3Eyes / Blog
2026-04-15 · Dan Clark

Parental Controls for Chromebook - The Complete 2026 Guide

Parental Controls for Chromebook: The Complete 2026 Guide

My daughter's school handed out Chromebooks at the start of third grade. The letter home said something like "please make sure your child uses the device responsibly." That was the entirety of the parental guidance. No mention of setup, no mention of controls, nothing about the fact that this small laptop was now a full internet browser sitting on her desk every night.

If you're a parent reading this, you probably already know where this is heading. Chromebooks are not inherently safe by default. They are powerful web browsing machines, and unless you take deliberate steps to configure them, they are as open as any other computer. This guide walks through everything you can do, what works, what doesn't, and where the real gaps are.

Why Chromebooks Deserve Special Attention

There are over 50 million Chromebooks in US schools. They are the dominant device in K-12 education because they are cheap, durable, easy to manage at scale, and require almost no maintenance. Schools love them. That also means tens of millions of kids bring them home every evening.

The problem is that most parents assume a school device is a locked-down device. It isn't necessarily. A school-managed Chromebook has restrictions put in place by the district's IT department, but those restrictions are designed for the classroom. They often don't extend to the home network or to personal Google accounts. And when a family buys their own Chromebook, there are basically no restrictions out of the box.

Chrome OS also works differently than Windows or macOS. The parental control model is different, the bypass methods kids discover are different, and a lot of the advice written for Windows doesn't apply here. Many parents set up controls on the family desktop but don't realize the Chromebook sitting in their kid's room is completely wide open.

This guide is specifically for Chromebook. We'll cover Google's built-in tools, their real limitations, and how to layer additional protections for families who need more control.

Google Family Link is the official parental control system for Chromebook. When properly configured, it gives you screen time limits, app approval, and some website filtering. Here's how to set it up from scratch.

Step 1: Create a Google Account for Your Child

If your child doesn't already have a supervised Google account, start here.

  1. Go to myaccount.google.com on any device
  2. Click Create account and choose For my child
  3. Enter your child's name and birthdate (this matters -- accounts for users under 13 are automatically supervised)
  4. Create a Gmail address for them
  5. You'll be prompted to link your own Google account as the parent

If your child already has a personal Gmail account they set up themselves, you'll need to add supervision to it. Go to families.google.com, sign in with your parent account, and follow the prompts to invite your child's existing account into Family Link.

Step 2: Sign Into the Chromebook With the Child Account

On the Chromebook:

  1. On the login screen, if there's an existing account, click the profile picture and choose Add person
  2. Sign in with your child's Google account
  3. The device will recognize this is a supervised account and prompt you to approve the sign-in from your parent device

You'll get a notification on your phone (or in the Family Link app) asking you to confirm. Approve it.

Step 3: Configure Screen Time Limits

Open the Family Link app on your phone (iOS or Android), or go to families.google.com on a computer.

  • Tap your child's name
  • Tap Screen time
  • Set Daily limits per day of the week -- you can set different limits for weekdays vs. weekends
  • Set Bedtime -- this locks the device during sleep hours regardless of daily limit remaining
  • Toggle School time if you want the device locked during school hours

One important detail: screen time limits on Chromebook apply to the entire device, not per-app. There's no way to say "2 hours of YouTube but unlimited Google Docs."

Step 4: Manage App and Extension Installations

In Family Link:

  • Go to your child's profile
  • Tap Controls then Content restrictions
  • Under Google Play, set app installation to Ask to buy (requires your approval for every install, even free apps)
  • Under Chrome, you can control what extensions can be installed

For extensions specifically, you can block all new extensions by default. This is worth doing because browser extensions can be used to bypass other controls.

Step 5: Website Restrictions in Chrome

This is where Family Link starts to show its limits, but here's what you can do:

In Family Link:

  • Go to Controls > Content restrictions > Google Chrome
  • Set the filter level to Try to block mature sites for broad category filtering
  • Or set it to Only allow certain sites -- this is an allowlist mode where only your approved URLs will load
  • Under Manage sites, add specific URLs to always allow or always block

The Only allow certain sites mode is the most restrictive and the most reliable. If you go this route, you'll need to add every site your child legitimately needs -- their school portal, educational sites, etc. It's more work upfront but leaves almost no gaps.

Here's the honest version. Family Link is a reasonable starting point, but any motivated middle schooler has figured out its gaps. These aren't theoretical vulnerabilities -- they're documented extensively in parent forums and Reddit threads.

The Accessibility Menu Bypass

This is one of the most commonly reported bypasses. On some Chrome OS versions, children have found that opening the Accessibility menu and toggling certain settings can interrupt the Family Link supervision process. There are Reddit threads in r/Parenting and r/GoogleFamilyLink with parents reporting their kids showed them exactly how to do it. Google has patched some versions of this, but the cat-and-mouse game continues.

Guest Mode Has No Restrictions

If guest mode is enabled on the Chromebook, anyone can open a completely unrestricted browsing session. Family Link does not apply to guest mode. Your child just has to click "Browse as Guest" on the login screen and every control you've set up is gone.

