Live streaming on 1:1 devices

How to Block Twitch on School Chromebooks and Networks

Twitch is live, unscripted and social, which makes it harder to manage than recorded video. This guide walks K-12 IT admins through the domains, Google Admin settings and filter rules that keep Twitch off student devices, at school and at home.

Anatomy of a Twitch session

twitch.tvThe website, sign-in, chat and channel pages
ttvnw.netLive and recorded video delivery
jtvnw.netImages such as channel art and thumbnails
twitchcdn.netStatic site files
Android appInstalled from Google Play on Chromebooks
Live streams, one decision

Let a category cover Twitch and the platforms that follow it

We operate the hosted CIPA filter as a DNS service for your schools, so a live stream is refused when the device asks where it is. Streaming Media and Gaming are switches for each school, with no host list for you to chase.

  • The website, the app and an embedded player all need DNS, so the same rule reaches each of them.
  • An esports club can keep access through an always-allow entry on its own school.
  • No extension or agent goes onto the Chromebooks.
Category switches such as Streaming Media and Gaming per school in the hosted CIPA filter
Over 120M
domains already categorized
1 DNS setting
on the firewall of each school
15, 30 or 60 min
staff bypass window, after which it reverts

Why schools block Twitch

Most Twitch content is gaming, but a live platform is unpredictable by nature. These are the reasons districts give when they add it to their block list.

1

Live content is not reviewed first

What appears on a stream is seen as it happens. Language, violence or mature themes can appear without warning.

2

Open chat with strangers

Every stream has a chat. Students can talk to adults they do not know, and direct messages add a private channel.

3

Age terms

Twitch's terms set a minimum age of 13, so elementary students should not be on it at all. Check the current terms.

4

Hours of passive viewing

Streams run for hours. A stream left open in a tab competes with every lesson.

5

Gambling-adjacent content

Some streams feature betting, card games or loot box openings. See our guide to blocking gambling sites in schools.

6

Bandwidth

Live video at high resolution is a constant load. During testing, it competes with assessment platforms.

7

Spending and subscriptions

Viewers can buy currency to tip streamers and pay for subscriptions. That is a poor fit for a school device.

8

Policy fit

Most acceptable use policies already exclude entertainment streaming and social platforms during the school day.

CIPA does not name Twitch. It requires blocking obscene images, child sexual abuse material and content harmful to minors, plus an internet safety policy. Twitch blocks normally sit in your own policy. Read what CIPA requires for the legal baseline.

Twitch reaches students in four places

Blocking the website is the obvious step. Students who still watch Twitch usually reach it through one of the other three routes.

The website

twitch.tv in Chrome, including chat and channel pages.

Fix: URL block plus category

The Android app

Runs on many Chromebooks and ignores browser rules.

Fix: Google Play policy

Embedded players

Streams shown inside other sites, such as game news or fan pages.

Fix: block delivery domains

Extensions

Browser add-ons that show streams or notify when a channel goes live.

Fix: approved-only extensions

App vs browser: what each control can see

ControlTwitch in ChromeTwitch Android appTwitch on a personal phone
Chrome URL blocklistBlockedNot coveredNot covered
Filter extensionBlockedUsually not coveredNot covered
Google Play policyNot coveredBlockedNot covered
Device DNS or proxy settingBlockedBlockedNot covered
School network DNS or firewallBlocked on campusBlocked on campusBlocked on school Wi-Fi

No single control covers every column. That is why the methods below are meant to be combined, with the app store policy and the network filter covering what the browser rules cannot see.

Live platforms in our data

Twitch and the streaming sites that resemble it

Twitch itself is labelled Streaming Media and Gaming, and some rivals add Community Sites or Social Networking. We only list names we found, and the delivery hosts from the table above are not in our data at the root level.

DomainCategories we hold
twitch.tvStreaming Media, Gaming
trovo.liveGaming, Community Sites, Streaming Media
dlive.tvStreaming Media, Community Sites, Social Networking
rumble.comSocial Networking, Streaming Media
streamlabs.comStreaming Media, Gaming, Social Networking
twitchtracker.comGaming, Streaming Media

Choosing your blocking methods

Each method has a different reach. The ratings below compare how well each one covers Twitch on take-home Chromebooks and how much upkeep it needs.

Category filter on the device

A force-installed filter extension blocking the Streaming Media category for students. Covers Twitch and similar live platforms you have not listed.

Off-campus ●●●●●
Low upkeep ●●●●●

Google Admin URL blocking

Adds the Twitch domains to the Chrome blocklist for student OUs. Works even if the filter extension fails.

Off-campus ●●●●●
Low upkeep ●●●●●

App and extension policy

Approved-only Google Play and Chrome Web Store for students, with Twitch set to Block.

Off-campus ●●●●●
Low upkeep ●●●●●

School DNS filter

Blocks Twitch hosts for every device on school Wi-Fi, including personal phones on the guest network.

Off-campus ●●●●●
Low upkeep ●●●●●

Firewall URL filtering

Blocks the streaming category or the Twitch application in the firewall's web profile for student zones.

Off-campus ●●●●●
Low upkeep ●●●●●

Closing side doors

Incognito off, guest mode off, sign-in limited to school accounts, developer tools restricted.

