Recommended Free Tools
Windows 11 does not have one universal “block adult content” switch. The right method depends on what you need to control:
- A child’s Microsoft account: use Microsoft Family Safety with Microsoft Edge.
- Search results only: enable Bing or Google SafeSearch.
- One unmanaged PC: force SafeSearch with the Windows hosts file.
- A managed business PC: use Microsoft Edge policy or Microsoft Defender web content filtering.
The important limitation is that Microsoft Family Safety’s web filter is browser-specific. It filters Microsoft Edge, not Chrome, Firefox, or every application that can open a website.
Method 1: Block inappropriate websites with Microsoft Family Safety
Microsoft Family Safety is the most suitable built-in option for a family computer. The child or family member must use a Microsoft account and browse with Microsoft Edge. The filtering applies to Windows 10, Windows 11, Xbox One, and Microsoft Family Safety.
Turn on the Edge web filter
- Sign in to your Microsoft account at Microsoft Family Safety.
- Select Family Safety from the left-hand menu.
- Find the family member, select the … menu, and choose Go to overview.
- Select Edge.
- Turn on Filter inappropriate websites and searches.
Microsoft says this blocks mature websites and filters Bing searches by default. The child must be signed in to Microsoft Edge with the monitored Microsoft account; using another account can prevent the expected restrictions from applying.
Free tools Windows power users keep installed
One-click scans. No signup required.
#1 Best Overall
- A New Way to WiFi: Deco Mesh technology gives you a better WiFi experience in all directions with faster WiFi speeds and strong WiFi signal to cover your whole home.
- Better Coverage than traditional WiFi routers: Deco S4 2 units work seamlessly to create a WiFi mesh network that can cover homes up to 3,800 sq. ft. No Dead Zone anymore.
- Seamless and Stable WiFi Mesh: Rather than wifi range extender that need multiple network names and passwords, Deco S4 allows you to enjoy seamless roaming throughout the house, with a single network name and password.
- Incredibly fast 3× 3 6Stream AC1900 speeds makes the deco capable of providing connectivity for up to 75 devices.
- With advanced Deco Mesh Technology, units work together to form a unified network with a single network name. Devices automatically switch between Decos as you move through your home for the fastest possible speeds
Block individual websites
From the same Edge view, add domains under Blocked Sites. Use this when you need to block a particular site rather than rely only on Microsoft’s mature-content classification.
Create an allowlist
For a more restrictive setup, turn on Only use allowed websites. This changes the arrangement from “block known inappropriate sites” to “permit only sites that I explicitly approve.” You can also enable Always allow educational websites, which is a separate setting.
Use the Family Safety app
In the Microsoft Family Safety app:
- Select the family member.
- Open Content filters.
- Turn on the Only use allowed websites slider.
- Add or select the websites to allow or block.
Check the browser restriction
A common failure is leaving another browser available. In Family Safety, open App and game filters and check whether Chrome, Firefox, or another browser has been allowed or unblocked. If the child can switch to another browser, the Edge web filter does not protect that browsing session.
Family Safety is therefore not a system-wide adult-content filter for every Windows browser. If you need Chrome and Firefox covered too, use an enterprise web-filtering product, router-level filtering, or another solution designed to filter traffic across browsers.
Method 2: Turn on Bing SafeSearch
Bing SafeSearch filters content in Bing search results. It does not stop someone from entering an adult website’s address directly into the browser.
- Open Bing.
- Select Settings.
- Choose SafeSearch.
- Select Strict.
- Select Save.
The settings mean:
| Setting | What it filters |
|---|---|
| Strict | Explicit text, images, and videos |
| Moderate | Explicit images and videos, but not explicit text; this is the default |
| Off | Does not filter explicit content |
Bing may automatically set SafeSearch to Strict for users under 18, depending on local law and region. That behavior can vary by country.
Rank #2
- 𝐅𝐮𝐭𝐮𝐫𝐞-𝐑𝐞𝐚𝐝𝐲 𝐖𝐢-𝐅𝐢 𝟕 - Designed with the latest Wi-Fi 7 technology, featuring Multi-Link Operation (MLO), Multi-RUs, and 4K-QAM. Achieve optimized performance on latest WiFi 7 laptops and devices, like the iPhone 16 Pro, and Samsung Galaxy S24 Ultra.
- 𝟔-𝐒𝐭𝐫𝐞𝐚𝐦, 𝐃𝐮𝐚𝐥-𝐁𝐚𝐧𝐝 𝐖𝐢-𝐅𝐢 𝐰𝐢𝐭𝐡 𝟔.𝟓 𝐆𝐛𝐩𝐬 𝐓𝐨𝐭𝐚𝐥 𝐁𝐚𝐧𝐝𝐰𝐢𝐝𝐭𝐡 - Achieve full speeds of up to 5764 Mbps on the 5GHz band and 688 Mbps on the 2.4 GHz band with 6 streams. Enjoy seamless 4K/8K streaming, AR/VR gaming, and incredibly fast downloads/uploads.
