3Eyes / Blog
2026-08-16 · Dan Clark

How to Block TikTok on a Computer, Mac or Chromebook

Here's the piece of good news most guides bury: TikTok on a computer is far more blockable than TikTok on a phone. On a phone it's a native app that talks directly to TikTok's servers, updates itself, and is a nuisance to remove cleanly. On a Windows PC, a Mac or a Chromebook, TikTok is overwhelmingly just a website - tiktok.com in Chrome, Edge or Safari. There is a Windows desktop app in the Microsoft Store and an Android app that some Chromebooks can install, and we'll deal with both, but for the vast majority of families the fight is over one domain in one browser. That is a fight you can win.

This guide covers every practical way to block or limit TikTok on a child's computer, platform by platform, with the exact domains, the methods ranked by how well they actually hold, and an honest account of how kids get around each one.

What You're Actually Blocking: Web vs App

Before touching any settings, be clear about what's on the machine. The answer changes which method you need.

The website (almost always the real target). tiktok.com opens in any browser and gives a near-complete TikTok: the For You feed, search, profiles, comments, DMs, uploads. No install, no account required to scroll. Because it runs in the browser, anything that blocks a domain - hosts file, DNS, router, OS content filter - stops it dead, in every browser at once if you block low enough in the stack.

The Windows desktop app. TikTok publishes an app in the Microsoft Store. It's a fairly thin wrapper that still talks to the same servers, so domain-level blocks generally break it too - but you should also just uninstall it and prevent reinstalls, because that's cleaner.

The Android app on Chromebooks. If the Play Store is enabled on the Chromebook, TikTok can be installed as an Android app. This one does not care about Chrome's settings and needs to be blocked separately. It's the single most common reason a Chromebook TikTok block "doesn't work".

macOS has no TikTok desktop app worth worrying about. On a Mac it is a browser question, full stop.

So: block the domain properly, then handle whichever app exists on that platform. Two steps, not one.

Which Method Should You Use?

Answer first. If you want a free block in ten minutes on one computer and your child doesn't have the admin password, edit the hosts file. If you want one block covering every device on your Wi-Fi, use DNS filtering. If your child is old enough to research bypasses - and by twelve or thirteen many are - a blocklist of any kind will eventually leak, and you want allowlist-based software instead.

Method Cost Difficulty Effectiveness Bypass risk Covers
Hosts file Free Medium Good - all browsers on that machine High if child has admin rights One computer (not Chromebook)
Router website blocking Free Medium Moderate - many routers miss HTTPS Medium Whole home network
DNS filtering (NextDNS, CleanBrowsing, OpenDNS) Free tier Medium Very good, supports wildcards Medium - device DNS can be changed Whole home network
Microsoft Family Safety Free Easy Weak - Edge only, blocks other browsers entirely High One Windows account
macOS Screen Time Free Easy Good on that Mac Medium One Mac account
Google Family Link Free Easy Very good on Chrome OS Low One Chromebook
Browser extension (BlockSite etc.) Free Easy Weak - one browser, one profile Very high One browser
Allowlist parental control app Paid Easy Very good, system-wide Low Per device, all browsers

The pattern is the same one that shows up with every site: the further down the stack you block - browser, then OS, then network - the harder the block is to defeat. A browser extension dies the moment your child opens a different browser. A hosts file dies to the admin password. A DNS block dies to a phone hotspot. Nothing covers everything, so match the level to how determined the child is, and layer where you can.

