The Device You Didn’t Set Up
You’ve probably spent a solid chunk of time locking down your kid’s phone. Screen Time settings. Content filters. App approvals. Maybe you read one of those articles about it. Maybe you read our article about it. Either way — you did the work.
Then your kid walks through the front door with a Chromebook from school, drops it on the kitchen counter, and opens the lid.
And just like that, there’s a screen in your house that you didn’t buy, didn’t configure, and — here’s the fun part — can’t control. Not the browser settings, not the filtering software, not even which accounts are allowed to sign in. That’s all managed by your school’s IT department, hundreds of settings deep in a Google Admin console you’ll never see.
But it’s got a filter on it. The school said so. There was probably a flyer.
So it’s fine. Right?
Maybe. Probably not in the way you think.
Chromebooks make up roughly 60% of the education device market and are used in 93% of U.S. school districts. That means millions of kids are carrying the same kind of device home every day — a device that looks safe, sounds safe, and comes from a trusted institution. But the word “filtered” is doing a lot of heavy lifting in that sentence, and it doesn’t mean what most parents assume it means.
The Bouncer at the Door
Here’s the simplest way to think about how school Chromebook filtering works.
Imagine your kid’s Chromebook is a nightclub. (Stay with me.) The school’s filtering software — tools like GoGuardian, Securly, or Lightspeed Systems — acts as a bouncer at the door. When your kid tries to visit a website, the bouncer checks the address against a list. Adult content? Blocked. Gambling? Blocked. Known proxy sites? Blocked. Social media? Depends on the district.
Software that blocks access to websites by category (like "adult content" or "gambling") or by specific URL. On school Chromebooks, this usually runs as a Chrome browser extension pushed to the device by the school's IT department. Parents can't install, remove, or configure it.
The bouncer is pretty good — while the club is open. GoGuardian uses AI to categorize content in real time. Teachers can see every student’s active tab, close tabs remotely, even lock screens. All browsing data is logged. During school hours, on the school network, these tools are genuinely robust.
But here’s where the analogy gets uncomfortable.
What happens when the club closes for the night and your kid takes the bouncer home?
That depends entirely on how your district configured the software. Cloud-based filters — the Chrome extension variety — travel with the device. They work on your home Wi-Fi, at Grandma’s house, at the coffee shop. The bouncer is still standing at the door.
But some districts use network-level filtering instead — basically, a firewall that only works on the school’s own internet connection. The moment that Chromebook connects to your home Wi-Fi, the bouncer goes home. The door is wide open. And your district may not have told you which setup they use.
Your kid's Chromebook may be fully filtered at school and completely unfiltered at home — and you'd have no way of knowing unless you specifically ask the district which type of filtering they use.
The Part Where You Can’t Do Anything About It
OK, so maybe the filter has some gaps. You’re a resourceful parent. You’ll just install your own parental controls on the Chromebook, right?
No. You won’t. And this is the part that genuinely catches most parents off guard.
Google Family Link — the parental control tool designed specifically for Chromebooks — does not work on school Google Workspace accounts. At all. The school Chromebook is enrolled in the school’s domain, managed by the school’s admin console, and locked to the school’s rules. Family Link can’t touch it. No screen time limits, no web filtering, no app controls. It’s like trying to install a deadbolt on an apartment you don’t own.
What about third-party tools like Bark, Qustodio, or Mobicip? Those run as Chrome extensions — and on a school-managed Chromebook, the school controls which extensions are allowed. Most districts don’t permit third-party parental control extensions. You can’t install apps, change DNS settings, or modify browser configurations. The device is not yours to customize.
You are parenting around a device you have zero authority over.
A few districts are starting to bridge this gap. Some offer GoGuardian Parent or Securly Home — apps that let parents monitor and adjust filtering during after-school hours. Others partner with vendors like Linewize to give parents their own layer of filtering rules that kick in when the school day ends. These are genuinely useful. But they’re opt-in, district-dependent, and most schools don’t enable them.
The Part Most People Get Wrong
Here’s the misconception I hear most: “My kid can’t get around the filters — they’re just a kid.”
They’re not just a kid. They’re a kid with a TikTok account, a group chat, and a classmate who already figured it out.
Students share filter bypass methods the way previous generations shared cheat codes. Web proxy sites act as middlemen — your kid visits the proxy, the proxy fetches the blocked page, and the filter only sees the proxy’s URL, not the destination. New proxy sites pop up constantly, faster than school filters can block them. Some kids switch to a phone hotspot to dodge network-level filtering entirely. Others have figured out how to kill the filtering extension through Chrome’s Task Manager.
Well-configured school Chromebooks block most of these methods. Guest mode can be disabled. VPN extensions can be restricted. USB boot can be locked down. But “well-configured” is doing a lot of work in that sentence, and many districts haven’t flipped every switch.
This isn’t theoretical. In October 2025, a Utah family filed a class action lawsuit alleging their 11-year-old accessed pornography on a school-issued Chromebook while searching for Pokémon characters — even after the school had placed the account on “high restriction.” In November 2025, a Nova Scotia mother discovered her 14-year-old was contacted by online predators through a school Chromebook after students found workarounds to access Instagram and Roblox. The mother had carefully restricted her daughter’s personal devices. The school Chromebook was the uncontrolled entry point.
What You Can Actually Do
You can’t control the device. But you can control the network it connects to.
Router-level filtering is your best option. A parental control router — or a DNS-level filtering service like CleanBrowsing or OpenDNS configured on your existing router — filters all traffic on your home Wi-Fi, including from the school Chromebook. The device itself might be out of your hands, but the pipe it drinks from at your house is yours.
Beyond that, three conversations are worth having.
With your school’s IT department: Ask whether filtering stays active off-campus. Ask whether guest mode is disabled. Ask if they offer a parent-facing portal like GoGuardian Parent or Securly Home. You’re not being difficult. You’re asking what the device does when it leaves the building — which is a completely reasonable question about a device your child uses in their bedroom at night.
With your kid: Talk about what to do when they see something they shouldn’t have seen — because eventually, filters fail. Not if. When. The goal isn’t to terrify them. It’s to make sure they know they can come to you without getting in trouble for something the technology was supposed to prevent.
With yourself: The school Chromebook is one screen among many. It doesn’t replace your parental controls on their phone, their tablet, or your home network. It’s an additional device in the ecosystem, and it’s the one with the biggest gap between what you assume it does and what it actually does.
Your kid's school Chromebook has a filter. That filter might be great, might be mediocre, or might disappear entirely when the device comes home. You can't install your own controls on it, and you can't verify what it blocks. The one screen in your house you didn't set up is the one most likely to have gaps — and the one most worth asking questions about.