- 𝐖𝐢𝐝𝐞 𝐂𝐨𝐯𝐞𝐫𝐚𝐠𝐞 𝐰𝐢𝐭𝐡 𝐒𝐭𝐫𝐨𝐧𝐠 𝐂𝐨𝐧𝐧𝐞𝐜𝐭𝐢𝐨𝐧 - Get up to 2,400 sq. ft. max coverage for up to 90 devices at a time. 6x high performance antennas and Beamforming technology, ensures reliable connections for remote workers, gamers, students, and more.
- 𝐔𝐥𝐭𝐫𝐚-𝐅𝐚𝐬𝐭 𝟐.𝟓 𝐆𝐛𝐩𝐬 𝐖𝐢𝐫𝐞𝐝 𝐏𝐞𝐫𝐟𝐨𝐫𝐦𝐚𝐧𝐜𝐞 - 1x 2.5 Gbps WAN/LAN port, 1x 2.5 Gbps LAN port and 3x 1 Gbps LAN ports offer high-speed data transmissions.³ Integrate with a multi-gig modem for gigplus internet.
- 𝐎𝐮𝐫 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐂𝐨𝐦𝐦𝐢𝐭𝐦𝐞𝐧𝐭 - TP-Link is a signatory of the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Secure-by-Design pledge. This device is designed, built, and maintained, with advanced security as a core requirement.
Method 3: Force Bing SafeSearch on one Windows 11 PC
On a shared or unmanaged PC, you can map Bing’s normal address to its strict SafeSearch endpoint in the Windows hosts file. This forces searches on that computer, but it is still a search filter rather than a general website blocker.
Get Bing’s current SafeSearch IP address
- Press the Windows key, type Command Prompt, and open it.
- Run ping strict.bing.com.
- Note the IP address returned. Do not copy an old address from an online guide: Microsoft’s example address is illustrative and can change.
Edit the hosts file as administrator
- Press the Windows key and type Notepad.
- Right-click Notepad and select Run as administrator.
- Approve the User Account Control prompt with Yes.
- In Notepad, choose File > Open.
- Browse to C:\Windows\System32\drivers\etc\hosts.
Notepad may be showing only text files. Change the file-type menu to All files so that the file named hosts appears. If Windows is installed on another drive or directory, run cd /d %systemroot%\system32\drivers\etc in Command Prompt to locate the correct folder.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsAdd this line at the end of the file, replacing IP_ADDRESS with the address returned by ping:
IP_ADDRESS www.bing.com
To also force SafeSearch in the Microsoft Edge sidebar, add:
IP_ADDRESS edgeservices.bing.com
Save the file and test Bing. The hosts file needs an actual IP address; entering strict.bing.com as though it were a CNAME will not work. Microsoft also warns against simply blocking Bing’s IP address, because that can block other Microsoft domains that share the address.
Only a local PC administrator can undo this hosts-file change. That makes it useful on a computer where the everyday account is not an administrator, but it does not protect other devices on the network.
Rank #3
- 𝐅𝐮𝐭𝐮𝐫𝐞-𝐏𝐫𝐨𝐨𝐟 𝐘𝐨𝐮𝐫 𝐇𝐨𝐦𝐞 𝐖𝐢𝐭𝐡 𝐖𝐢-𝐅𝐢 𝟕: Powered by Wi-Fi 7 technology, enjoy faster speeds with Multi-Link Operation, increased reliability with Multi-RUs, and more data capacity with 4K-QAM, delivering enhanced performance for all your devices.
- 𝐁𝐄𝟑𝟔𝟎𝟎 𝐃𝐮𝐚𝐥-𝐁𝐚𝐧𝐝 𝐖𝐢-𝐅𝐢 𝟕 𝐑𝐨𝐮𝐭𝐞𝐫: Delivers up to 2882 Mbps (5 GHz), and 688 Mbps (2.4 GHz) speeds for 4K/8K streaming, AR/VR gaming & more. Dual-band routers do not support 6 GHz. Performance varies by conditions, distance, and obstacles like walls.
- 𝐔𝐧𝐥𝐞𝐚𝐬𝐡 𝐌𝐮𝐥𝐭𝐢-𝐆𝐢𝐠 𝐒𝐩𝐞𝐞𝐝𝐬 𝐰𝐢𝐭𝐡 𝐃𝐮𝐚𝐥 𝟐.𝟓 𝐆𝐛𝐩𝐬 𝐏𝐨𝐫𝐭𝐬 𝐚𝐧𝐝 𝟑×𝟏𝐆𝐛𝐩𝐬 𝐋𝐀𝐍 𝐏𝐨𝐫𝐭𝐬: Maximize Gigabitplus internet with one 2.5G WAN/LAN port, one 2.5 Gbps LAN port, plus three additional 1 Gbps LAN ports. Break the 1G barrier for seamless, high-speed connectivity from the internet to multiple LAN devices for enhanced performance.
