How to Enable Google SafeSearch: Step-by-Step Setup Guide for Parents & Schools

Want to block adult and explicit content on Google for your home or school? Google SafeSearch can help. This guide walks you through how to configure Google SafeSearch using VIP mapping for network-wide enforcement.

What Is Google SafeSearch VIP?

Google offers a SafeSearch Virtual IP (VIP) service that forces strict search results on all devices connected to your network. This bypasses local browser settings and can’t be disabled at the user level.

⚠️ Important: SafeSearch only affects Google. Your kids can still visit other search engines or direct adult sites unless those are blocked separately.

If You’re Using CleanBrowsing

If you’re a CleanBrowsing user, good news — Google SafeSearch is automatically enforced. You don’t need to configure anything manually.

How Google SafeSearch VIP Works

The VIP method maps Google’s domains to a special IP: 216.239.38.120. This IP enforces SafeSearch using Google’s own infrastructure.

You can apply this either:

• At the network level via your router or DNS server
• On individual devices via the hosts file

Option 1: Enforcing SafeSearch via the Hosts File

Edit the hosts file on your device:

On Windows:
C:\Windows\System32\drivers\etc\hosts

On Mac/Linux:
/etc/hosts

Add the following lines:

216.239.38.120 www.google.com
216.239.38.120 www.google.ca
216.239.38.120 plus.google.com

After saving the file, visit https://www.google.com/safesearch to verify SafeSearch is enabled and cannot be turned off.

Option 2: Enforcing SafeSearch at the Router Level

1. Login to your router admin panel.
2. Look for a setting called DNS Mapping, Static DNS, or DHCP Options.
3. Add DNS mappings for the following domains:

216.239.38.120 www.google.com  
216.239.38.120 www.google.ca  
216.239.38.120 plus.google.com

You must map each Google domain individually. The more domains you cover, the more effective the protection.