How to Block AI Image Generators on School Chromebooks
AI image tools range from harmless art helpers to apps built to make fake sexual images of real people. Treating them all the same either blocks too much or too little. This guide sorts them into three risk tiers and shows how to enforce each on managed Chromebooks.
Why schools block AI image generators
The concern is not that students draw with AI. It is that the same technology can make realistic fake images of classmates and teachers in seconds, and those images can cause lasting harm once shared.
Nudify and undress tools
Sites and apps designed to create sexual or nude images from ordinary photos of real people.
- Output can be harmful to minors or illegal.
- Used in harassment of students and staff.
- No educational purpose.
Face-swap and deepfake tools
Tools that place one person's face onto another image or video, or animate a still photo.
- Used for impersonation and bullying.
- Can feed into tier 1 harms.
- Rarely needed in K-12 lessons.
General image generators
Text-to-image tools for art, design and illustration, standalone or built into other software.
- Content safeguards vary by tool.
- Age terms usually exclude young children.
- Some value in art and media courses.
CIPA
CIPA requires a measure that blocks visual depictions that are obscene, child pornography or harmful to minors. Tier 1 tools exist to generate that kind of image.
TAKE IT DOWN Act
This federal law, signed in May 2025, criminalizes publishing nonconsensual intimate images, including AI-generated ones, and requires covered platforms to remove them within 48 hours of a valid request.
State laws
Many states have updated laws on AI-generated sexual images of minors and on deepfakes. Details differ, so check current law in your state with your counsel.
One category switch for the generators you never listed
Image tools launch faster than any list can keep up with. In our hosted CIPA filter they sit in the AI / LLM Tools category, so a switch you flip once covers new arrivals.
- Allow the one art tool a teacher approves with an always-allow entry for that school only.
- Sites that undress or fake people are filed under Adult, which the CIPA preset already blocks.
- There is nothing to install on Chromebooks, and the rule applies as soon as you save it.
Tier settings by grade band
Tiers 1 and 2 do not change with age. Tier 3 is where grade bands matter, because older students in art, media and design courses may have a real use for a reviewed tool.
| Unit | Tier 1 | Tier 2 | Tier 3 | Image features in allowed tools |
|---|---|---|---|---|
| Elementary | Blocked | Blocked | Blocked | Off where the tool allows it |
| Middle school | Blocked | Blocked | Blocked | Off, or teacher-led demonstrations only |
| High school | Blocked | Blocked | Blocked except approved tools | Reviewed per tool |
| Art and media course unit | Blocked | Blocked | One or two reviewed tools allowed | Allowed under course rules |
| Staff | Blocked | Usually blocked | Allowed | Allowed under staff guidance |
Approving an image tool for an art or media course
- Students sign in with school accounts, not personal ones.
- The tool's terms allow use at the students' age, with consent where required.
- Content safeguards block sexual and violent output.
- The tool does not offer face swapping or editing of uploaded photos of people, or lets you switch those off.
- The district understands how uploaded images and prompts are stored.
- A named teacher owns the tool and reviews it each term.
Where AI image generation hides on a Chromebook
Blocking a list of image generator websites covers only one of six places these features appear. Map each one before you configure anything.
Standalone generator sites
Websites whose main purpose is making images from text. Control: AI tools category and URL blocking.
Chatbots with image features
General chat assistants that can also draw. Control: your chatbot policy by grade.
Design and slide tools
Familiar classroom tools that have added AI image buttons. Control: each tool's own admin settings.
Browser extensions
Add-ons that generate or edit images on any page. Control: approved extensions only.
Android apps
Photo editors and avatar apps with face-swap or generation features. Control: approved apps only in Google Play.
Bots in chat platforms
Image bots inside chat servers. Control: blocking those chat platforms for students.
Where the popular generators land in our data
Most generators share the AI / LLM Tools label. A few carry a second one, and harmful look-alikes can sit somewhere else entirely.
| Image tool | Our label(s) |
|---|---|
| midjourney.com | AI / LLM Tools |
| leonardo.ai | AI / LLM Tools, Freeware/Software |
| craiyon.com | AI / LLM Tools, Freeware/Software |
| stability.ai | AI / LLM Tools |
| canva.com | Web-based Applications, AI / LLM Tools |
| clothoff.net | Adult |
Configure the Google Admin console
The Admin console handles named sites, apps and extensions. Use it alongside category filtering, which handles the fast-moving long tail of tier 1 and tier 2 sites.
URL blocking for named tools
Devices › Chrome › Settings › Users & browsers › Content › URL blocking- Select the student unit, or the top level for tier 1 sites that no one should reach.