- 𝐍𝐞𝐱𝐭-𝐆𝐞𝐧 𝟐.𝟎 𝐆𝐇𝐳 𝐐𝐮𝐚𝐝-𝐂𝐨𝐫𝐞 𝐏𝐫𝐨𝐜𝐞𝐬𝐬𝐨𝐫: Experience power and precision with a state-of-the-art processor that effortlessly manages high throughput. Eliminate lag and enjoy fast connections with minimal latency, even during heavy data transmissions.
- 𝐂𝐨𝐯𝐞𝐫𝐚𝐠𝐞 𝐟𝐨𝐫 𝐄𝐯𝐞𝐫𝐲 𝐂𝐨𝐫𝐧𝐞𝐫 - Covers up to 2,000 sq. ft. for up to 60 devices at a time. 4 internal antennas and beamforming technology focus Wi-Fi signals toward hard-to-reach areas. Seamlessly connect phones, TVs, and gaming consoles.
Method 4: Force Google SafeSearch on one Windows 11 PC
Google has a similar device-level method. It maps Google’s search domains to forcesafesearch.google.com through the hosts file.
- Open Command Prompt and run ping forcesafesearch.google.com.
- Copy the IP address returned.
- Open Notepad as administrator and open C:\Windows\System32\drivers\etc\hosts.
- Add an entry such as IP_ADDRESS www.google.com #forcesafesearch, replacing IP_ADDRESS with the current address returned by the command.
Add equivalent entries for regional domains used on the PC, such as www.google.co.uk. Otherwise, a user may bypass the mapping by using a different Google country domain.
After saving the file, visit Google’s SafeSearch guidance and confirm that SafeSearch is on and cannot be turned off. As with Bing, this filters search results; it does not block direct access to adult websites.
Method 5: Enforce Bing SafeSearch with Microsoft Edge policy
On a managed Windows 11 device, administrators can enforce Bing SafeSearch in Microsoft Edge. The policy is named Enforce Bing SafeSearch, with the Group Policy name ForceBingSafeSearch.
In Group Policy, find it under Administrative Templates/Microsoft Edge.
The policy values are:
| Value | Mode |
|---|---|
| 0 | No restrictions |
| 1 | Moderate |
| 2 | Strict |
The corresponding registry location is SOFTWARE\Policies\Microsoft\Edge. Create a REG_DWORD value named ForceBingSafeSearch and set it to 2 for Strict mode. Strict mode filters adult text, images, and videos. Moderate mode filters adult images and videos but not adult text. Once configured, users cannot change the enforced value in Bing.
Rank #4
- DUAL-BAND WIFI 6 ROUTER: Wi-Fi 6(802.11ax) technology achieves faster speeds, greater capacity and reduced network congestion compared to the previous gen. All WiFi routers require a separate modem. Dual-Band WiFi routers do not support the 6 GHz band.
- AX1800: Enjoy smoother and more stable streaming, gaming, downloading with 1.8 Gbps total bandwidth (up to 1200 Mbps on 5 GHz and up to 574 Mbps on 2.4 GHz). Performance varies by conditions, distance to devices, and obstacles such as walls.
- CONNECT MORE DEVICES: Wi-Fi 6 technology communicates more data to more devices simultaneously using revolutionary OFDMA technology
- EXTENSIVE COVERAGE: Achieve the strong, reliable WiFi coverage with Archer AX1800 as it focuses signal strength to your devices far away using Beamforming technology, 4 high-gain antennas and an advanced front-end module (FEM) chipset
- OUR CYBERSECURITY COMMITMENT: TP-Link is a signatory of the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Secure-by-Design pledge. This device is designed, built, and maintained, with advanced security as a core requirement.
This policy controls Bing SafeSearch only. It is not a general adult-website blocking policy. See Microsoft’s Enforce Bing SafeSearch policy documentation.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Method 6: Use Microsoft Defender web content filtering for business PCs
Microsoft Defender web content filtering is the appropriate Microsoft option when an organization needs coverage across supported browsers. It is available through Microsoft Defender for Endpoint and Microsoft Defender for Business, with qualifying subscriptions including Microsoft 365 E5, Microsoft 365 E3, Microsoft 365 Business Premium, Windows 10/11 Enterprise E5, Microsoft Defender for Endpoint Plan 1 or Plan 2, Microsoft Defender for Business, and related education or Defender Suite plans. Access to the Microsoft Defender portal is required.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchMicrosoft lists support for Microsoft Edge, Chrome, Firefox, Brave, Opera, and Internet Explorer. Windows Defender SmartScreen and network protection must also be enabled.
