Want to block adult and explicit content on Google for your home or school? Google SafeSearch can help. This guide walks you through how to configure Google SafeSearch using VIP mapping for network-wide enforcement.
What Is Google SafeSearch VIP?
Google offers a SafeSearch Virtual IP (VIP) service that forces strict search results on all devices connected to your network. This bypasses local browser settings and can’t be disabled at the user level.
⚠️ Important: SafeSearch only affects Google. Your kids can still visit other search engines or direct adult sites unless those are blocked separately.
If You’re Using CleanBrowsing
If you’re a CleanBrowsing user, good news — Google SafeSearch is automatically enforced. You don’t need to configure anything manually.
How Google SafeSearch VIP Works
The VIP method maps Google’s domains to a special IP: 216.239.38.120. This IP enforces SafeSearch using Google’s own infrastructure.
You can apply this either:
- At the network level via your router or DNS server
- On individual devices via the
hostsfile
Option 1: Enforcing SafeSearch via the Hosts File
Edit the hosts file on your device:
On Windows:C:\Windows\System32\drivers\etc\hosts
On Mac/Linux:/etc/hosts
Add the following lines:
216.239.38.120 www.google.com
216.239.38.120 www.google.ca
216.239.38.120 plus.google.comAfter saving the file, visit https://www.google.com/safesearch to verify SafeSearch is enabled and cannot be turned off.
Option 2: Enforcing SafeSearch at the Router Level
- Login to your router admin panel.
- Look for a setting called DNS Mapping, Static DNS, or DHCP Options.
- Add DNS mappings for the following domains:
216.239.38.120 www.google.com
216.239.38.120 www.google.ca
216.239.38.120 plus.google.comYou must map each Google domain individually. The more domains you cover, the more effective the protection.