How to Block TikTok on School Chromebooks
TikTok reaches a Chromebook three ways: the website, the Android app and short clips embedded on other pages. A single blocklist entry closes only one of them. This guide stacks five layers so the block holds in class, at home and against the usual workarounds.
The short answer
- Put the student organizational unit on a URL blocklist that includes
tiktok.comand its content delivery domains. - Block the TikTok Android app in managed Google Play and limit which extensions students can add.
- Turn on the Social Networking and VPN / Proxy / Anonymizers categories in your filter so new and mirror domains are caught.
- Make sure the filter follows the device off campus, then test on a real Chromebook with a test student account.
Let category data keep TikTok blocked for you
Our hosted CIPA filter is a DNS filter that we run for your schools. Switch on the categories you want, and TikTok and the look-alike hosts that appear later are blocked without anyone typing them in.
- Social Networking is one switch per school, so the next short-video app is already covered.
- Nothing is installed on the Chromebooks, and a change reaches every device in seconds.
- A private encrypted link keeps the same rules on a Chromebook taken home.
Why schools block TikTok on student devices
Most districts do not block TikTok because of one incident. They block it because the app combines an endless video feed, direct messaging and public posting in one place, which is hard to supervise on a device students carry all day.
Student safety
Comments, direct messages and live streams open contact with strangers. Trends sometimes encourage risky challenges that spread fast between classrooms.
Lost learning time
A short-video feed is built to keep people scrolling. Teachers report that one open tab can pull attention away for the rest of a lesson.
Student data
Social apps collect usage and device data. Districts with strict student privacy commitments often decide school-issued devices should not run them at all.
Policy and law
Board policy, state law and the school's internet safety policy may already require limits on social media during the school day.
What CIPA says
CIPA does not name any app. It requires a technology protection measure against obscene and harmful-to-minors images, plus an internet safety policy that covers minors' safety in direct electronic communication.
E-Rate education duty
Schools certifying CIPA must also educate minors about appropriate online behavior, including interacting on social networking sites and cyberbullying awareness. Blocking does not replace that lesson.
State example: Florida
Florida's 2023 law HB 379 requires districts to prevent student social media access on district internet, except when a teacher directs it, and bars TikTok on district devices and networks.
Check your state. Rules on social media, phones and specific apps differ by state and change often. Read the current text for your state, and see our overview of the Texas SCOPE Act for schools if you operate in Texas.
Block the TikTok website in the Google Admin console
The URL blocklist is the fastest control you have. It applies to Chrome for every user who signs in with a school account on an enrolled Chromebook, and it takes effect once the device fetches policy.
Path as shown in the Admin console in October 2026. Google renames menus from time to time, so use the settings search box if a label differs.
Select the student organizational unit
Pick the unit in the left panel before you edit anything. Apply the block to students first and leave staff for a separate decision.
Add the domains below to Blocked URLs
One entry per line. A bare domain such as
tiktok.comcovers every subdomain, so you do not need wildcards for each host.Leave Blocked URL exceptions empty for TikTok
An exception always wins over a block. Adding one for a TikTok subdomain reopens it for every student in the unit.
Save and note the change
Record who requested the block, which unit and why. If a child unit overrides the list, copy these entries into it as well.
| Domain | What it serves | Why include it |
|---|---|---|
tiktok.com | The main website, sign-in and the web video player | Stops the browser version and most share links |
tiktokcdn.com | Video and image delivery | Stops clips loading inside embeds on other sites |
tiktokv.com | App and API traffic | Used by app clients; worth listing for completeness |
| Regional delivery hosts | Country specific video delivery, for example names ending in cdn-us or cdn-eu | Change over time; best left to category filtering |
Lists change. These are well-known TikTok domains, not a complete inventory. The platform adds delivery hosts by region and over time, which is exactly why layer 3 exists. For a deeper walkthrough of the blocklist syntax, read how to block websites on Chromebook in Google Admin.
What our data says about the TikTok family of domains
We looked up the names behind the app, not just the main website. Several sit in more than one category, which is why a category switch reaches further than a typed list.
| Domain | Categories in our data | Why it matters for the block |
|---|---|---|
| tiktok.com | Social Networking, Streaming Media | The website and web player students open first |
| tiktokv.com | Social Networking | Traffic from the app, which a website-only block misses |
| musical.ly | Streaming Media | The app's earlier name, still a domain people reach |
| douyin.com | Social Networking, Streaming Media | The sister app for China, a common mirror target |
| snssdk.com | News/Media, Social Networking | Backend host from the same company that students rarely hear about |
| capcut.com | Web-based Applications, AI / LLM Tools | The video editor linked to TikTok, in a different category |
Control the Android app and Chrome extensions
Many school Chromebooks can run Android apps. The Chrome URL blocklist does not reliably apply inside Android apps, so an installed TikTok app can keep working even after the website is blocked.
