School bus wifi and hotspot filtering after the E-Rate change
For one short period, E-Rate helped pay for wifi on school buses and for hotspots that students took home. That support has ended, but the devices and connections are still in students' hands, and they still need filtering.
The change: on 30 September 2025 the FCC voted 2 to 1 to end E-Rate eligibility for school bus wifi and for wifi hotspots lent for off-premises use, for schools and libraries alike.
How the rules changed, step by step
The bus and hotspot rules moved twice in two years. Knowing the sequence helps when you read old contracts, board minutes or vendor quotes.
On-premises only
E-Rate covered connections used at schools and libraries. Buses and home use were outside the program.
School bus wifi becomes eligible
An FCC ruling treated wifi on school buses as an educational use. Districts could request it starting with Funding Year 2024.
Hotspot lending becomes eligible
The FCC added wifi hotspots that schools and libraries lend for off-premises use, starting with Funding Year 2025.
Both are ended
The FCC voted to end eligibility for both services, stating the earlier expansions went beyond its authority. Funding Year 2025 requests for them were not funded.
Local choices
Districts decide whether to keep bus wifi and hotspot programs with other money. Check current USAC notices for any further changes.
What this means for filtering
Losing the discount changes who pays. It does not change the safeguarding risk of a minor using a school connection on a bus or at home.
While E-Rate funded these services
- The services sat inside the CIPA certification the district made for E-Rate
- The internet safety policy had to cover the bus and hotspot connections
- Hotspot programs needed rules about who could borrow and how use was limited
- Records had to show the services were used for education
Now that they are locally funded
- The district sets the program rules, within state law and its own policy
- Students are still minors on school devices, so the safeguarding duty remains
- Parents still expect school devices and school connections to be filtered
- Most districts keep the same categories and policy as on campus
How your CIPA certification applies to connections that E-Rate does not discount is a question for your E-Rate adviser. The safe operating rule is simple: every school-provided connection and every school device gets the same filtering policy.
Should you keep the program? Four realistic options
Districts have taken different routes since the vote. Each option has a different filtering job attached.
Continue bus wifi
Pay the full cost locally. Long rural routes often justify it for homework time, and filtering stays on the bus router.
Keep only key routes
Keep wifi on the longest routes or activity buses. Fewer routers means less cost and simpler filter management.
Fund hotspots by need
Lend hotspots only to families without home internet, using local, state or philanthropic funds.
End the program
Retire routers and hotspots, then make sure school devices are still filtered on home networks and public wifi.
Whichever option you choose, write down the reasons and the expected cost for the next three years. Boards revisit these decisions often, and a short record saves rebuilding the case each spring.
If you are pricing local options, our guide to funding school web filtering beyond E-Rate covers state and federal sources and how to budget recurring costs.
Rules that ride along on the bus
Bus wifi and lending hotspots sit outside your usual network. A private encrypted link keeps devices on the school policy there too.
- No software installed on the devices.
- Public encrypted DNS and browser settings that skip the filter are blocked by default.
- Changes apply in seconds.
Three layers of filtering for buses and hotspots
No single layer catches every case. Combining them means a student is filtered whether they are on the bus, at home or at a coffee shop.
Device layer
How it worksA filtering agent or managed browser policy on the school device checks each site against categories, on any network.
Best forSchool-issued Chromebooks and laptops. This is the layer that follows the student everywhere.
Router layer
How it worksThe bus router or hotspot sends DNS lookups to a filtering resolver, or tunnels traffic to a cloud filter.
Best forAny device joining the bus network, including personal phones if you allow them.
Carrier layer
How it worksSome mobile data plans for education include content filtering in the carrier network.
Best forA backstop for lending hotspots. Check which categories it blocks and whether you can change them.
Most districts treat the device layer as required and the other two as extras. If budgets are tight, spend on device coverage first, because it keeps working after a bus router or hotspot is retired.
The device layer is covered in depth in how schools enforce CIPA-compliant filtering on off-campus devices, and for Chromebooks in Chromebook web filtering that follows the device.
