How to Block Porn on Google Chrome (Policies, SafeSearch and DNS)

The trouble with blocking porn "in Chrome"

Search for a Chrome porn blocker and you will mostly find extensions. They work until the moment you want them not to: chrome://extensions, one toggle, done. Even a locked-down extension does nothing for Edge, Firefox, Safari or the next browser you install. So the honest goal is two-fold: make Chrome itself harder to misuse, and put the actual filter underneath Chrome where a toggle cannot reach it.

Step 1: Force SafeSearch

Turning on SafeSearch in Google's settings is a preference you can flip back. Enforce it instead. In NoorI, a SafeSearch rule forces SafeSearch at the DNS level on Google, Bing, DuckDuckGo and Yahoo for every browser on the device. If you only want Chrome-level enforcement, the ForceGoogleSafeSearch policy (below) does the same for Google inside Chrome.

Step 2: Lock Chrome down with enterprise policies

Chrome reads managed policies that ordinary settings cannot override. On Windows they live in the registry under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome; on a Mac they are delivered by a configuration profile. Useful ones:

• ForceGoogleSafeSearch (DWORD 1): SafeSearch always on.
• IncognitoModeAvailability (DWORD 1): incognito disabled.
• DnsOverHttpsMode (string off): stops Chrome using its own secure DNS provider, so lookups go through the system resolver and therefore through your DNS filter.
• URLBlocklist (a subkey with values 1, 2... each holding a domain): a short manual list.

1. Open regedit as administrator and create the keys above.
2. Restart Chrome and open chrome://policy. Each policy should show with status OK.
3. Apply the same keys under Policies\Microsoft\Edge if Edge is also on the machine.

The weakness is familiar: anyone with admin rights can delete the keys, and none of this touches Firefox or Safari.

Step 3: Put a DNS filter underneath Chrome

NoorI checks every DNS lookup from the device on a private Cloudflare Gateway, so the rules apply to Chrome, every other browser and every app.

1. Create a NoorI account and enroll your computer with the free Cloudflare One app (Windows, Mac).
2. Apply Basic Protection in Content Policy (included on Free) to block Cloudflare's adult categories.
3. On Pro, add a SafeSearch rule and, optionally, a YouTube Restricted Mode rule.
4. Keep DnsOverHttpsMode = off from step 2 so Chrome cannot be pointed at a custom secure DNS provider.

NoorI also blocks classic DNS and DNS-over-TLS to the big public resolvers, and the Cloudflare One switch is locked, so the usual "just change DNS" trick does not work.

Chrome on phones and Chromebooks

Chrome on Android follows the device, so enroll the phone with the Cloudflare One app: see blocking adult content on Android. Chromebooks are not a supported NoorI platform today. For those, Google Family Link or a managed Google account is the practical option.

Limits, and adding accountability

DNS can only allow or block a whole domain, so it cannot hide one result inside an allowed site or block a single Chrome feature. What it does well is make the porn sites themselves unreachable everywhere on the device. To stop yourself quietly reversing it, use a standard (non-admin) account and turn on Guardian Mode on Pro ($9.99/month, 7-day free trial): any request to loosen rules emails your accountability partner, and even after they approve there is a delay of at least 4 hours before a 30-minute edit window. Blocking Chrome for a child instead? See per-child rules.

Frequently asked questions

Can I block porn in Chrome without an extension?

Yes. Use Chrome policies such as ForceGoogleSafeSearch and IncognitoModeAvailability, and put a DNS-level filter like NoorI underneath so adult domains fail to load in every browser.

Does Chrome secure DNS bypass a DNS filter?

It can if Chrome is set to a custom DNS-over-HTTPS provider. Setting the DnsOverHttpsMode policy to off makes Chrome use the system resolver, which on an enrolled device is your NoorI Gateway.

How do I check that Chrome policies applied?

Open chrome://policy and click Reload policies. Each policy you set should be listed with the status OK.

Will this block porn in Firefox and Edge too?

The Chrome policies will not, but the NoorI DNS layer will, because it filters lookups for the whole device rather than one browser.