide open. He just downloaded a new browser. Go to Content & Privacy Restrictions > iTunes & App Store Purchases > Installing Apps > Don’t Allow.

Mistake 4: Did not test after setup.
Spent 25 minutes configuring, felt confident, walked away. Three days later found out Never Allow was not working because I had typed the URL with a typo. Always sit down with the device after setup and actually try to visit a blocked site from Safari. If you do not see the block screen something is wrong.

Mistake 5: Used a Screen Time passcode I then forgot.
Apple’s recovery process via Apple ID has a delay built in it can take up to a week to reset a forgotten Screen Time passcode. I had to wait 4 days once. Write the passcode somewhere safe or store it in a password manager.

Seriously, take 10 minutes after setup to run through a quick test of everything. It is worth it.

8

This is a great thread. Something I want to add because parents often ask whether to use Screen Time OR block things at the router level, the answer is you ideally do both, but for different reasons.

What Screen Time does that router blocking cannot:

  1. Follows the device everywhere, to school, friends’ houses, on cellular data, anywhere
  2. Applies regardless of what network the phone is on
  3. Is device-specific so you can have different rules for different kids
  4. Integrates with Apple’s content classification database which is actually pretty comprehensive

What router-level blocking does that Screen Time cannot:

  1. Covers ALL devices on your home network, laptops, gaming consoles, smart TVs, tablets, everything
  2. Works even if the child resets their phone (Screen Time settings wipe on factory reset)
  3. Can filter DNS-level traffic which is harder to bypass than browser-level filtering
  4. Does not require touching each device individually

My personal setup for context: I use Screen Time on both my kids’ iPhones for anywhere-filtering, and I also have Circle (it is a router add-on) for home network filtering. Circle costs money though, so if budget is the concern, most modern routers have built-in parental controls that are free look in your router admin panel under Parental Controls or Access Restrictions.

For the specific question DerekChandler asked just Screen Time is totally sufficient as a starting point. It is free, it works, and it covers the phone everywhere. Router-level is a nice extra layer if you have other devices at home you also want to manage.

Step by step for setting up Screen Time content filtering if you have not done it yet:

  1. Settings > Screen Time > Turn On Screen Time
  2. Select “This is My Child’s iPhone”
  3. Set a Screen Time passcode (different from device passcode)
  4. Content & Privacy Restrictions > toggle On
  5. Content Restrictions > Web Content > Limit Adult Websites
  6. Scroll down to Never Allow > Add Website > type specific URLs you want blocked
  7. Back out to Content & Privacy Restrictions > Allowed Apps > disable all browsers except Safari
  8. Content & Privacy Restrictions > iTunes & App Store Purchases > Installing Apps > Don’t Allow
9

Something that nobody has mentioned yet and it caught me off guard, Screen Time settings do NOT automatically sync across devices.

If your child has an iPhone and an iPad, you need to go through the entire setup on each device separately. They share an Apple ID, sure, but Screen Time configuration is per-device. I found this out after a solid week of thinking everything was locked down, then realized my daughter had been using the iPad which had zero restrictions on it.

Here is the practical checklist for families with multiple devices:

For each Apple device your child uses:

  1. Check which Apple ID is signed in (Settings > top of screen)
  2. If it is your child’s Apple ID, go through Screen Time setup on that device
  3. If it is a family shared iPad on your Apple ID, Screen Time works differently, you manage it from your own device’s Family Sharing settings

iPhones and iPads: each one needs Screen Time configured individually unless you are using Family Sharing to manage remotely.

Macs: Screen Time also exists on Mac (System Settings > Screen Time on macOS Ventura and later) and works similarly. If your kid uses a MacBook, set it up there too.

Apple Watch: does not have a browser, so less of a concern, but worth knowing there is a Screen Time option there too for app limits.

One scenario that plays out in a lot of homes: parents set up the iPhone perfectly but the kid quietly starts doing all their browsing on the family iPad or a sibling’s old device sitting in a drawer. Do a quick audit of every Apple device in the house that your child has physical access to. It takes an hour but it closes a gap that a lot of parents do not even think about.

10

Building on what NexuForge said earlier about how the filtering works technically, want to add a few things specifically about what a savvy kid might try and how Screen Time holds up.

Attempt 1: Using a VPN app to bypass the filter
A VPN routes all traffic through an encrypted tunnel, which can bypass DNS-level filtering. Screen Time has a direct counter to this.