Android apps
- Open Devices › Chrome › Apps & extensions › Users & browsers for the student unit.
- Decide whether students can browse managed Google Play at all. An allowlist mode, where only approved apps install, is the cleanest choice for most grades.
- If you use a blocklist mode instead, add the TikTok app and its lighter companion versions to the blocked list.
- Remove any TikTok app that was installed before the policy changed, and check that force-installed apps do not include it.
Extensions
- Set the Chrome Web Store for students to allow only extensions you approve.
- Block extension types that change page content or route traffic, such as VPN and proxy extensions.
- Watch for video downloader extensions that fetch TikTok clips through their own servers.
- Force-install the extensions the district does want, including any filtering extension you rely on.
Why allowlisting wins here. TikTok is one of many short-video apps. If students can install anything not on a blocklist, they move to the next app within days. An approved-apps list stops the whole class of problem.
Use category filtering so new TikTok domains are caught
A hand-built list only knows what you typed. A category-based filter groups domains by what they are, so one setting covers TikTok, its regional hosts, mirror sites and look-alike apps that appear next month.
Categories that matter for a TikTok block (green ones are usually blocked for students):
| Category | Typical student setting | Reasoning |
|---|---|---|
| Social Networking | Blocked during school hours, or always for younger grades | Covers TikTok and the platforms students switch to next |
| VPN / Proxy / Anonymizers | Blocked for all students | The most common route around any social media block |
| Streaming Media | Allowed, with video platforms set to a restricted mode | Blocking it breaks lesson video; handle with care |
| URL Shorteners | Allowed but logged | Short links can hide a TikTok or proxy destination |
| Freeware/Software | Blocked for students | Reduces downloads of desktop clients and unofficial tools |
Where it plugs in. Category filtering reaches a Chromebook through a force-installed filtering extension, a DNS filter or a cloud gateway. Each option is compared in category filtering on managed Chromebooks, and the wider picture is in our page on social media filtering for schools.
Keep the block working off campus
TikTok use peaks in the evening, which is when take-home Chromebooks are on home Wi-Fi. A firewall rule in the school building does nothing there.
Account policies travel
Admin console user settings, including URL blocking and app control, follow the signed-in school account on any enrolled Chromebook.
Stop the account swap
Restrict sign-in to school accounts and disable guest mode on student devices. A personal account would skip every user policy you set.
DNS and secure DNS
If your filter relies on DNS, set Chrome's DNS-over-HTTPS policy so students cannot switch to an outside resolver in browser settings.
School hours vs always
Some districts block TikTok only during the school day. Decide with your board, document it, and tell parents which hours apply.
Go deeper. Our guide to enforcing CIPA on off-campus student devices covers home networks, hotspots and what parents can and cannot change. For 1:1 programs specifically, see Chromebook 1:1 device filtering.
Handle proxy, VPN and other bypass attempts
Within a week of a new block, expect students to search for a way around it. You do not need to chase each trick by hand if the right categories and settings are already in place.
Web proxy sites
New proxy sites appear daily. Block the VPN / Proxy / Anonymizers category rather than individual sites, and review attempts in filter logs.
VPN extensions and apps
Covered by extension allowlisting and Android app control from layer 2. Without those, a VPN app can tunnel around every browser rule.
Mirror and viewer sites
Third-party sites that replay TikTok content under another name. Category filtering usually groups them with social networking or proxies.
Incognito windows
Disable incognito for student units so browsing stays under policy and your filter keeps visibility.
Short links and translations
Shortened links, translation tools and cached pages can wrap a blocked destination. Watch logs for unusual spikes on these services.
Phone hotspots
A Chromebook on a phone hotspot still carries account policies, but not network rules. This is another reason to filter on the device.
Treat bypass as a conversation, too. Repeated attempts are a behavior matter for the school, not only a technical one. Point to the relevant clause in your acceptable use policy for schools rather than escalating a technical arms race.
What stays blocked even when someone has a reason to unlock
VPN / Proxy / Anonymizers is a category you switch on, so new proxy sites are blocked as we categorize them. Staff can open adult research with a PIN for 15, 30 or 60 minutes, and VPN / Proxy stays blocked even then.
A two-week rollout plan for the TikTok block
Switching a block on for every student at once invites broken lessons and angry calls. A staged rollout gives you time to fix surprises while the change is still small.
| When | Action | Owner |
|---|---|---|
| Day 1 | Confirm the decision in writing with the principal or board policy, and agree the hours it applies | Technology director |
| Day 2 | Apply layers 1 and 2 to a pilot unit with test accounts only | Chromebook admin |
| Day 3 to 4 | Run the test table below, fix gaps, then add one real class as a pilot | Chromebook admin and one teacher |
| Day 5 | Send the family message and brief front office staff on likely questions | Communications lead |
| Week 2 | Extend to all student units, turn on the category settings, and review filter logs daily | IT team |
| End of week 2 | Review bypass attempts and teacher requests, and record the outcome for your compliance file | Technology director |
Teacher exceptions. If a teacher wants to show a TikTok video in a lesson, the usual answer is to play it from a staff account on the classroom display, not to open TikTok for the students in that class.
