Google’s SafeSearch Blur feature gives users options to filter, blur, or turn off explicit image filtering in search results. While this is a helpful addition, some parents, schools, and organizations need a way to fully enforce SafeSearch—without giving users the option to switch settings.
If you’re looking to lock SafeSearch and prevent users from changing the Filter/Blur/Off settings, here’s what you need to do.
Why SafeSearch Can Still Be Changed on Some Networks
Even if SafeSearch appears locked in some environments, users may still see options to adjust filtering due to:
| User-Specific Settings | If a user is logged into a Google account, their account settings may override network settings. |
| Google SafeSearch Blur Feature | The “Blur” option is a recent change that works even when SafeSearch is not fully enabled. |
| Lack of Network-Level Enforcement | If SafeSearch is not enforced at the router or DNS level, users can easily bypass restrictions. |
| Insecure Connections | Some filtering methods only work over unencrypted (non-HTTPS) traffic, making them ineffective on modern networks. |
To completely lock SafeSearch and prevent Blur/Off settings from being changed, follow these steps:
Step 1: Use DNS Filtering to Enforce SafeSearch
The most effective way to lock Google SafeSearch is to use a DNS filtering service like CleanBrowsing. These services redirect all search traffic to Google’s strict SafeSearch servers.
Note: SafeSearch is enabled on paid accounts when the Adult / Pornography filter is enabled.
How to Set Up SafeSearch via DNS:
- Change DNS Settings on Your Router
- Use one of the following DNS providers that enforce SafeSearch:
- CleanBrowsing (Family Filter)
- IPv4:
185.228.168.168&185.228.169.168 - IPv6:
2a0d:2a00:1::&2a0d:2a00:2::
- IPv4:
- CleanBrowsing (Family Filter)
- Use one of the following DNS providers that enforce SafeSearch:
- Block Bypass Methods
- Restrict access to alternative DNS services (e.g., 8.8.8.8, 1.1.1.1) using firewall rules on your router.
- Disable users from manually changing DNS settings on their devices.
- Test SafeSearch Enforcement
- Visit Google SafeSearch and verify that SafeSearch is locked.
Step 2: Block Google Account Overrides (For Schools & Organizations)
Google allows administrators to enforce SafeSearch via Google Workspace for managed devices. If you’re an administrator, use:
- Google Admin Console → “Devices” → “Chrome” → “Safe Browsing” → Enable Forced SafeSearch
- This prevents logged-in users from changing SafeSearch settings.
For personal networks, parental control solutions like Google Family Link can also enforce SafeSearch per user.
Step 3: Use Firewall Rules to Restrict Unsafe Access
Even with DNS filtering, users might attempt to bypass SafeSearch by accessing alternative search engines or using VPNs. To prevent this:
- Block direct access to search engines that don’t support forced SafeSearch, such as DuckDuckGo.
- Restrict access to proxy and VPN services to prevent circumvention.
- Force HTTPS traffic through a firewall filter to ensure users can’t override DNS settings with encrypted DNS (DoH/DoT).
Example firewall rules:
- Allow only DNS traffic to your chosen filtering provider.
- Block outbound DoH requests (e.g.,
dns.google,mozilla.cloudflare-dns.com). - Block known VPN services used for bypassing filters.
Step 4: Device-Level SafeSearch Enforcement
For individual devices, configure SafeSearch in:
- Windows
- Open Registry Editor (
regedit) - Navigate to
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome - Add a DWORD entry:
"ForceSafeSearch"=1
- Open Registry Editor (
- macOS
- Use Screen Time Restrictions to lock SafeSearch settings.
- Mobile Devices
- Android & iOS: Use Google Family Link to enforce SafeSearch on child accounts.
- Use mobile security apps that provide DNS-based filtering.
Will This Disable the ‘Blur’ Option?
No, but it will enforce SafeSearch at the strictest level. The “Blur” option is a separate feature introduced by Google, which automatically blurs explicit content, but it does not replace SafeSearch filtering.
Key Takeaways:
✅ SafeSearch enforcement prevents explicit content from appearing.
✅ Users will still see the “Blur” option, but explicit images won’t load.
✅ The “Off” option will be ineffective if SafeSearch is locked via DNS.
If you need to remove the Blur option entirely, Google does not currently offer a direct way to do so, but organizations can enforce strict browsing policies using Google Workspace or parental controls.
By combining DNS filtering, firewall restrictions, and device settings, you can lock SafeSearch and prevent users from turning off filtering. While the “Blur” option may still appear in Google’s interface, users will not be able to disable SafeSearch filtering.
For organizations, schools, and parents looking for a reliable solution, using CleanBrowsing’s SafeSearch enforcement and blocking DNS bypass methods ensures long-term control over search results.
Would you like help setting up SafeSearch enforcement on your network? Let me know in the comments!