How to block it:

  • Content & Privacy Restrictions > VPN > Don’t Allow
  • This prevents new VPN configurations from being added
  • Also check Settings > VPN and delete any existing VPN profiles

Attempt 2: Using Private Relay (if they have iCloud+)
iCloud Private Relay routes Safari traffic through Apple and Cloudflare servers. It does not bypass Screen Time content filtering but it does limit some reporting visibility.

How to handle it: If you are the family organizer, you can disable Private Relay for family members from Screen Time settings.

Attempt 3: Using a search engine’s cached version of a blocked page
Google cache and similar cached page services can sometimes load content from blocked domains.

How to handle it: Block specific cache URLs if this becomes an issue. Google’s cache URL format is webcache.googleusercontent.com — you can add that to Never Allow.

Attempt 4: Accessing content through a translator service
Google Translate and similar tools can act as a web proxy and load blocked pages through translate.google.com.

How to handle it: Add translate.google.com and similar translation services to Never Allow if this is a specific concern. A bit extreme for most families but worth knowing.

Attempt 5: Factory resetting the phone to wipe Screen Time
This wipes Screen Time settings. Counter this by enabling the Screen Time passcode requirement for device resets, and by using Family Sharing to get notified if someone signs out of iCloud.

11

Okay something this whole thread has not mentioned yet and it is arguably just as useful as the website blocking: Downtime.

Most parents focus entirely on what sites are blocked and forget that restricting when the phone works at all is just as powerful. Downtime lets you schedule periods where the iPhone basically goes into lockdown mode only the apps you explicitly allow stay accessible.

My family’s setup as an example:

  • Weekdays 9pm to 7am: Downtime on, only Phone and Messages allowed
  • Weekends: Downtime starts at 10:30pm
  • During school hours (8am to 3pm on weekdays): I use the App Limits feature separately to cap social media to 0 minutes, which effectively blocks it without going full Downtime mode

How to set it up:

  1. Settings > Screen Time > Downtime
  2. Toggle Downtime on
  3. Set your schedule, you can do the same time every day or customize by day
  4. Under “Always Allowed” add apps that should still work during Downtime (Phone, Messages, Maps, maybe Music)
  5. Everything else becomes inaccessible during those hours

Why this matters for web blocking specifically: during Downtime, Safari becomes inaccessible. Your kid cannot browse even if somehow they found a way around the content filter. The two layers together, content filtering during allowed hours, full browser lockdown during Downtime, cover a lot of ground.

App Limits are also worth setting up separately. You can cap specific app categories (Social Networking, for example) to 30 minutes a day. Once the limit is hit, the apps grey out and your kid has to request more time from you. This is not website blocking exactly but it works really well for limiting the amount of time spent on apps that have their own internal browsers.

Both Downtime and App Limits are in the Screen Time settings menu right near the top.

12

DerekChandler asked whether Screen Time restrictions are actually effective enough, and I want to address that directly because the answer is nuanced.

For a young child (under 10): Yes, absolutely effective. A kid that age is not going to know what a VPN is or think to try a cached page workaround. The basic Screen Time setup is more than enough. The Allowed Websites Only mode is worth using for this age group, yes it needs more maintenance from you, but the safety level is higher.

For a preteen (10-13): Effective if you close the obvious gaps. This age group is curious and will poke at restrictions to see what gives. Make sure you have:

  • App Store installs disabled or requiring your Apple ID
  • VPN configuration blocked
  • All non-Safari browsers removed
  • Screen Time passcode they definitely do not know

For a teenager (14+): Partially effective. A determined teenager with internet access at school or a friend’s house is going to find workarounds eventually. The research is pretty consistent on this — tech restrictions for teens work better as a conversation starter than as a hard wall. The Screen Time reports showing what they visit can be more useful than the blocks themselves because it gives you something concrete to discuss.

Realistic expectation setting:

Screen Time is not a perfect solution and Apple would probably tell you the same. It is a reasonable layer of protection that raises the effort required to access inappropriate content. For most kids most of the time, that friction is enough.

Combine it with actual conversations about why you are setting limits and what the boundaries are. Kids who understand the reason for restrictions are more likely to respect them than kids who just see it as a puzzle to solve.

The reports feature is underused. Every week Screen Time generates a summary showing which sites were visited most, which apps were used, and how many Screen Time extension requests were made. Check it regularl, it tells you a lot about what is actually happening and helps you adjust the restrictions to be more targeted rather than just broader.

13

After reading this whole thread I put together a checklist you can run through after setting everything up. Took me learning from mistakes to get to this point.