- Add well-known standalone generators your policy names, such as
midjourney.com,ideogram.ai,leonardo.aiorcraiyon.com. - Do not try to list tier 1 sites by hand. They change domains often; let the category handle them.
- Save, record the change and copy entries into any child unit that overrides the list.
Apps and extensions
Devices › Chrome › Apps & extensions › Users & browsers- Set Google Play to approved apps only for student units. Photo and avatar apps are a common route to face swaps.
- Set the Chrome Web Store to approved extensions only.
- Review currently installed apps and extensions in device reports and remove any that generate images.
- Check the Admin console generative AI settings for Google's own AI features per unit.
Supporting settings
| Setting | Student value | Why it matters here |
|---|---|---|
| Incognito mode | Disallowed | Keeps attempts visible to your filter and logs |
| Guest mode | Disabled | Removes a session without user policy |
| Sign-in restriction | School domain only | Stops personal accounts with no restrictions |
| DNS-over-HTTPS | Set by the district | Stops a switch to an unfiltered resolver |
| Developer mode | Blocked at the device level | Prevents students from removing management |
Category-based filtering for AI image tools
Tier 1 and tier 2 sites are often short-lived and renamed. A filter that groups domains by what they do keeps up where a hand-built list cannot.
| Category | Role in this policy | Suggested student setting |
|---|---|---|
| AI / LLM Tools | Covers chatbots and image generators; finer AI categories separate kinds of tool | Block for younger grades; block plus approved exceptions for older |
| Adult | Catches sites whose output or content is sexual, including many tier 1 tools | Block for all minors, as CIPA requires |
| VPN / Proxy / Anonymizers | Stops students reaching blocked tools through another server | Block |
| Malware / Phishing / Suspicious | Many free generator clones bundle ads, malware or data harvesting | Block |
| Freeware/Software | Downloadable image apps and unofficial clients | Block for students |
Tier 1 sites often sit in more than one category at once, for example AI tools and Adult. A domain can carry several categories ranked by how much of the site they describe, so blocking either category stops it. That overlap is useful: it means a site renamed overnight is still caught by its content.
Off-campus coverage and bypass handling
Harmful images are most often made in the evening and shared overnight. A block that stops at the school door does little for the incidents schools actually face.
Take-home Chromebooks
Account and device policies follow the school login on any network. See off-campus CIPA enforcement and Chromebook 1:1 device filtering.
Proxy sites
Students search for ways to reach blocked tools. The proxy category stops new proxies without daily edits.
VPN tools
Approved-only apps and extensions stop VPNs from being installed on student devices.
Personal phones
Phones on mobile data are outside school controls. This is why education and incident response matter as much as blocking.
Keeping generators blocked on take-home devices and against proxies
A private encrypted link applies the same rules on a Chromebook that leaves the network. The VPN/Proxy/Anonymizers category is blocked too, and it stays blocked even when a staff member uses the bypass PIN.
Test your AI image controls
Use an enrolled Chromebook and a test student account in each unit. Never test tier 1 tools by uploading real photos; confirm the block page appears and stop there.
- At
chrome://policy, reload policies and confirm URL entries show status OK. - A named standalone generator shows the block page.
- A domain your filter lists in the AI category shows the block page.
- The image feature in an allowed chatbot follows your grade rule.
- Searching the Play Store for a face-swap app returns nothing installable.
- A proxy site from your test list is blocked.
- The same checks pass on a home network.
- An approved art tool still works for the art unit, if you have one.
A one-week rollout for AI image controls
Rolling out in stages lets you catch broken art lessons and missed apps before every student is affected.
| Day | Action | Owner |
|---|---|---|
| 1 | Agree tier settings per unit with curriculum and safeguarding leads | Technology director |
| 2 | Apply tier 1 blocks district-wide, including staff | Chromebook admin |
| 3 | Apply tier 2 and tier 3 settings to a test unit and run the checklist above | Chromebook admin |
| 4 | Brief art and media teachers on approved tools and the request route | Curriculum lead |
| 5 | Apply to all student units and send the family message | IT and communications |
Talking with students about AI images
Blocking tools on school devices works best alongside plain conversations about why fake images hurt people. Students are more likely to report a problem when they know what the school will do.
Consent first
Making an image of a real person without their consent can be harassment, even as a joke. Say that directly.
Real consequences
Explain that sharing fake intimate images can break the law, and that school discipline also applies.
Do not forward
Teach students to report a harmful image and not to pass it on, even to show an adult.
Where to go
Name the people students can tell, and promise a quick, private response.
If a deepfake of a student or teacher circulates
Filtering reduces the chance that school devices are used to make harmful images. It cannot stop images made elsewhere. Agree this response plan before you need it.