Enable the feature
- Open the Microsoft Defender portal.
- Go to System > Settings > Endpoints > General > Advanced features.
- Turn on Web content filtering.
- Select Save preferences.
Create an adult-content policy
- In the Defender portal, open Settings > Endpoints > Rules > Web content filtering.
- Select + Add policy.
- Enter a policy name and select Next.
- Under Blocked categories, select Adult content.
- Select Next, choose the device-group scope, select Next, and select Submit.
The Adult content category includes child categories such as Nudity, Pornography / Sexually explicit, Sex education, Tasteless, and Violence. Blocking the whole parent category can therefore block legitimate health or sex-education resources. Review the category selection before assigning the policy.
New policies can take up to two hours to reach a device. Category filtering is not perfect: new websites may not yet be classified, classifications can be subjective, and a site’s category can change. For precise control over a particular domain, use a Custom Indicator. A custom allow indicator overrides a web-content-filtering block for that site.
Defender filtering may not work when a local proxy such as Fiddler masks the originating process name, and it does not function in isolated browser sessions such as Microsoft Defender Application Guard. Third-party-browser blocks are delivered through network protection and may show a system-level block message; Edge provides the more user-friendly in-browser experience. Microsoft documents that the current Edge block experience applies beginning with Microsoft Edge version 124. For details, see Microsoft’s web content filtering documentation.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Best Value
- A New Way to WiFi: Deco Mesh technology gives you a better WiFi experience in all directions with faster WiFi speeds and strong WiFi signal to cover your whole home.
- Better Coverage than traditional WiFi routers: Deco S4 three units work seamlessly to create a WiFi mesh network that can cover homes up to 5, 500 square feet. No dead zone anymore.
- Seamless and Stable WiFi Mesh: Rather than wifi range extender that need multiple network names and passwords, Deco S4 allows you to enjoy seamless roaming throughout the house, with a single network name and password.
- Incredibly fast 3× 3 6 Stream AC1900 speeds makes the deco capable of providing connectivity for up to 100 devices.
- With advanced Deco Mesh Technology, units work together to form a unified network with a single network name. Devices automatically switch between Decos as you move through your home for the fastest possible speeds.
Which method should you use?
| Situation | Best starting point | What it covers |
|---|---|---|
| Child uses a family Microsoft account | Microsoft Family Safety | Edge websites and Bing searches |
| You only need cleaner search results | Bing or Google SafeSearch | Search-result content only |
| One unmanaged Windows 11 PC | Hosts-file SafeSearch mapping | Forced Bing or Google search filtering on that PC |
| Company-managed Windows devices | Microsoft Defender web content filtering | Category-based filtering across supported browsers |
| Managed Edge-only environment | ForceBingSafeSearch policy | Enforced Bing SafeSearch |
For a child’s computer, Family Safety plus a non-administrator Windows account is the practical baseline. Add SafeSearch if the child uses Google. For a business, use Defender web content filtering rather than relying on a hosts-file edit on each workstation.
FAQ
Does Microsoft Family Safety block adult websites in Chrome?
No. Microsoft’s Family Safety web and search filters apply to Microsoft Edge when the family member is signed in with their Microsoft account. Chrome, Firefox, and other browsers are not covered by that browser-specific filter.
Does Bing SafeSearch block adult websites?
No. SafeSearch filters explicit content in Bing search results. It does not prevent a user from opening an adult website directly.
Why did my hosts-file SafeSearch setting stop working?
The SafeSearch endpoint’s IP address can change. Run ping strict.bing.com or ping forcesafesearch.google.com again and update the hosts entry with the current IP. Also check that Notepad was run as administrator and that the file was saved as hosts, not hosts.txt.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Can I use Microsoft Defender web content filtering at home?
It is intended for organizations using Microsoft Defender for Endpoint or Defender for Business with a qualifying subscription and portal access. Microsoft Family Safety is the consumer/family option.
Will Microsoft Defender’s Adult content category block sex-education sites?
It can. Microsoft lists Sex education among the child categories under Adult content, so review the policy and use exceptions or custom indicators where appropriate.
The Bottom Line
For a family PC, enable Microsoft Family Safety > family member > Go to overview > Edge > Filter inappropriate websites and searches, then remove or restrict other browsers under App and game filters. For search-only protection, set Bing or Google SafeSearch to Strict. Use hosts-file mappings when you need to force SafeSearch on one unmanaged PC, and use Microsoft Defender web content filtering for organization-wide, multi-browser control.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
