2026-08-16 · Dan Clark

How to Block Minecraft on PC, Laptop & Mac (2026)

If you have already tried to block Minecraft and it did not work, there is a good chance you hit the single issue that breaks most parents' setups: there are two different Minecrafts on a PC, and only one of them obeys Microsoft Family Safety.

Bedrock Edition is the version that comes from the Microsoft Store, ships on Xbox, PlayStation, Switch, phones and tablets, and is what most Windows PCs install by default. It is a Store app, tied to your child's Microsoft account, and it is genuinely governed by Microsoft's family settings.

Java Edition is the original PC version. It installs as a normal desktop program with its own launcher, it runs on a Java runtime, and it connects to community servers that Microsoft has no involvement in. Java logins now use a Microsoft account, so parents reasonably assume Family Safety covers it — but signing in with a Microsoft account and being governed by Microsoft's family controls are two different things. Multiplayer permission toggles, Realms restrictions and Store app blocks are built around Bedrock. Java routes around most of that by design.

That is why the classic complaint — "I blocked Minecraft in Family Safety and he's still playing" — is almost never a mistake in the settings. It is the wrong edition.

This guide covers both editions properly: which method blocks what, exact menu paths for Windows 11, Windows 10 and macOS, the Minecraft and Mojang domains worth blocking, how to restrict multiplayer and Realms instead of banning them outright, and an honest account of how kids get around each method.

First: Work Out Which Edition Your Child Has

Do this before changing anything. It determines everything that follows.

Signs it is Bedrock Edition: it was installed from the Microsoft Store or came preinstalled; it appears in the Start menu with the same icon as the Xbox/console version; your child plays with friends on consoles or phones; the world list mentions Realms and a Marketplace with coins.

Signs it is Java Edition: there is a separate Minecraft Launcher program that opens first with a "Play" button and a version dropdown; your child talks about mods, Forge, Fabric, OptiFine, resource packs, shaders, or joining a server by typing an IP address; there is a .minecraft folder in their user profile.

Many households have both. The modern Minecraft Launcher can show Java and Bedrock side by side, so the presence of one does not rule out the other. Check the Start menu, check Settings > Apps > Installed apps, and look for a .minecraft folder — on Windows at %appdata%\.minecraft, on Mac at ~/Library/Application Support/minecraft.

If that folder exists, Java has been installed, and account-level controls alone will not stop it.

Which Method Should You Use? A Comparison

Method	Difficulty	What it actually blocks	Bypass difficulty	Cost
Microsoft Family Safety	Easy	Bedrock (Store app), Microsoft-account multiplayer and Realms; app time limits	Medium — second account, or Java	Free
Uninstall + standard (non-admin) account	Easy	Reinstalling either edition	Medium — needs the admin password	Free
Hosts file edit	Easy	Downloads, launcher updates and login for both editions	Easy — edit it back, or a VPN	Free
Firewall rule on the launcher `.exe`	Medium	The specific executable you point it at	Medium — new install path, or a portable launcher	Free
Router / DNS domain block	Medium	Login and downloads on your Wi-Fi, all devices	Medium — hotspot, VPN, offline play	Free–low
macOS Screen Time	Easy	App use and time limits on a Mac	Medium — guessing the passcode	Free
Parental control software	Easy	Varies by product — check whether it covers desktop apps	Hard	Paid

Two things stand out from that table.

No network block stops singleplayer. Once Minecraft is installed and has logged in once, Java in particular will happily launch and run an offline world with no internet at all. If your goal is "no Minecraft on a school night", a domain block is the wrong tool — you want a time limit or the app removed.

No single free method covers both editions. Family Safety handles Bedrock well and Java badly. A hosts file handles login and downloads for both but not offline play. The realistic setup is a standard user account plus one or two of the methods above, chosen for what you actually want to prevent.

How to Block Minecraft on Windows 11

Step 1 — Take away the administrator account

This is the step that makes every other step hold.

Settings > Accounts > Other users (or Family if your child has a child account)
Select your child's account, click Change account type
Set it to Standard User

On a standard account your child cannot install the Minecraft Launcher, cannot edit the hosts file, cannot create firewall rules and cannot install a VPN client. Skip this and everything below is a suggestion rather than a control.