The TikTok Domains to Block

Blocking tiktok.com alone gets you most of the way, which is not true of YouTube. But the site pulls video and interface pieces from separate CDN hostnames, and there are regional and short-link domains worth catching. Here's a practical list for a hosts file, a router block list or a DNS denylist:

tiktok.com
www.tiktok.com
m.tiktok.com
vm.tiktok.com
vt.tiktok.com
ads.tiktok.com
seller.tiktok.com
tiktokv.com
tiktokcdn.com
tiktokcdn-us.com
p16-sign-va.tiktokcdn.com
p16-sign-sg.tiktokcdn.com
v16-webapp.tiktok.com
v19-webapp.tiktok.com
byteoversea.com
ibytedtos.com
musical.ly
www.musical.ly

What these do: vm.tiktok.com and vt.tiktok.com are the short links people paste into group chats, and missing them is the most common gap. tiktokcdn.com and tiktokv.com carry video and app traffic - block them and embedded TikToks elsewhere on the web stop playing, not just the site. musical.ly is the legacy domain from TikTok's predecessor and still redirects. The p16-sign-* and v1x-webapp hostnames are examples of the numbered CDN nodes TikTok rotates through; there are many more than the two or three you can list by hand.

The wildcard caveat, stated plainly: hosts files do not support wildcards. Writing *.tiktokcdn.com in a hosts file does nothing at all - the line is simply ignored. Every subdomain must be listed individually, and TikTok has more CDN subdomains than you will ever enumerate. This is the structural weakness of the hosts file method and the reason DNS filtering is better if you're willing to set it up: NextDNS, CleanBrowsing and most router filters do accept wildcard rules, so one *.tiktokcdn.com entry catches the whole rotating set. Several DNS services also ship a ready-made "TikTok" toggle in their blocklists, which is the least-effort version of this whole section.

If you only want the site gone and don't care about embedded clips elsewhere, the first six lines of that list are enough. Add the CDN entries when you find video still playing somewhere unexpected.

How to Block TikTok on Windows 10 and 11

Two free routes, plus the app cleanup.

Hosts file (works in every browser)

  1. Right-click Notepad and choose Run as administrator. Skip this and your save will silently fail.
  2. File > Open, set the file-type filter to All Files, and open C:\Windows\System32\drivers\etc\hosts
  3. Add a line per domain, prefixed with 127.0.0.1:
127.0.0.1 tiktok.com
127.0.0.1 www.tiktok.com
127.0.0.1 m.tiktok.com
127.0.0.1 vm.tiktok.com
127.0.0.1 vt.tiktok.com
127.0.0.1 tiktokv.com
127.0.0.1 tiktokcdn.com
127.0.0.1 musical.ly
127.0.0.1 www.musical.ly
  1. Save with no .txt extension - the file must stay named hosts
  2. Open Command Prompt and run ipconfig /flushdns
  3. Test in a browser you haven't used recently, and in an InPrivate/Incognito window

If TikTok still loads, the usual culprit is the browser's own encrypted DNS. In Chrome, go to Settings > Privacy and security > Security and turn off Use secure DNS; do the same in Edge and Firefox. With secure DNS on, the browser resolves names itself over HTTPS and never consults your hosts file.

Microsoft Family Safety

  1. Settings > Accounts > Family, and add your child's Microsoft account
  2. Go to family.microsoft.com and select the child
  3. Open Content filters > Web and search
  4. Turn on the web filter and add tiktok.com under blocked sites

Be realistic about this one. Enabling web filtering also prevents Chrome and Firefox from launching under that account at all - that's how Microsoft enforces its Edge-only filtering. Plenty of families find that too disruptive, switch it off, and end up with no protection at all. Free and easy, but the weakest Windows option.

Remove the desktop app

Settings > Apps > Installed apps, find TikTok, uninstall. Then either sign the child's account out of the Microsoft Store or, on Windows Pro, use Group Policy to restrict Store installs. On Home edition the practical control is simply removing admin rights.

The one step that matters more than any of the above: make your child's account a Standard user, not an Administrator. Every Windows method on this page is undone in under a minute by someone with admin rights, and reversing a hosts file is a two-minute web search.

How to Block TikTok on a Mac

macOS gives you the strongest free built-in option of the three platforms, because Screen Time's web restrictions apply at the account level rather than per-browser.