Off-campus ●●●●●
Low upkeep ●●●●●
Most districts combine the first three for take-home Chromebooks and add DNS or firewall rules for the campus network. Read category filtering on managed Chromebooks for how category rules apply by OU.

Google Admin console walkthrough

Work on a pilot OU first. Labels in the Admin console change from time to time, so use the search box on the settings page if you cannot find a setting by name.

Step 1: pick the right organizational unit

Apply Twitch rules to student OUs. Keep a separate OU for any staff who need Twitch, such as an esports coach.

Step 2: add Twitch to URL blocking

Devices > Chrome > Settings > Users & browsers > URL blocking

Add twitch.tv, ttvnw.net, jtvnw.net and twitchcdn.net to the blocklist. A host entry also blocks its subdomains unless you add a leading dot.

Step 3: lock the app stores

Devices > Chrome > Apps & extensions > Users & browsers

Set managed Google Play and the Chrome Web Store to approved items only. If the Twitch app is already on devices, set it to Block, which also uninstalls it.

Step 4: force-install your filter

Force-install the filter extension in the same Apps & extensions page so students cannot remove or disable it.

Step 5: close the side doors

In Users & browsers, disallow Incognito mode, prevent guest browser logins, restrict sign-in to school accounts and set developer tools to never allow for students.

Step 6: check the device

On a student Chromebook, open chrome://policy, choose Reload policies and confirm the URLBlocklist entry shows status OK.

For the full URL blocking syntax, including exceptions and wildcards, read how to block websites on Chromebook with Google Admin.

Network rules for the campus

The campus network covers devices you do not manage: phones, personal laptops and visitor devices. Short vendor-neutral notes for the two common setups follow.

DNS filtering

What to block
The Streaming Media category, plus the Twitch domains as explicit entries.
Where to apply
Student and guest networks, through DHCP-assigned resolvers.
Gap to close
Block outbound DNS to outside resolvers, and set the DNS-over-HTTPS mode on managed Chrome.
More reading
CIPA DNS filter for education

Firewall web filtering

What to block
The streaming category in the URL filtering profile, and the Twitch application if your firewall identifies apps.
Where to apply
Every student SSID and VLAN, plus guest Wi-Fi.
Gap to close
Profiles attached to only one zone; HTTPS inspection off where you rely on full URLs.
More reading
Web filtering vs DNS filtering

Esports and streaming clubs: exceptions done right

Many high schools run esports teams that stream matches. A blanket block should not end the club, and a club exception should not open Twitch to the whole school.

Set up

Dedicated OU
Create an OU for the coach and any streaming device. Allow Twitch only there.
Dedicated device
Stream from a staff-managed computer, not from student Chromebooks.
Account ownership
The club channel belongs to the school and is managed by staff, with chat moderation switched on.

Keep it tidy

Owner
Every exception has a named staff owner who confirms it each term.
Scope
Exceptions sit on the club OU only, never at the top of the OU tree.
Review
When the season ends or the coach changes, the exception is reviewed or removed.
The same pattern works for media classes that study live broadcasting. Give the teacher account access and use a classroom display, so students learn from the stream without having the service on their own devices.

How a category database keeps the block current

Twitch is one platform. New live streaming sites, stream aggregators and mirror players launch all the time, and a hand-made list falls behind within weeks.

New domains daily

About 300,000 newly registered domains are categorized every day, so new streaming sites are labeled soon after launch.

Rechecked as sites grow

Each new domain is checked again after a week and after a month, because many sites add their video content after launch.

Several categories per domain

A domain can carry more than one category, ranked by how much of the site each describes, so a game news site with a stream player is still caught.

Licensed data can be exported in formats your existing tools accept, such as DNS response policy zones or firewall external lists. See the category database for details.

Off-campus: keeping Twitch blocked at home

Evening viewing is when Twitch use peaks. If your Chromebooks go home, these items decide whether the block goes with them.

  • Filter extension force-installed for every student OU
  • URL blocklist applied at the user level, not only the device
  • Google Play set to approved apps only
  • Incognito and guest browsing turned off
  • Sign-in limited to school accounts on the device
  • DNS-over-HTTPS mode set so the browser cannot pick its own resolver
  • Remote Access Tools category blocked, so home PCs cannot be used to relay streams
  • Device-level reports reviewed for home-hours activity

For a complete off-campus plan, see enforcing CIPA on off-campus student devices and Chromebook 1:1 device filtering.

Bypass handling: symptom, cause, fix

When a teacher reports a student watching Twitch, work through this table. It is written for admins and shows what to fix, not how students get around blocks.

What the teacher seesLikely causeFix
A stream inside a game news siteEmbedded Twitch playerBlock the video and image delivery domains, not only twitch.tv
The Twitch app open on a ChromebookApp installed before the store policy changedSet the app to Block in Apps & extensions; it is removed on next sync
Twitch in a browser with no block pageGuest mode, Incognito or personal accountTurn off guest and Incognito; restrict sign-in to school accounts
A stream on an unfamiliar domainProxy site or mirrorBlock the VPN / Proxy / Anonymizers category; see blocking proxy sites
Streams on a phone in classPhone on guest Wi-Fi or cellular dataApply the streaming rule to guest Wi-Fi; cellular is a phone policy matter
A browser extension showing live streamsExtension store not restrictedSet the Chrome Web Store to approved extensions only
Respond in proportion. A reminder of the acceptable use policy is enough for a first case. Repeated tampering with device settings follows the district device agreement.

