Chrome Parental Controls: Family Link Setup, Gaps, and a Second Layer That Closes Them
Set up Chrome parental controls with Family Link, see exactly where the controls fall short, and learn how to close the cross-browser and Incognito gaps.
You searched for how to block YouTube on Chromebook because either the autoplay rabbit hole has eaten another homework night, or something appeared on the screen that you wished hadn't. The right fix depends on one detail most guides skip: whether the Chromebook is a personal device you control or a school-issued unit your district manages. This guide walks both paths in order — a 30-second diagnostic so you know which one you own, the full personal-Chromebook playbook with Family Link and router fallbacks, the realistic levers parents actually have on a managed Chromebook, and the cross-device gap that even a perfect Chromebook block leaves wide open.
Before you change a single setting, identify the device. The instructions for personal and school-managed Chromebooks diverge sharply, and trying the wrong path wastes 20 minutes and ends in confusion. On a whole-home level, block TikTok at the router clears every screen at once.
Run these three checks:
Why this matters: extensions, DNS overrides, and most blocking tools behave completely differently between the two. School-managed devices enforce Google Workspace policy that overrides anything you change locally, so half the steps in a generic guide are dead ends on those units. For households running both a Chromebook and a phone or tablet, YouTube monitoring features follow the account rather than the device, closing gaps between the two surfaces.
Two paths follow. Path A is for personal Chromebooks where you own the policies. Path B is for school-issued managed Chromebooks where you do not.
If the Settings check showed “Not managed,” you have four real methods to choose from. Stack two of them for resilience.
This is the cleanest option for kids under 13 and the most resilient against an older kid who tries to remove extensions.
youtube.com and m.youtube.com.For older kids or shared computers where Family Link isn't set up, install BlockSite or StayFocusd from the Chrome Web Store and add youtube.com to the blocklist. Caveat: an older kid can disable or uninstall the extension unless the account is supervised, so this method alone is fragile.
Many guides written for Windows or macOS suggest editing the hosts file. Chrome OS does not expose /etc/hosts to users the way Windows and Mac do. Skip this step and don't waste time looking for it.
This catches every device on your home Wi-Fi, including the Chromebook, in one shot. Log into your router admin page and either:
youtube.com, m.youtube.com, and youtubei.googleapis.com to the URL filter, orSign into the kid's Google account on the Chromebook and turn on YouTube Restricted Mode from YouTube → Settings → General. If anything slips through your block, age-filtering catches the worst of it.
Open Chrome on the Chromebook and try each of these in order — if any of them load video, the block has a gap:
youtube.comm.youtube.comyoutube.com/watch?v=...Be honest with yourself: on a managed Chromebook you have very limited control. You cannot:
That said, three real levers still work.
Even though you can't touch the Chromebook itself, you control the home network. Add YouTube domains to your router's URL filter, or switch the router DNS to a filtering service. The block applies any time the Chromebook is on your Wi-Fi — including evenings and weekends, when most of the home-life damage happens.
Some routers and DNS filters can enforce YouTube Restricted Mode network-wide by forcing Restricted-Mode DNS aliases. CleanBrowsing and OpenDNS both document this. Where the school account allows it, you can also sign in and toggle Restricted Mode inside the YouTube account settings, though admin policy may overwrite it.
The district can solve this in two minutes from their console. A short template:
Hi, I'm the parent of [student name] in [grade/teacher]. Could you please add
youtube.comto the URL blocklist for student accounts in the Google Admin console (Devices → Chrome → Settings → Users & browsers → URL blocking)? If certain YouTube channels are used in class, an allowlist exception for those specific URLs would be ideal. Thank you.
Most IT teams will respond positively — this is a common request and the controls are already built in.
The router block stops working the moment the Chromebook leaves your Wi-Fi — a friend's house, a coffee shop, a library, the school bus. Which is exactly why the next section matters: blocking only the Chromebook leaves a wide-open gap on every other device the kid carries.
Here's the failure mode every parent eventually hits: you finish locking down the Chromebook, you test it works, you breathe out — and within a week the kid is watching YouTube on their phone, on the family tablet, or on a sibling's iPad. Chromebook controls solve a Chromebook problem. They don't solve the YouTube problem.
NexSpy closes the gap by managing YouTube the same way on whichever phone or tablet the child actually picks up, on both Android and iOS, from one Parent Dashboard.
A class assignment, a tutorial for a school project, a coach's video — these come up. The child request-permission flow lets the kid send a request from the NexSpy Kids app, and you approve or deny from the Parent Dashboard in seconds. Real access when it's warranted, nothing when it isn't.
The same schedule follows the kid across devices, regardless of which Chromebook (personal or school-issued) they're using during the day.
Not every family wants YouTube gone entirely — homework research, music, and educational channels are often the reason. Two partial-block options keep the useful parts and trim the rest.
Sign into the kid's YouTube account → Settings → General → Restricted Mode → On. Mature content is filtered out automatically. It is not perfect (some borderline content slips through, some safe content gets falsely flagged), but it shifts the default substantially.
In YouTube Kids, switch the content setting to “Approved content only” and add the channels yourself. Treat it as a curated playlist, not an autopilot babysitter. The default age-based settings have historically let inappropriate content slip through — recommendations get noisy at scale, and only the approved-only mode reliably prevents it.
For most families, the cleanest split is:
The blocks above hold against casual access, but motivated kids try predictable workarounds. Pre-empt them:
m.youtube.com or the YouTube PWA. Fix: make sure your router/DNS block covers both desktop and mobile subdomains, and uninstall the YouTube PWA from the Chrome menu if it's been added.A small ongoing habit beats any one-time setup: every couple of months, sit at the kid's Chromebook for two minutes and try the bypasses yourself. New PWAs, new extensions, and new mobile subdomains appear constantly. A five-minute audit closes most gaps before they matter.
Set up Chrome parental controls with Family Link, see exactly where the controls fall short, and learn how to close the cross-browser and Incognito gaps.
Block Snapchat on your kid's Chromebook with a 4-step playbook: Family Link site blocks, router/DNS, school admin options, and a phone-side layer.