  1. Open System Settings > Screen Time and pick your child's account from the family selector at the top
  2. Turn Screen Time on, then open Content & Privacy
  3. Enable it, and open the web content section (Store, Web, Siri & Game Center Content on recent macOS versions)
  4. Set Access to Web Content to Limit Adult Websites, then click Customize
  5. Under Restricted, add https://www.tiktok.com and https://m.tiktok.com
  6. Back in Screen Time, choose Lock Screen Time Settings and set a passcode that is not your login password

Better still, choose Allowed Websites Only instead of Limit Adult Websites. That flips the whole thing into an allowlist - only the sites you name load at all. It's blunt, but for a younger child it is dramatically more durable, because it fails closed on every domain you didn't think of, including ones that don't exist yet.

You can also add a time limit rather than a block: under App & Website Activity you can set a daily limit for a specific website. Thirty minutes of TikTok that stops on its own is a very different conversation from zero.

Hosts file on Mac

  1. Open Terminal (Applications > Utilities)
  2. Run sudo nano /etc/hosts and enter your password
  3. Add the same 127.0.0.1 lines from the Windows section
  4. Control+O then Return to save, Control+X to exit
  5. Run sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder

Same caveat: this only holds if the child's macOS account is Standard, not Administrator. Check System Settings > Users & Groups. And turn off secure DNS in Chrome and Firefox, exactly as on Windows.

How to Block TikTok on a Chromebook

Chrome OS has no editable hosts file and no conventional third-party filtering software. That sounds limiting, and it's actually the platform where a block holds best - a child can't install their way past a managed account.

  1. Install Family Link on your phone and add your child's Google account to your family group
  2. Confirm that same account is the one signed in on the Chromebook
  3. In Family Link, select your child, then Controls > Content restrictions > Google Chrome
  4. Choose Try to block explicit sites (blocklist) or Only allow approved sites (allowlist)
  5. Open Manage sites > Blocked and add tiktok.com, m.tiktok.com, vm.tiktok.com and vt.tiktok.com
  6. Back under Controls, open Apps and block the TikTok Android app, or set it to a zero time limit

Three Chromebook gotchas, and each one on its own is enough to make the block useless:

  • The Android app ignores your Chrome settings. Step 6 is not optional if the Play Store is enabled. Better still, turn the Play Store off entirely if your child doesn't need it.
  • Guest mode bypasses everything. A guest session has no managed account and therefore no restrictions. Disable Guest browsing in the Chromebook's sign-in settings.
  • A second Google account added to the device is unmanaged. Restrict sign-in to your child's account only.

Do those three and a Chromebook block genuinely holds. Miss any one and you've configured decoration.

Router and DNS Blocking (Whole House)

Blocking at the network covers every device at once - the laptop, the tablet, the console - without touching each one.

Router blocking: sign in at 192.168.1.1 or 192.168.0.1, find Parental Controls, Access Restrictions or Website Blocking, and add the domains above. Quality varies enormously between routers; many consumer models only match unencrypted requests and quietly fail against HTTPS, which is nearly all traffic now.

DNS filtering is the more reliable version of the same idea and the one I'd actually recommend. Create a free account with NextDNS, CleanBrowsing or OpenDNS Home, point your router's DNS at theirs, and either flip their built-in TikTok toggle or add wildcard rules like *.tiktok.com and *.tiktokcdn.com. This is where wildcards finally work, which solves the CDN problem the hosts file can't.

Both share the same two limits. They apply to everyone in the house, adults included, and they stop the instant a device leaves your Wi-Fi. A laptop is portable, so a network block is a good second layer and never the only layer - at school, at a friend's house, or on a phone hotspot, it simply isn't there. Put the primary block on the device.

TikTok's Own Controls, Honestly Assessed

TikTok ships parental features. They're worth using and they are not a block. I'm going to describe where these live in general terms rather than quoting exact menu labels, because TikTok reorganises its settings frequently and a stale menu path is worse than none.

Family Pairing links your TikTok account to your teen's, letting you set daily screen time, restrict direct messages, and enable content filtering remotely. It's the most substantial of TikTok's tools. The catch is fundamental: it's cooperative. Pairing requires your teen to scan a QR code from their device, and depending on age it can often be unlinked from their side - typically with a notification to you, which is a deterrent rather than a barrier. It also does nothing about a second account created with a different email, which takes about ninety seconds.