The fix: Disable guest mode. We'll cover how below.

Changing the System Clock

Screen time limits check the system clock. A number of parents have reported their kids changed the Chromebook's clock to extend their available screen time. This works on some firmware versions. Setting your router's time server and preventing manual clock changes helps, but it's not foolproof.

Category Filtering, Not URL Filtering

When you use the "Try to block mature sites" filter in Family Link, it's working off Google's category database. A site has to be categorized as mature before it gets blocked. New sites, personal blogs, niche forums, and plenty of other questionable content flies right through because it hasn't been categorized yet. If your child is determined to find something, category filtering alone won't stop them.

No YouTube Channel-Level Control

Family Link lets you require YouTube Kids instead of regular YouTube for younger children. But for older kids, there's no way to say "allow YouTube but only these specific channels." You either get all of YouTube or none of it. Given how much school and educational content lives on YouTube, blocking it entirely is often not realistic.

Bypass Methods Kids Use on Chromebook

Here's a visual overview of the most common ways kids get around Chromebook parental controls:

Common Chromebook Parental Control Bypasses Guest Mode Login screen bypass Change System Clock Resets time limits Accessibility Menu Disrupts supervision Full unrestricted browser session, no Family Link Extra screen time beyond daily and bedtime limits Supervision loop broken, browsing unrestricted

Fixes Disable guest mode in settings

Enforce NTP via router, keep Chrome OS updated Keep Chrome OS updated, layer DNS filtering

A Layered Approach to Chromebook Security

No single control is sufficient. The families who have the most success use multiple layers that each catch different bypass attempts.

Layer 1: Fix the Guest Mode Problem First

Guest mode is the biggest gap. To disable it:

  1. Open Chrome browser on the Chromebook
  2. In the address bar, type chrome://settings
  3. Search for "guest" or scroll to Privacy and security
  4. Look for Guest browsing and toggle it off

Alternatively, if you manage the device through Google Admin Console (you can do this with a free Google Workspace for Education account or a paid account), you can enforce this policy at the device level so it can't be changed.

Layer 2: DNS Filtering at the Router

Your router assigns DNS servers to every device on your network. By switching to a filtered DNS service, you add a layer of content filtering that applies to every device in your home, including Chromebooks, phones, and smart TVs.

CleanBrowsing is a good free option. Their family filter DNS addresses are:

  • Primary: 185.228.168.168
  • Secondary: 185.228.169.168

To set this up, log into your router's admin panel (usually at 192.168.1.1 or 192.168.0.1), find the DNS settings, and replace your ISP's default DNS with the CleanBrowsing addresses. Every device on your network will now use their filtered DNS.

NextDNS is a more configurable paid option if you want custom block lists and per-device rules.

DNS filtering isn't perfect (a determined teenager can use a VPN to bypass it), but it eliminates a large category of accidental or casual access to inappropriate content.

Layer 3: Disable Incognito Mode

Incognito mode bypasses browsing history but doesn't bypass Family Link restrictions. However, it does prevent you from reviewing what your child was looking at. Disable it:

In Family Link app: Go to Controls > Content restrictions > Google Chrome and make sure Allow incognito mode is turned off.

Layer 4: Lock Down the Chrome Web Store

Extensions can be used to bypass filters, access blocked content, or hide browsing activity. To prevent extension installation:

In Family Link: Under Chrome settings, enable Require approval for new extensions. Any time your child tries to install an extension, you'll get a notification to approve or deny it.

Better still, consider disabling extension installation entirely unless you have a specific need.

Layer 5: Disable Developer Mode

Developer mode on Chromebook allows shell access and can be used to remove management software. To check if it's enabled:

When the Chromebook boots, if you see a screen that says "OS verification is OFF" -- that's developer mode. To disable it, hold Esc + Refresh + Power, then follow the prompts to re-enable OS verification.

Keep developer mode off. For most families there is no legitimate reason a child needs it enabled.

Layer 6: Android Apps

If your Chromebook has the Google Play Store enabled (most modern ones do), your child can install Android apps. These apps don't inherit Chrome browser restrictions -- a blocked website in Chrome can often be accessed through a dedicated Android app.

The good news: Family Link's app approval controls apply to the Play Store on Chromebook too. Make sure Require approval for purchases (including free apps) is enabled. This way every app installation comes through you first.

School-Issued vs. Personal Chromebooks: Different Rules

School-Issued Chromebooks

If your child's school issued the Chromebook, the district's IT department manages it through Google Admin Console. They have applied their own policies -- certain sites are blocked, certain apps are prevented from installing, and the device may be enrolled in the school's management system.

Here's the important part: you cannot install parental controls on a school-managed Chromebook. The school's management software takes precedence, and adding your own account as a supervisor won't work the way it does on a personal device.

