A School Chromebook Will Not Open a Site: What Works and What Does Not
The short answer
If the Chromebook belongs to the school, the block is written into the device policy and follows it onto any Wi-Fi network, so extensions, DNS changes and proxies will not clear it. The working options are a device you own, on your own connection, or an allowlist request to the school IT team.
Every week someone asks how to get past a school block on a Chromebook, and the honest answer depends on one question they have not been asked: does the school own the device? A personal Chromebook on school Wi-Fi is a network problem you can sometimes solve. A school-owned Chromebook on any network is a policy problem, and the policy is designed to survive exactly the workarounds people search for.
The one question that decides everything
Check who administers the device. On ChromeOS, open Settings, then About ChromeOS, then Additional details, and look for an enrolment line. If the device is enrolled, it is managed: the school controls settings, extensions, developer mode and the network list, and those controls are re-applied whenever the device checks in. If it is not enrolled and the device is yours, the only thing in your way is the network you are on.
This distinction matters because almost every tutorial online was written for the second case and silently assumes it. Changing DNS on a managed Chromebook is not possible in the first place: the setting is greyed out, because the policy sets it.
What a school filter actually is
A school filter is a category database in front of a proxy. The device or the network is configured to send web requests to a filtering service, which looks at the domain, sometimes the page path, and decides. Categories cover more than most people expect: a game site, a video host, a messaging app and a file-sharing service can all be filtered for reasons that have nothing to do with the content you personally want.
Two consequences follow. First, the filter is usually the same on school Wi-Fi and at home for a managed device, so taking the laptop home changes nothing. Second, the filter is not a hint you can argue with in the browser: the request is answered by the filter, not by the site, which is why the block page often carries the school or district logo rather than a site error.
What genuinely works, in order of how little trouble it causes
Use a device you own on a connection you pay for. A personal phone on mobile data, or a personal laptop on home broadband, is outside the school policy boundary. If the site is legitimate and you are old enough to be making that decision, that is the whole fix, and it costs nothing.
Ask for an allowlist. District IT teams receive these requests constantly and many publish a form. A request that names the exact URL, the class or assignment it is for, and the teacher who set it is approved far more often than "unblock games", because the reviewer can check it in thirty seconds.
Ask the teacher to move the material. If the resource is blocked district-wide, the teacher can usually host the same reading on the class platform, which is already allowed, or set the task for devices that are not filtered.
Why the usual workarounds fail here
Extensions that claim to unblock sites need to be installed, and on a managed Chromebook extension installation is restricted to an allowlist the school maintains. A proxy in the browser needs a proxy setting, which the policy owns. A VPN app needs to be installed and, on many managed devices, the network configuration that a VPN would change is also policy-controlled.
Worked example: a blocked archive, resolved in a day
A Year 11 class is set an essay that requires a newspaper archive. The archive resolves to a category the district filter treats as "paywalled media", so every Chromebook in the room gets the district block page. The students who search for a workaround find tutorials about DNS and proxy extensions, none of which can be applied, because the devices are enrolled.
The teacher submits the district allowlist form with the archive URL, the assignment name and her own name as the requesting staff member. The district approves the domain for the school's teaching category that afternoon, and it becomes available on every device in the building, including the ones at home.
Two students in the class also read the same archive from home that evening on personal laptops, which needed no change at all: their home connection was never filtered. Between the allowlist and a personal device, the problem closed without a single workaround being installed.
What is enforced, and what actually clears the block
| Situation | Who enforces the block | Proxy or DNS change | What works |
|---|---|---|---|
| School-owned, enrolled Chromebook | Device policy, pushed by the admin console | Blocked: settings are greyed out | A device you own, or an allowlist request |
| Personal Chromebook on school Wi-Fi | The school network filter | Sometimes, if the network does not force its own DNS | Your own hotspot or home connection |
| Personal laptop, school network | Network filter, plus any device profile you installed | Often, if DNS is not forced | Your own connection, or a DNS change that the network permits |
| Any device, home network, site still blocked | The site itself, by region or by address | Yes, this is the case a static IP solves | A private static proxy address in the required country |
The last row is the only one where buying an IP address from this site is the relevant answer. For the first three, an address does not change the decision being made.
Before you try anything
- 1Confirm whether the device is enrolled: Settings, About ChromeOS, Additional details.
- 2Write down the exact URL that is blocked, including any path after the domain.
- 3Note the class and teacher the site is needed for, which the allowlist form will ask.
- 4Try the same page on your own phone, off school Wi-Fi. If it loads, the block is the network or the device, not the site.
- 5Look for a district allowlist or "request access" form on the school or IT page before anything else.
- 6Keep your school account out of any workaround. Losing it costs more than the blocked page is worth.
Where this connects on this site
- If the device is yours and only the network is in the way, read unblocking a site on school Wi-Fi
- For a personal machine, the per-site approach is covered in the no-install route for a single site
- When the block is regional rather than institutional, the answer is private IP addresses by country
What this will not do
- This page does not tell you how to defeat a school filter on a device the school owns. That is a breach of the agreement you or your parents signed, and the consequence usually falls on your school account.
- Changing DNS does not help on an enrolled device, and a proxy address does not either, because both settings are controlled by policy.
- No extension sold as an "unblocker" can promise access to a specific site. Filters update their categories continuously.
- If the site is blocked because of its own regional or legal restrictions, clearing a school filter will not make it available: the destination is the one refusing.
- Nothing here is legal advice, and acceptable-use rules differ by district and by country.
Questions this page gets asked
- Can I change the DNS on a school Chromebook?
- Not when the device is enrolled. ChromeOS takes network settings from the admin policy, so the DNS field is either hidden or locked. On a personal, non-enrolled Chromebook you can set a custom name server in the network settings, and the change applies to that network only.
- Why is the site blocked on my phone at home as well?
- Either your phone is signed in to a school-managed profile, or the site is refusing your region rather than being filtered. Test with mobile data and with the school account signed out. If it still fails, the block is the site, not the school, and the fix belongs to a different category.
- What should an allowlist request say?
- The exact URL, the assignment or class it is for, the teacher who set it, and the date it is needed. Reviewers are checking whether the site is genuinely required, so specificity is the thing that gets it approved. Asking for a whole category to be opened is usually declined.
Last reviewed 2026-10-26. Written for readers in the United States and elsewhere; rules about access, email and consent differ by country, and nothing on this page is legal advice.