How to Block Porn on Windows 11 (Every Browser, Not Just Edge)

Why porn blocking on a Windows PC usually fails

Most people who try to block porn on their own laptop go through the same cycle: install a browser extension, find it is trivially disabled, switch to editing the hosts file, then discover that a second browser, a private window or a single admin prompt undoes the lot. The problem is not willpower. It is that every built-in Windows method lives on the same machine you have full control over, usually as an administrator.

This guide covers the free options first, explains exactly how each one breaks, and then shows how to move the filtering off the PC and into the network path, so it applies to Chrome, Edge, Firefox, Brave, apps and anything else that connects to the internet.

Free method 1: Microsoft Family Safety (Edge only)

Microsoft Family Safety can filter adult websites, but it is designed for a child account inside a Microsoft family group. To use it on yourself you need two Microsoft accounts: an organiser account (ideally held by someone you trust) and the account you actually sign in with.

1. Sign in at family.microsoft.com with the organiser account and add your everyday account as a member.
2. Open that member, go to Content filters → Web and search and turn on Filter inappropriate websites and searches.
3. Sign in to Windows on your PC with the member account.

The catch: web filtering only applies in Microsoft Edge. Other browsers are blocked outright for child accounts rather than filtered, which is clumsy for a developer who needs Chrome or Firefox for work. And if your everyday account is a local administrator, the whole arrangement is one settings change away from being undone.

Free method 2: the hosts file

The hosts file lets you map a domain to a dead address so the PC never reaches it.

1. Open Notepad as administrator.
2. Open C:\Windows\System32\drivers\etc\hosts (switch the file filter to All files).
3. Add one line per domain, for example 0.0.0.0 example-adult-site.com and 0.0.0.0 www.example-adult-site.com.
4. Save, then run ipconfig /flushdns in an admin terminal.

It works for the exact names you list and nothing else. There are millions of adult domains and new mirrors appear daily, wildcards are not supported, and anyone with admin rights can delete the lines in ten seconds. Treat it as a quick patch, not a plan.

The network-level method: NoorI on Windows

NoorI runs your rules on a private Cloudflare Zero Trust Gateway. Your PC connects to it through the free Cloudflare One app (formerly the WARP client), so every DNS lookup from every browser and app on the machine is checked before a connection is made.

1. Create a NoorI account and connect Cloudflare from Settings → Cloudflare.
2. Install the Cloudflare One app and enroll the PC, following our Windows setup guide.
3. In Content Policy, apply Basic Protection. It blocks Cloudflare's Pornography, Nudity and Adult Themes categories plus malware and phishing domains. This is available on the Free plan for one device.
4. Verify at cloudflare.com/cdn-cgi/trace that you see warp=on and gateway=on, then try a known adult domain in two different browsers.

Because the check happens on DNS rather than inside a browser, incognito windows, a freshly installed browser and desktop apps all hit the same rules. NoorI also locks the on/off switch inside the Cloudflare One app and blocks plain DNS and DNS-over-TLS to the well-known public resolvers (8.8.8.8, 1.1.1.1, 9.9.9.9 and OpenDNS), which is the first thing people try. See how DNS filtering works for the full picture.

Hardening the PC so it holds on a bad night

• Use a standard account day to day. Create a separate local administrator account, give its password to someone you trust, and remove admin rights from the account you actually use. Without admin you cannot uninstall the Cloudflare One app or edit the hosts file.
• Turn on Guardian Mode (Pro). Your accountability partner must approve any change that loosens your rules, disconnecting Cloudflare, pausing filtering or switching Guardian Mode off. After they approve you still wait out a delay you chose (minimum 4 hours), then get a 30-minute window before everything re-locks.
• Close the browser-DNS gap. A manually configured custom DNS-over-HTTPS provider in a browser can step around DNS filtering. On Chrome or Edge you can set the DnsOverHttpsMode policy to off; the Chrome guide shows how.

What this does not cover

Being straight about the limits: DNS filtering blocks whole domains, so it cannot remove an explicit image hosted on an otherwise allowed site such as a social network. A separate VPN app sends traffic through a tunnel NoorI never sees, which is why the standard-account step matters. Read VPN and bypass prevention before you assume you are fully covered. Category lists are maintained by Cloudflare and are very broad, but brand-new domains can take time to be classified; on Pro you can add any domain you spot to your own block list immediately.

Which plan you need

Free covers one device with Basic Protection, which is enough to block porn on a single PC. Pro ($9.99/month, with a 7-day free trial) adds up to 10 devices, custom domains, scheduling and Guardian Mode. If you also want your phone covered, see our iPhone and Android guides. Blocking this for a child rather than yourself? Use per-child rules instead.

Frequently asked questions

Does Microsoft Family Safety block porn in Chrome?

No. Family Safety only filters websites in Microsoft Edge. For a child account it can block other browsers entirely, but it does not filter them. A DNS-level filter such as NoorI applies to every browser on the PC.

Will incognito mode get around NoorI on Windows?

No. Incognito only changes what the browser stores locally. The DNS lookup still goes through the Cloudflare One app to your NoorI Gateway and is checked against your rules.

Can I uninstall the blocker if I am an administrator?

Yes, which is why the most effective step is daily use from a standard Windows account with the admin password held by someone else. Guardian Mode then makes loosening the rules from the dashboard require their approval as well.

Is the hosts file enough to block porn?

Rarely. It only blocks the exact domain names you type, has no wildcards, and anyone with admin rights can edit it. It is useful for a handful of specific sites, not for a whole category.