- First hour
Protect the person affected
Move the student or staff member somewhere safe, reassure them and involve the designated safeguarding lead.
- Same day
Preserve, do not spread
Record where the image appeared and who reported it. Do not forward, download or show the image, especially if it involves a minor.
- Same day
Follow legal duties
Some cases require reporting to law enforcement or child protection services. Your counsel and district policy decide who makes that call.
- Within days
Request removal
Help the family use platform reporting tools. Under the TAKE IT DOWN Act, covered platforms must act on valid removal requests within 48 hours.
- Afterwards
Review controls and teaching
Check filter logs for related attempts on school devices, within your privacy rules, and revisit digital citizenship lessons.
Policy wording and parent communication
Clear wording in your acceptable use policy makes enforcement simpler and gives families a straight answer. These samples can be adapted to your district's voice.
Acceptable use clause
Students may not use school devices or accounts to create, edit or share images or video that depict a real person without their consent, or that are sexual, threatening or demeaning.
AI tools clause
AI image tools are blocked on student devices except district-approved tools for specific courses. Use of approved tools must follow teacher instructions.
Family message
To protect students, AI image and face-swap tools are blocked on school Chromebooks, at school and at home. Family devices are not affected.
Reporting line
If your child sees or receives a fake image of a classmate, please tell the school. We will respond quickly and privately.
Keep the wording short and concrete. Families and students respond better to a clear rule about real people and consent than to a long list of banned tool names that will be out of date next term.
Place the clauses in your acceptable use policy for schools and reference the review in your CIPA internet safety policy.
For a full board-ready policy that covers image tools and every other kind of AI, see our AI tools policy for schools.
Chasing image generators by hand against category control
Here is where the two ways of blocking diverge for this tool family.
| Challenge | Typed block list | Hosted category filter |
|---|---|---|
| A new generator launches this week | Nobody knows until a student shows it | Falls into AI / LLM Tools as our data catches it |
| One art app approved for a class | Exception in the list for the whole unit | Always-allow entry for that school only |
| Fake-image sites with adult purposes | Another list to maintain | Adult category already on in the CIPA preset |
| Proxy sites to reach the tool | Add each proxy as found | VPN/Proxy/Anonymizers blocked as a category |
| Proving the control exists | Screenshots from the Admin console | Activity reports and a policy record you can export |
AI image generator blocking FAQ
How do I block AI image generators on school Chromebooks?
Turn on the AI tools category for student units, add named generators to the URL blocklist, allow only approved apps and extensions, and review image features inside tools you already allow.
Are nudify and undress apps covered by CIPA?
CIPA requires blocking visual depictions that are obscene, child pornography or harmful to minors. Tools built to create sexual images of real people produce that kind of content, so block them for every unit.
Can students still make AI images inside allowed tools?
Yes. Many chatbots, slide tools and design platforms include image generation. Review each allowed tool's settings and decide per grade.
What should a school do if a deepfake of a student circulates?
Treat it as a safeguarding incident: protect the student, preserve evidence without sharing the image, involve the designated lead and follow legal reporting duties.
Does the block work on home networks?
Admin console policies and device-level category filtering follow the school account on enrolled Chromebooks. Network-only blocks do not travel home.
Should art classes have access to AI image tools?
Some districts allow a reviewed tool for older art or media students in a separate unit with school sign-in. Keep face-swap and nudify tools blocked regardless.
Should staff be blocked from AI image tools too?
Block tier 1 tools for staff as well, since they have no legitimate school use. Tier 3 tools are usually allowed for staff under guidance, and tier 2 tools are often blocked unless a media teacher has a reviewed need.
What if a student uses an image generator on a personal phone?
School device controls do not reach personal phones on mobile data. If the image affects the school community, follow your incident and safeguarding process regardless of the device used.
How often do new AI image sites appear?
New tools and clones launch constantly, and tier 1 sites often change domains. That is why category filtering with daily updates matters more than any fixed list of names.
A quote depends on how many schools and devices you manage, and it reaches you within one business day. A pilot on one school shows which generators are blocked before you commit district-wide.
Keep up with new AI image tools automatically
We help districts add AI tool categories and adult content filtering behind their Chromebooks, so new generators and deepfake sites are covered as they appear.
Midjourney, Ideogram, Leonardo.Ai and Craiyon are trademarks of their respective owners. Google, Google Admin console, Chrome, ChromeOS, Chromebook, Google Play and Android are trademarks of Google LLC. These names are used here only to identify the products discussed. CIPAWebFiltering.com is not affiliated with, sponsored or endorsed by any of these companies.