Test the TikTok block before students notice it
Saving a setting does not prove it reached the device. Run a short test on a real enrolled Chromebook with a test student account in the same unit.
| Test | How | Expected result |
|---|---|---|
| Policy arrived | Open chrome://policy, reload policies, find URLBlocklist | Your TikTok entries listed with status OK |
| Website | Visit the TikTok home page and a shared video link | Block page shown for both |
| Embed | Open a news article that embeds a TikTok clip | Article loads, clip does not |
| Android app | Search for TikTok in the Play Store on the device | App not available or install blocked |
| Proxy | Try a known proxy site from your filter's test list | Blocked by category |
| Staff | Sign in as a staff test account on the same device | Follows the staff policy you chose |
| Home network | Repeat the website test on a non-school network | Still blocked |
A structured test plan. Our school web filter test walks through a full check of categories, safe search and bypass resistance that you can repeat each term. To see how a single domain is categorized, use the domain category checker.
Explain the TikTok block to parents and staff
Parents tend to support a block when they know what it covers, when it applies and what it does not do. Surprises create more emails than the block itself.
- Say whether the block applies only on school devices or also on school Wi-Fi for personal phones.
- State the hours: the school day only, or whenever the school account is signed in.
- Explain that home devices and personal phones are a family decision.
- Name the policy or law the decision rests on, such as board policy or a state statute.
- Give one contact for questions and a route for teachers to request educational exceptions.
- Mention the digital citizenship lessons that accompany the block.
Sample message for families
Dear families, starting next Monday, TikTok will not be available on school-issued Chromebooks, at school or at home, while students are signed in with their school account.
This follows our board's internet safety policy and helps students stay focused during lessons. It does not change anything on your family's own devices.
Students will also take part in a short lesson on social media and online safety this term. Questions can go to the district technology office.
Typing the list yourself or letting the hosted filter carry it
Here is what changes for the TikTok block once the category work moves out of your hands.
| What you need | Blocklist by hand | Hosted CIPA filter |
|---|---|---|
| New TikTok hosts and mirror sites | Found and added by you, one at a time | Covered when they join the Social Networking category |
| Separate rules per school | A new list in every unit | One console, separate settings per school or branch |
| Chromebooks at home | Depends on each account policy | Private encrypted link keeps the rules on the device |
| Staff who need a blocked page | Edit the list, then remember to undo it | PIN bypass for 15, 30 or 60 minutes, logged, switches back |
| Proof for the CIPA file | Screenshots of settings | Activity reports, policy record and a log export |
| Students using a proxy instead | A separate list to keep up | VPN / Proxy / Anonymizers blocked as a category |
TikTok blocking FAQ for school IT admins
Can I block TikTok on Chromebooks from the Google Admin console?
Yes. Add tiktok.com and its content delivery domains to the URL blocklist for the student unit, and block the TikTok Android app in the Google Play settings for the same unit. Add category filtering so new and mirror domains are covered.
Does blocking tiktok.com stop TikTok videos embedded on other websites?
Blocking the TikTok domains and its delivery hosts stops most embedded players, because the clip is still served from TikTok. Test a page with an embed on a student device to be sure.
Will the TikTok block work when students take Chromebooks home?
Admin console user policies follow the signed-in school account on enrolled devices, so URL blocks and app controls apply at home. A firewall rule in the building does not, which is why device or account level filtering matters.
Is a school required by law to block TikTok?
CIPA does not name TikTok or any app. Some states go further, for example Florida's HB 379 from 2023. Check your own state rules and your board policy.
How do students try to get around a TikTok block?
Typical attempts are web proxies, VPN extensions or apps, mirror and downloader sites, and personal accounts. Block the VPN / Proxy / Anonymizers category, control extensions and apps, and restrict sign-in to school accounts.
Should staff accounts be able to reach TikTok?
Many districts keep TikTok open for communications staff and blocked for students, using separate organizational units. Follow board policy and any state law that limits school use of the platform.
Pricing depends on how many schools and devices you have, and we send a quote within one business day. A pilot on a single school lets you see the TikTok block and the reports before you decide.
Want TikTok blocked without maintaining the list?
We help districts put category-based filtering behind their Chromebooks, so social media, proxy and new look-alike domains are covered as they appear. Tell us how your devices are managed.
Talk to us about your district See the hosted CIPA filterTikTok is a trademark of ByteDance Ltd. Google, Google Admin console, Chrome, ChromeOS, Chromebook, Google Play and Android are trademarks of Google LLC. These names are used here only to identify the products discussed. CIPAWebFiltering.com is not affiliated with, sponsored or endorsed by ByteDance Ltd. or Google LLC.