How to Limit an Android Phone to Approved Websites Only

By ChildCyberGuard Team · 12 November 2026 · 6 min read

Most parental control tools work like a bouncer with a list of troublemakers. That works for older children. For a seven-year-old with a phone, a different idea is safer: a bouncer with a list of guests, and nobody else gets in.

Block list versus allow-list

A block list says "stop these sites, allow the rest". The internet is enormous and always changing, so some bad sites will always slip through.

An allow-list says "allow only these, refuse the rest". It is much tighter. A child cannot stumble into something new because new things are refused by default.

When an allow-list makes sense

• Young children (roughly under 10) who only need a few sites or one app.
• A first phone used mostly to message family.
• A study phone that should only reach school resources.
• A short period, such as exams, when you want a tightly controlled phone.

How "Only these sites" works in ChildCyberGuard

In your dashboard, open your child's phone and switch on Only these sites. The phone then resolves only the sites on your list, plus the ChildCyberGuard service itself and the check that tells Android it is online. Every other name is refused, so everything else fails to load.

It works by DNS, so subdomains of an allowed site are included automatically. When you allow a site, the server also reads its home page and allows the fonts, style sheets and content hosts it loads, so the site displays properly.

Learn mode: finding out what an app needs

Modern apps contact many different servers, and it is not always obvious which ones are needed. Learn mode lets the phone run without restrictions for 10 to 20 minutes while it reports every name an app looks up. Afterwards you see the list and tick the names to allow. It is a quick way to build an allow-list for a particular app, and then switch back to strict mode.

Set it up in five steps

1. Install and connect the phone (see our setup guide).
2. Decide what the phone is for, such as messaging, one learning site or one game.
3. Use learn mode to see what the app needs, then allow those names.
4. Switch on Only these sites.
5. Test: open an allowed site and a random one, and check the first loads and the second does not.

Limits to know about

• It works at DNS level. Apps that connect directly to a numeric address, or that bring their own DNS settings, can still get through.
• Android's Private DNS setting, if set to a specific provider, can bypass it. Check it.
• It limits what the phone reaches online. It does not remove other apps from the phone, so offline games still work.
• A determined child can try to uninstall or turn off protection. A parent password and the device administrator step make that harder. See can kids bypass or delete Android parental controls?

Growing out of the allow-list

An allow-list is a stage, not a destination. As your child grows and shows good judgment, move to a block list of adult content, scams and gambling, then to more freedom with open conversation. Review every term and explain each change: "You have earned more, because you have shown me you can handle it."

Keep a human in the loop

A tight list does not replace talking with your child. Ask what they enjoy on the phone, and add things that are good for them, not just things that are safe. A phone with only boring sites teaches a child to look for another one. See also screen time guidelines by age.

Three example allow-lists

Family phone for a seven-year-old: a messaging app that talks to parents and grandparents, one learning site and one music service. Everything else is refused.

Exam-period study phone: the school's learning platform, a dictionary and a calculator site. Social media and video are not on the list, so there is nothing to be tempted by.

A phone for a long trip: maps, messaging and a couple of approved apps. This keeps data use and risk low while travelling.

Tips for building a good list

• Start small and add what your child asks for after you have checked it. Asking becomes a conversation, not a battle.
• Use learn mode for each new app, then switch back to strict mode.
• Review the list monthly and remove sites no longer needed.
• Explain the reasons to your child, so the list feels like a plan and not a punishment.

When an allow-list is the wrong tool

For older teenagers a very narrow list can feel punishing and lead them to find a way round. If your child is doing well, move to blocking adult content, scams and gambling, and focus on schedules and conversation. See our guide to picking an Android parental control app for how the options compare.

Pairing an allow-list with other settings

An allow-list works best alongside a few other basics. Set a bedtime so the allowed list is not available at night, keep the phone's own settings locked with a screen lock only you know, and review app installs so your child cannot add a new app that brings its own settings. Check Android's Private DNS setting too, since a specific provider there can skip a DNS-based list. A quick monthly check of these four things keeps the list doing its job.

Frequently asked questions

What is the difference between a block list and an allow-list?

Will an app work if I only allow its main website?

Is an allow-list the same as a kiosk lock?