What you CAN do:

  • Router-level DNS filtering applies regardless of who manages the Chromebook
  • Set up a filtered WiFi network at home. Most modern routers let you create a guest network with its own settings. Put the school Chromebook on a network with DNS filtering enabled
  • Communicate with the school about their content policies. Many districts have a tech coordinator who can tell you exactly what is and isn't blocked on school devices
  • Check the Chromebook's enrolled status by going to chrome://management in the browser. This shows what policies are applied

Personal Chromebooks

For a Chromebook your family owns, you have full control. Everything in this guide applies. Start with Family Link setup, layer in DNS filtering, disable guest mode, and configure the Chrome settings listed above.

Chromebook-Specific Tips Worth Knowing

Sync settings carefully. If your child has Chrome sync enabled and they sign into Chrome on a friend's computer, their bookmarks and some settings sync. This is a minor issue, but worth being aware of.

Linux environment (Crostini). Some Chromebooks can run a Linux environment. If yours has this enabled and your child knows about it, they can run a full Linux browser with no restrictions. Disable the Linux environment in Settings > Advanced > Developers > Linux development environment.

Set a BIOS/firmware password. On some Chromebook models you can set a password required to change firmware settings. This prevents developer mode from being enabled without your knowledge. The process varies by manufacturer -- search for your specific model.

Check the supervision expiration. Google Family Link supervision automatically ends when a child turns 13, or you can set it to continue until they're 18. Make sure you've set the right end date in Family Link settings.

Family Link: What It Does vs. What Parents Need Feature Family Link What's Missing Screen time limits ✓ Clock change bypass possible Category-based site filtering ✓ Uncategorized sites pass through Block specific URLs ✓ Manual, no bulk lists YouTube channel-level control ✗ Not available in Family Link Guest mode blocked ✗ Must be disabled manually Activity reports with detail Basic only No per-site time tracking

Age-Specific Recommendations

Elementary School (Ages 6-10)

At this age, the goal is to keep the Chromebook a tool for learning and nothing else.

  • Enable Only allow certain sites in Family Link and manually add every site they need
  • Set a 2-hour daily limit maximum with a 7pm bedtime on the device
  • Require your approval for every app
  • Use the Chromebook only in common areas of the home, not in the bedroom
  • DNS filtering on your router as a backstop

The key insight at this age: kids aren't trying to bypass controls, they're just curious and clicking. A tight allowlist eliminates accidental exposure.

Middle School (Ages 11-13)

This is when the active bypass attempts start. You need both controls and conversations.

  • Switch from allowlist to Try to block mature sites with specific blocked categories added
  • Keep screen time limits but adjust for homework needs
  • Disable guest mode and incognito mode without exception
  • Review the Family Link activity report weekly
  • Have an explicit conversation about what the boundaries are and why they exist
  • Consider DNS filtering that logs activity (NextDNS has a logging feature)

At this age, the goal shifts from pure restriction to building habits. Controls keep the guardrails up while you have the conversations that actually shape behavior.

High School (Ages 14-17)

Blanket restrictions become counterproductive with high schoolers. They have the technical skill to bypass most controls, and if they're motivated enough, they will. Shift your approach:

  • Keep DNS filtering at the router level as a baseline
  • Remove the tightest site restrictions but keep monitoring active
  • Use Family Link's activity reports to have specific conversations ("I noticed you were on X site at 11pm, can we talk about that?")
  • Focus on the relationship and communication over the technology
  • Set clear expectations about device use times and locations rather than trying to enforce them purely technically

The research consistently shows that teens whose parents talk openly with them about online safety make better decisions than teens whose parents only use software controls.

What About Other Computers in Your Home?

Chromebook parental controls apply to Chromebooks. If your family also has a Windows or Mac desktop or laptop, those need entirely separate controls.

Family Link has a limited Windows presence but it's not robust. For Windows and Mac computers, a dedicated parental control application built specifically for those platforms is a much better fit.

3Eyes is designed for Windows and Mac desktops and laptops, using an allowlist-first approach -- you specify which sites and applications are allowed, and everything else is blocked by default. This is the most reliable model for younger children, where category-based filtering leaves too many gaps. If your child has both a Chromebook for school and a Windows computer at home, using Chromebook controls for the Chromebook and 3Eyes for the Windows machine gives you comprehensive coverage without gaps.

Putting It All Together

Chromebook parental controls aren't a one-time setup. They require occasional review as Chrome OS updates roll out, as your child gets older, and as you learn what's working and what isn't.

Start with the basics: Family Link setup, guest mode disabled, incognito disabled, DNS filtering on your router. Then layer in the age-appropriate restrictions from the section above. Review the activity reports in Family Link monthly. And keep talking to your kids -- no software replaces the conversations about why these boundaries exist.

The families who have the most success aren't the ones with the tightest technical controls. They're the ones who treat the controls as a foundation for conversations rather than a substitute for them.

Questions about setting up parental controls across multiple devices? The 3Eyes blog covers Windows, Mac, and broader family screen time strategies. For device-specific setup questions, the Google Family Link help center and r/GoogleFamilyLink on Reddit are both active communities with parents working through the same problems.