Weekly log check

Look for blocked requests to streaming and proxy categories grouped by school. A sudden rise usually means a new workaround is spreading.

Share fixes across schools

When one school finds a gap, fix it at the district OU level so every school benefits at once.

Ask teachers what they see

Teachers notice new habits before reports do. A short question at staff meetings often reveals the next route to close.

Look behind the behavior

Heavy streaming at night can signal sleep or wellbeing issues. Share patterns with counselors where your policy allows.

Embedded players and tunnels

A stream inside another site still has to pass the lookup

VPN / Proxy / Anonymizers is switched on in the CIPA preset, and public encrypted DNS plus browser settings that skip the filter are blocked by default. The private encrypted link keeps the same rules on a laptop at home.

Testing the Twitch block

Test from a student account on a managed Chromebook. Repeat each check on the school network and on a home network or phone hotspot.

CheckSchool Wi-FiHome network
twitch.tv shows the block pageExpect blockExpect block
An embedded stream on another site does not playExpect blockExpect block
Twitch app is missing from Google PlayExpect hiddenExpect hidden
Another live streaming site is blocked by categoryExpect blockExpect block
Incognito and guest mode are unavailableExpect offExpect off
Esports coach account can reach TwitchExpect allowExpect allow

Our school web filter test gives a repeatable plan for every category. To see how any domain is labeled, use the domain category checker.

What parents usually ask, and how to answer

Some parents are gamers themselves and will ask why Twitch is blocked. Short, honest answers work better than long policy text.

"Why block Twitch?"

Because streams are live and unreviewed, and every stream includes chat with strangers. It also uses a lot of bandwidth during lessons.

"Does this affect our home devices?"

No. The block covers school Chromebooks and the school network. Your family's own devices are your choice.

"My child streams for the esports club."

Club streaming runs on staff-managed accounts or devices, so the club can continue under supervision.

"Is this the law?"

Not specifically. Federal law requires filtering of certain harmful content. Twitch rules come from our acceptable use policy.

"What if a teacher needs a stream?"

Teachers can request access for a lesson. IT allows it for the teacher account, not for all students.

"Who do I contact?"

Name one office, such as the technology department, so questions reach the right people.

Link the message to your acceptable use policy so parents can read the full rule.

Twitch blocked by hand or by category in a hosted filter

The first block takes minutes either way, and the long-term cost is where the two paths split.

QuestionTyped blocklistsHosted CIPA filter
Rival live platformsEach one added after a student tries itSame Streaming Media switch
Embedded players on other sitesYou find the delivery hosts yourselfRefused at the lookup like the main site
Android appNeeds app control in the consoleSame DNS rule
Esports clubA separate unit with exceptionsAlways-allow entry or PIN bypass at that school
Chromebook at homeAccount policy onlyPrivate encrypted link keeps the rules
Proof of the blockScreenshotsActivity reports, policy record and log export

FAQ: blocking Twitch in schools

What domains does Twitch use?

The main site is twitch.tv. Live video is delivered from ttvnw.net, images such as channel art from jtvnw.net, and static site files from twitchcdn.net. Twitch can change these, so also block the streaming media category and check your own logs.

Why does Twitch still play on other websites after we block twitch.tv?

Twitch streams can be embedded on other sites through the Twitch player. If you block only the main site in some filters, embedded players may still pull video from the delivery domains. Block those domains too.

Can we block Twitch chat but allow viewing?

Not reliably with a web filter. Chat and video are part of the same service. Most districts block Twitch entirely for students and allow it for specific staff, such as an esports coach.

How do we block the Twitch app on Chromebooks?

In the Google Admin console, set managed Google Play to allow only approved apps for student organizational units, and set the Twitch app to Block if it is installed. Then add the web domains to URL blocking.

Our esports team needs Twitch. What should we do?

Allow Twitch for the coach's staff account or a dedicated streaming device in its own organizational unit. Keep it blocked for the general student population.

Is blocking Twitch a CIPA requirement?

CIPA does not name services. Twitch is usually blocked under the district acceptable use policy because of live, unmoderated content, chat with strangers and bandwidth use.

The price depends on your schools and devices, and a quote arrives within one business day. A pilot on one school will show the Twitch block and its reports before you roll it out further.

Block live streaming by category, not by chasing hosts

Our Streaming Media category covers Twitch and the live platforms that appear after it, with new domains categorized every day. Tell us about your Chromebook fleet and current filter.

Talk to us about your district

Twitch is a trademark of Twitch Interactive, Inc. Google, Chrome, Chromebook and Google Play are trademarks of Google LLC. These names are used here only to identify the products discussed. CIPA Web Filtering is not affiliated with, sponsored or endorsed by Twitch Interactive, Inc. or Google LLC.