Step 2 — Remove the game

Settings > Apps > Installed apps
Uninstall Minecraft (the Bedrock/Store entry), Minecraft Launcher, and anything named Minecraft Education or Minecraft Preview
Delete the leftover data folder if you want worlds gone too: press Win+R, type %appdata%, and delete the .minecraft folder (back it up first — this is where every Java world and build lives, and deleting it without warning goes badly)

Step 3 — Use Microsoft Family Safety for Bedrock

Content filters — to restrict web browsing and, where offered, apps and games by age rating. This is the reliable route for the Store version of Minecraft.
Screen time — set device or app time limits, and a schedule. App limits on Windows can cover desktop programs as well as Store apps, but coverage is less consistent for a program the parent installed manually, so verify it on the actual machine rather than assuming.
Multiplayer and communication settings on the Xbox/Microsoft account side — these control whether the account can play multiplayer, join Realms, and use text and voice chat. They apply to Bedrock. They do not govern Java community servers.

Our Microsoft Family Safety setup guide walks through the whole dashboard, including its known limits — notably that its web filtering enforces in Microsoft Edge and blocks other browsers to compensate.

Step 4 — Block the Java launcher with a firewall rule (optional)

If you want Java installed but unable to log in or update:

Windows Security > Firewall & network protection > Advanced settings
Outbound Rules > New Rule > Program
Browse to the launcher executable. The Minecraft Launcher normally installs under Program Files (x86) in a Minecraft Launcher folder; if you are not sure, right-click the Start menu shortcut, choose Open file location, then right-click again and choose Properties to read the exact path.
Choose Block the connection, apply to Domain, Private and Public, and name it something you will recognise later

Repeat the rule for javaw.exe if you want the game itself blocked from reaching servers, not just the launcher — Java Edition runs inside the Java runtime, so a rule on the launcher alone can leave a running game connected. Be aware that other programs use javaw.exe too.

The maintenance cost is real. Launcher updates and reinstalls can change the path, which silently kills the rule, and a portable or third-party launcher sits somewhere your rule has never heard of.

How to Block Minecraft on Windows 10

Same logic, different menu names:

Settings > Apps > Apps & features — uninstall Minecraft, Minecraft Launcher and Minecraft Education
Settings > Accounts > Family & other users — select the account, Change account type > Standard User
Family Safety is managed at the same family.microsoft.com dashboard, shared between Windows 10 and 11
The hosts file, firewall and router methods behave identically on Windows 10

Windows 10 is past end of support, so it no longer receives feature updates to Family Safety. On a Windows 10 machine, the hosts file and router methods are the more dependable of the free options.

How to Block Minecraft on a Mac

System Settings > Screen Time (System Preferences > Screen Time on older macOS)
Select your child's account at the top
Content & Privacy — turn it on. Under App Restrictions you can prevent installing apps; under Web Content you can add blocked sites.
App Limits — add a limit for Minecraft. Screen Time lists apps it has recorded usage for, so if Minecraft does not appear yet, have the Mac run it once and check back.
Downtime — set the hours when nothing but allowed apps runs. For "no games on school nights", this is more effective than any block.
Return to the main Screen Time page and Lock Screen Time Settings with a four-digit passcode

To remove Minecraft entirely, drag Minecraft.app from Applications to the Trash, and delete ~/Library/Application Support/minecraft (the Java data folder — again, that is where the worlds are).

Two Mac cautions. Screen Time's web restrictions are enforced most reliably in Safari, so also restrict other browsers. And use a passcode your child has never watched you type — not your login PIN. Our Mac parental controls guide covers the rest.

Minecraft Domains to Block (Copy-Paste List)

For a router, a DNS filter or the hosts file. These cover the website, the launcher's update and asset servers, and the login service used by both editions.

minecraft.net
www.minecraft.net
api.minecraftservices.com
session.minecraft.net
sessionserver.mojang.com
authserver.mojang.com
api.mojang.com
textures.minecraft.net
libraries.minecraft.net
resources.download.minecraft.net
launcher.mojang.com
launchermeta.mojang.com
piston-meta.mojang.com
piston-data.mojang.com
assets.mojang.com
mojang.com

In hosts file format, add to C:\Windows\System32\drivers\etc\hosts on Windows or /etc/hosts on Mac:

127.0.0.1 minecraft.net
127.0.0.1 www.minecraft.net
127.0.0.1 api.minecraftservices.com
127.0.0.1 session.minecraft.net
127.0.0.1 sessionserver.mojang.com
127.0.0.1 authserver.mojang.com
127.0.0.1 api.mojang.com
127.0.0.1 textures.minecraft.net
127.0.0.1 libraries.minecraft.net
127.0.0.1 resources.download.minecraft.net
127.0.0.1 launcher.mojang.com
127.0.0.1 launchermeta.mojang.com
127.0.0.1 piston-meta.mojang.com
127.0.0.1 piston-data.mojang.com
127.0.0.1 assets.mojang.com

On Windows, open Notepad as administrator (Start > type Notepad > right-click > Run as administrator), open the hosts file with the file-type dropdown set to All Files, paste at the bottom, save, then run ipconfig /flushdns. On Mac, run sudo nano /etc/hosts, paste, save with Ctrl+O then Ctrl+X, and run sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder. Our hosts file guide walks the same technique through in more detail.

You will find guides telling you to also block login.live.com, login.microsoftonline.com or xboxlive.com. Do not do this on a machine that is used for anything else. Those domains are the sign-in path for Windows itself, Microsoft 365, Outlook, OneDrive, Teams and school accounts. Blocking them can lock your child out of homework, break Windows sign-in on a Microsoft account, and produce failures that are miserable to diagnose weeks later. Stick to the minecraft.net and mojang.com domains above — they are Minecraft-specific and safe to block.

What the domain block does and does not do

It stops downloads, launcher updates, skin loading and online authentication. It does not stop an already-installed copy from launching into an offline singleplayer world, and it does not stop a community server whose IP address your child already knows if the game can start without re-authenticating. Domain blocking is a good perimeter, not a complete stop.

Multiplayer, Realms and Servers: Restrict, Don't Just Ban

For most families the real worry is not Minecraft. It is who is talking to their child inside it. Building alone in a singleplayer world is one of the calmer things a nine-year-old can do with a screen. An unmoderated public server with open voice chat is a different product entirely.

Where the chat risk actually is:

Public Java servers — anyone can join, moderation varies from excellent to nonexistent, and many pair the game with a Discord server where the real conversation happens. This is the highest-risk configuration and the one Microsoft's controls cover least.
Realms — Minecraft's official subscription servers. Invite-only, run by Microsoft, and governed by the account's multiplayer and communication settings. Much safer than a random public server.
Bedrock multiplayer and Featured Servers — governed by the Microsoft/Xbox account's multiplayer and chat permissions.
LAN play — same house, same network. Effectively no stranger risk.

A graduated approach that usually works better than a ban:

Use the Microsoft account's privacy and communication settings to limit who can message and chat with your child, and whether multiplayer is allowed at all. These are enforced on Microsoft's side, so they follow the account to any device — something no PC-side block achieves.
Allow Realms with known friends and LAN play. Ban unlisted public servers rather than all multiplayer.
For Java, agree a short list of servers by name and check the server list in-game periodically. Java server access is not centrally controllable, so this is a trust-and-verify arrangement, not a technical one.
Look at Discord alongside Minecraft — for older kids the two travel together, and Discord is usually the less supervised half. Our Discord parental controls guide covers that side.
In-game, disable chat in the game's chat settings for younger children, and mute voice chat in any mod or add-on that provides it.

How Kids Bypass Each Method — and the Fix

"I blocked it in Family Safety but he's playing." He has Java Edition, not the Store version. Fix: handle Java separately — uninstall the launcher, add a firewall rule, and block the domains above.

Reinstalling the launcher. The Java launcher is a small download and installs in a couple of minutes. Fix: standard user account. This is the single highest-value change on this page.

Offline and "cracked" launchers. Third-party launchers exist that run Minecraft without a genuine login. They install to unpredictable folders, so your firewall rule pointing at the official path does nothing. Fix: a standard account prevents installation. Also check the Downloads folder and the Start menu for launchers you do not recognise — TLauncher-style names are the giveaway. Worth telling your child plainly that these are a common malware vector, because it happens to be true and it lands better than a rule.

Editing the hosts file back. It is a plain text file. Fix: standard account — the file is read-only without admin rights.

A VPN or proxy. Tunnels around hosts files, router rules and DNS filters alike. Fix: a standard account blocks installing VPN clients; browser extensions still install, so block VPN sites by domain or use software that fails closed on unknown sites.

A phone hotspot. Defeats every network-level control instantly. Fix: network controls cannot solve this. It needs a control that lives on the computer, plus a conversation about the phone.

A second Windows account, or a second Microsoft account. A new local account has none of your settings. A new Microsoft account is outside your family group. Fix: check the login screen for unfamiliar accounts, and review your family group membership periodically.