Post-Setup Verification Checklist:

Step 1: Test the content filter

  • Open Safari on the child’s device
  • Try visiting a site in your Never Allow list
  • Should see: “This site is blocked because of content filtering”
  • If you do not see that screen, go back and double check the URL you entered has no typos and no https://

Step 2: Test the automatic adult filter

  • In Safari, try a well-known adult domain (does not matter which one)
  • Should also be blocked
  • If not blocked, confirm Limit Adult Websites is actually selected, not Unrestricted Access

Step 3: Test alternative browsers

  • Try opening Chrome or Firefox if they are installed
  • App should either be missing from the home screen (if you deleted it) or greyed out (if you disabled it in Allowed Apps)

Step 4: Test the App Store

  • Try opening the App Store and searching for a browser app
  • If you set Installing Apps to Don’t Allow, you should see a restriction message
  • If you left installs open but require your Apple ID, try tapping Get on any free app, it should ask for your Apple ID password

Step 5: Test the Screen Time passcode

  • Go to Settings > Screen Time
  • Tap “Turn Off Screen Time”
  • It should immediately ask for the Screen Time passcode
  • Do NOT enter it, just confirm it asks for it, then cancel

Step 6: Check Family Sharing visibility (if set up)

  • On YOUR phone, go to Settings > Screen Time > child’s name
  • You should see their weekly activity report
  • If you do not see their name here, the Family Sharing link is not set up correctly

Takes about 5-8 minutes and tells you immediately if anything needs fixing before you hand the phone back.

14

Want to give some real context on the Allowed Websites Only mode because a few people mentioned it and I think the use cases need to be clear.

I tried Allowed Websites Only for my 8-year-old daughter when she first got a hand-me-down iPhone. Seemed like the safest option. Here is what that first month actually looked like:

Week 1: She needed to access her school’s homework portal. Not on the Apple pre-approved list. I added it. Fine.

Week 1 continued: The homework portal embedded Google Classroom. Google Classroom is on its own domain. Had to add that too. Then Google Docs loaded inside Classroom and that uses another subdomain. Added that.

Week 2: Her teacher asked the class to use Khan Academy. Added it. Khan Academy loads videos from a CDN on a separate domain. Added that. Also uses YouTube for some content. Now I am in a position of either adding YouTube entirely (which defeats the purpose) or telling her she cannot watch the video lessons.

Week 3: A class project needed her to visit three specific websites. Added all three. One of them had embedded content from a mapping service. You get the idea.

By the end of month one I had added about 40 domains and I was getting requests every few days.

Here is my honest take on which mode to use:

  • Under age 9, not doing schoolwork on the phone: Allowed Websites Only makes sense. Limited sites, limited needs.
  • Age 9-12, does homework or school stuff on the phone: Limit Adult Websites with a targeted Never Allow list is way more practical.
  • Age 13+: Limit Adult Websites plus honest conversations about responsible use.

The automatic filter in Limit Adult Websites mode is genuinely pretty good. It catches the vast majority of inappropriate content without you having to manage a whitelist. Start there and add specific sites to Never Allow based on what you actually want blocked.

15

Great discussion in this thread. Want to wrap up with something that I think gets overlooked: Screen Time is not a set-it-and-forget-it thing. It needs a bit of regular maintenance to stay effective, and the built-in reports make that maintenance much easier than most parents realize.

The weekly Screen Time report tells you:

  1. Total screen time broken down by day and by category (Social, Entertainment, Education, etc.)
  2. Top apps used and how long spent in each
  3. Most visited websites
  4. Number of times the device was picked up
  5. How many Screen Time extension requests were made and which ones you approved

Where to find it: Settings > Screen Time, the current week summary is right at the top. Tap “See All Activity” for the full breakdown. You get a new summary every Monday.

How to use this data practically:

  • If you see an unfamiliar website in the top visited list, look it up. Sometimes it is totally fine (school portal, game server, update service). Sometimes it is something worth discussing.
  • If Screen Time extension requests spike suddenly, something changed in your kid’s usage patterns. Worth a conversation.
  • If total screen time is much higher than usual, App Limits might need adjusting.

Long-term management checklist (monthly or so):

  1. Review the weekly reports from the past month
  2. Check if any new apps were added that should not be there
  3. Try visiting a blocked site to confirm restrictions are still active (they should be but worth verifying)
  4. Update the Never Allow list if new sites have come up that should be blocked
  5. Confirm the Screen Time passcode is still something only you know
  6. If your child has gotten older, consider whether the restriction level still fits their age

The reports also make conversations with your kids much easier. Instead of “I am restricting your phone because I said so,” you can actually show them the data this is how much time you spent on this, this is what I saw in the visits and have a real discussion about it. Works a lot better than pure restrictions alone, especially as they get older.