Screen time limits let you cap daily use and set periods where the app locks. Genuinely useful for a teenager who wants help stopping - the passcode makes it a real speed bump rather than a suggestion. Same weakness: it's account-level, so a new account starts with a clean slate, and it does not touch tiktok.com in a browser if they simply log out.

Restricted Mode filters content TikTok judges unsuitable for younger viewers. Turn it on. Also understand what it is: an automated content classifier operating over an enormous, constantly refreshed catalogue. It will miss things. Treating it as a safety guarantee is the mistake; treating it as one useful layer among several is correct.

The honest summary: TikTok's tools are built for a teen who accepts the arrangement. For a cooperative fifteen-year-old who wants to cut down, Family Pairing plus a screen time limit may be all you need, and it's a far better experience than a hard block. For a younger child, or one actively trying to get around you, they are not the mechanism - use the OS or network methods above.

How Kids Bypass TikTok Blocks

Assume the block gets tested. Here's what's actually tried, and the fix for each.

Bypass Why it works What to do
Open a different browser Extension and Family Safety blocks are per-browser Block at OS or network level instead
Phone hotspot / mobile data Your router and DNS aren't involved at all On-device block; manage the phone separately
VPN or proxy site Tunnels around DNS and router filtering entirely Remove admin rights so VPN apps can't install; block known VPN domains at your DNS filter
DNS-over-HTTPS in the browser Chrome and Firefox resolve names themselves, ignoring hosts file and router DNS Turn off "Use secure DNS" in every browser; block DoH resolvers at the router
Editing the hosts file back Trivial with admin rights, and the instructions are everywhere Make the child's account a Standard user
Embedded TikToks on other sites The clip plays inside Reddit, Discord or a news article, not on tiktok.com Block tiktokcdn.com and tiktokv.com as well
Short links (vm.tiktok.com) A shared link resolves through a domain you didn't list Include vm. and vt. in your list
Third-party TikTok viewers and downloaders Mirror sites that serve TikTok content from unrelated domains Allowlist mode - these are endless to chase one at a time
Guest mode or a second account Sign-in-based controls don't apply to an unmanaged session Disable Guest mode; restrict sign-in to the managed account
A second TikTok account Family Pairing and screen limits are per-account These tools can't solve this; a domain block can

Look at that table as a whole and the shape of the problem is obvious. Most rows are variations of one thing: content reached the machine by a route you hadn't enumerated. You block a domain, they find another. You block the mirror, a new mirror appears next month. You are maintaining a list against an adversary who only needs to find one gap, and who has more evenings free than you do.

Allowlisting is structurally different, not just stricter. A blocklist says "everything is permitted except these" and therefore fails open - anything new, unknown or freshly registered gets through by default. An allowlist says "nothing is permitted except these" and fails closed. A TikTok mirror that launched this morning is blocked automatically, not because you knew about it, but because you never approved it. That's why macOS's Allowed Websites Only, Family Link's approved-sites mode, and allowlist-first software hold up over months while a hosts file needs constant patching.

The cost is real: an allowlist needs maintenance up front and produces "can you add this site?" requests. Whether that's the right trade depends on your child's age and how much energy you want to spend on the arms race.

3Eyes works this way on Windows and Mac - everything is blocked system-wide by default across every browser, and you approve what's allowed from the parent dashboard, so new TikTok mirrors and proxies never need to be discovered to be stopped.

Block It or Limit It? The Conversation Part

Worth separating two different decisions: whether TikTok is available at all, and how long it's available for.

For a child under about twelve, a straight block is defensible and easy to explain. TikTok's own minimum age is thirteen; you're not imposing an unusual rule, you're applying the platform's. There's no negotiation to have and no social cost to speak of, because their friends mostly aren't on it either.