Playing offline. Nothing network-based stops a singleplayer world. Fix: use time limits or remove the app.

Minecraft Education. Often installed by schools and frequently overlooked when parents block "Minecraft". Fix: check for it by name in installed apps. If school requires it, time-limit it rather than removing it.

The through-line, exactly as with any other game: most bypasses require administrator rights. Our guide to how parental controls get bypassed covers the wider set.

Block Entirely, Time-Limit, or Supervise? By Age

Under 8. Singleplayer or LAN only, chat off, no public servers. A total block is rarely necessary at this age — Minecraft's creative mode is genuinely good for young children, and the risk here is contact, not content. Turn chat off and the main hazard largely goes with it.

Ages 9–12. Time-limiting beats blocking. This is the age where Minecraft is a social space and a shared project with school friends, and a hard ban tends to relocate play to a friend's house where you see nothing. Set a daily limit and a bedtime cut-off, allow Realms with known friends, and keep public servers on an agreed list.

13 and up. Supervision over control. Teenagers defeat technical blocks given time, and an unexplained ban reliably produces a workaround. Keep the two controls that hold up — a bedtime schedule and a spending limit on the account — and move the rest to visible time reporting and a standing conversation.

The test that predicts whether a rule survives: can you explain it in one sentence? "No servers we haven't agreed on" is explainable. "No Minecraft" usually is not, which is why it gets bypassed.

Frequently Asked Questions

Why does Minecraft still open after I blocked it in Microsoft Family Safety? Almost always Java Edition, which installs outside the Microsoft Store and is not governed by the Store app and multiplayer controls. Check for a .minecraft folder and a separate Minecraft Launcher program.

Can I block Java Edition but allow Bedrock? Yes — uninstall the Java launcher and delete .minecraft, keep the Store version, and manage Bedrock through Family Safety. This is a common and sensible setup, because Bedrock is the edition Microsoft's controls actually reach.

Does blocking minecraft.net stop the game from running? No. It blocks downloads, updates and online login. An installed copy can still launch into an offline world. Use a time limit or remove the app if you need it not to run at all.

Will blocking Mojang domains break Xbox or Microsoft 365? The minecraft.net and mojang.com domains listed above are Minecraft-specific and safe. Blocking Microsoft's login domains is not — see the warning above.

How do I block Minecraft on a school laptop? If the school manages the device you generally cannot override its policies, and you should not try. Ask the school's IT contact — Minecraft Education is often deliberately installed.

How do I limit Minecraft instead of blocking it? On Windows, Family Safety app and screen-time limits. On Mac, Screen Time App Limits and Downtime. Both are free. Our bedtime guide covers scheduled downtime, which holds up better than blocking.

Can I block Minecraft but allow other games? Yes. Domain and firewall methods target Minecraft only. See our Steam parental controls guide and how to block Roblox on PC for the equivalents elsewhere.

How do I undo all of this? Delete the hosts file lines and flush DNS, delete the firewall rule from Outbound Rules, remove the domains from the router blocklist, and re-enable the app in Family Safety. All reversible in a couple of minutes.

Where Software Helps — and Where It Doesn't

Be honest about which problem you have.

If the problem is too much Minecraft, you want time limits and a bedtime schedule, and the built-in tools on Windows and Mac do that for free. Use them.

If the problem is what your child reaches around Minecraft — server-finder sites, mod sites of unknown provenance, "free skins" pages, YouTube and Discord rabbit holes, and the download pages for cracked launchers — that is a web filtering problem, and blocklists lose it structurally. You have to name every site in advance, and a new mirror defeats you.

That is the gap 3Eyes is built for: it is allowlist-first, so only sites you have approved load and everything unknown shows an "Ask Parent" page, and it adds daily time limits and scheduled downtime on Windows and Mac, with approval requests coming to a parent phone. To be clear about what it is not: it is a web and screen-time control, not an executable blocker — for stopping a locally installed Minecraft launcher from running, use the account, uninstall, firewall and Family Safety steps above. It is paid, covers up to four child accounts, and has a 14-day free trial; see pricing.

How to block Roblox on PC, laptop & Mac — the same methods applied to the other big one
How parental controls get bypassed — every workaround and what stops each
Microsoft Family Safety setup guide — the full dashboard, and where its coverage ends

Work out the edition first. Then take the admin rights. Everything else on this page is a refinement on those two.