For a fourteen- or sixteen-year-old, an abrupt total block often backfires, and it's worth understanding why rather than just being warned about it. Three things tend to happen. First, TikTok is where a lot of teenage social life is transacted - the running jokes, the references, the group chat - so cutting it off has a genuine social cost that reads to them as disproportionate. Second, a block imposed without discussion becomes a legitimacy problem: the rule feels arbitrary, and defeating an arbitrary rule feels like fair play rather than deceit. Third, and most practically, a determined teenager with a phone on mobile data can route around anything you do to a computer in about four seconds, so what you've often achieved is not less TikTok but less visible TikTok, and a teen less inclined to tell you what they're seeing on it.

None of that means never block. It means the block works best when it's the conclusion of a conversation rather than the opening move, and when it's proportionate to a specific problem you can both name - sleep, homework, a bad experience in the comments - rather than a general disapproval.

The middle options are usually stronger with teenagers: a daily time limit, a cut-off an hour before bed, TikTok on the laptop but not in the bedroom. Limits with a stated reason survive contact with an actual teenager far better than a ban with none.

One more honest note: blocking TikTok on the computer does not block it on your child's phone. They're separate devices with separate controls. If your teen has a phone, the computer block is one part of the picture, and iOS Screen Time or Android Family Link handle the other part. 3Eyes covers computers - Windows and Mac - and its parent app runs on iPhone; it does not monitor your child's phone. Anyone telling you a single product covers every screen your child touches is overselling.

Frequently Asked Questions

How do I block TikTok on Windows 10 or 11? Edit C:\Windows\System32\drivers\etc\hosts in Notepad run as administrator, add the TikTok domains pointed at 127.0.0.1, run ipconfig /flushdns, and turn off "Use secure DNS" in each installed browser. Then uninstall the Microsoft Store app and make the child's account a Standard user. Steps are identical on Windows 10 and 11.

How do I block TikTok on a Mac? System Settings > Screen Time > Content & Privacy, set web access to Limit Adult Websites, add tiktok.com under Restricted, and lock Screen Time with a passcode that isn't your login password. Allowed Websites Only is stronger if you'll tolerate an allowlist.

How do I block TikTok on a Chromebook? Google Family Link: Controls > Content restrictions > Google Chrome > Manage sites > Blocked. Chrome OS has no hosts file. You must also block the TikTok Android app, disable Guest mode, and restrict sign-in to your child's account - miss any of those and the block is bypassed in seconds.

Can my child use TikTok without downloading the app? Yes - that's the normal way on a computer. tiktok.com in any browser gives nearly the full experience with no install and no account needed to scroll. This is why domain blocking works so well on computers, and why "I checked, the app isn't installed" isn't reassurance.

Why does TikTok still load after I blocked it? Almost always the browser's secure DNS routing around your hosts file or router - turn off "Use secure DNS" in Chrome, Edge and Firefox. Otherwise you've missed a domain: add m.tiktok.com, vm.tiktok.com and vt.tiktok.com. If videos play embedded on other sites, add tiktokcdn.com.

Can I block TikTok but allow other social media? Yes with any per-domain method - blocking tiktok.com has no effect on anything else. The reverse is harder: blocking "social media" as a category needs a DNS filter with category lists or allowlist software, because the category has no fixed membership.

Does TikTok Family Pairing stop my teen using TikTok? No. It sets limits and filters within their account, and depending on age it can often be unlinked from their side. It also doesn't apply to a second account made with a different email. Use it as a cooperative tool with a willing teen, not as an enforcement mechanism.

Will blocking TikTok on the computer stop it on their phone? No. Every method here is per-device or per-network, and a phone on mobile data ignores your home Wi-Fi entirely. Phones need iOS Screen Time or Android Family Link, set up separately.

Is there a free way to block TikTok on all devices at once? The free tiers of NextDNS, CleanBrowsing and OpenDNS Home, applied at your router, cover every device on your Wi-Fi. The limits: it applies to adults too, and it stops working the moment a device leaves the house.

If you'd rather not maintain a domain list that TikTok's CDN will outrun, 3Eyes takes the allowlist approach on Windows and Mac - blocked by default across every browser, with you approving what's allowed. See pricing for plan details and the 14-day free trial.