Filtering school bus wifi: a setup guide
A bus is a small moving network with patchy cellular coverage. Settings that work in a building can fail when the signal drops between towers.
| Setting | What to do | Why it matters on a bus |
|---|---|---|
| Who can join | Limit the network to managed school devices where possible, using certificates or a hidden network pushed by device management. | Keeps filtering consistent and stops the bus becoming a free hotspot for every phone. |
| DNS filtering | Point the router's DNS at a filtering resolver and block outbound DNS to anything else. | Light on data, which matters on cellular links with limited plans. |
| Category policy | Apply the same student categories as on campus, by grade band if routes are grade-specific. | Parents and staff expect one policy, wherever the device is. |
| Bypass routes | Block VPN, proxy and anonymizer categories and known DNS-over-HTTPS endpoints at the router. | Long rides give students time to experiment with bypass tools. |
| Bandwidth | Restrict streaming video and large downloads, or cap them by time. | Shared cellular bandwidth runs out quickly with video. |
| Fail-closed or fail-open | Decide what happens if the filter cannot be reached. Device agents with cached policy are the safest answer. | Dead zones are common on rural routes. |
| Logs | Keep minimal logs needed for safety and troubleshooting, with a retention period in policy. | Respects student privacy while letting staff answer complaints. |
For bypass controls in detail, see stopping proxy and VPN bypass in schools.
Entertainment sites on the road
Bus rides invite streaming and games. Here is how they are filed.
| Site | Categories |
|---|---|
| youtube.com | Streaming Media, Social Networking |
| twitch.tv | Streaming Media, Gaming |
| roblox.com | Gaming |
| spotify.com | Podcasts, Streaming Media |
| snapchat.com | Social Networking |
| netflix.com | Streaming Media |
Filtering lending hotspots
A hotspot at home serves the whole household, not just the student. That makes hotspot filtering a policy question as much as a technical one.
Decide who it is for
Is the hotspot for the school device only, or for the family? The answer shapes how strict the router layer can be.
Filter the school device first
If the device filters itself, the hotspot can stay lighter. This avoids blocking a parent's job search or a sibling's homework site.
Lock the admin settings
Change default passwords and disable local admin pages, so the filter cannot be switched off at home.
Limit tethered devices
Cap the number of devices that can connect. It reduces data use and keeps the hotspot focused on schoolwork.
Write it into the loan agreement
State what is filtered, what is logged and who to contact. Families should sign before they take the device home.
Plan the return
Reset hotspots between borrowers and check the filter settings each time.
Public libraries face similar choices for patron lending, covered in library wifi filtering and patron devices.
Filtering off-campus devices when there is no school connection
With fewer hotspots, more students connect school devices to home broadband, relatives' wifi or free public networks. The device is now the only place the school can apply its policy.
Force the policy at sign-in
Require students to sign in with school accounts so the managed policy and filter extension always load.
Block guest and incognito modes
Disable browsing modes that skip the managed profile, and stop unmanaged browsers from being installed.
Restrict extensions
Allow only approved extensions, so VPN and proxy add-ons cannot undo the filter.
Use category data, not lists
Homes reach more of the web than school does. Category data catches newly registered sites that a hand-kept list misses.
Set home-time rules carefully
Some districts relax entertainment categories after school hours but keep the CIPA core. Write the choice into policy.
Tell families what is covered
Explain that the school filters its own device, not the family's other devices or home network.
Parents often ask about home filtering for personal devices. Our guide to explaining web filtering to parents has wording for that conversation.
Policy and records checklist
Whatever you decide, update the paperwork so policy, practice and contracts match.
- Internet safety policy names bus wifi and hotspots, or states they are discontinued
- Acceptable use policy covers school devices on any network
- Board minutes record the decision to keep, narrow or end each program
- Contracts with bus wifi or hotspot providers reviewed for cost changes
- Funding Year 2024 and 2025 E-Rate records kept with the outcome of each request
- Hotspot loan agreements updated with filtering and privacy terms
- Router and hotspot filter settings documented and tested each term
- Device agent coverage checked across every school-issued device
- Bypass tests run on the bus network and on a home network
- Parents told what changed and what is still filtered
Your acceptable use policy and CIPA compliance checklist are the two documents most likely to need edits.
Who owns which decision
Bus and hotspot programs cross departments. When nobody owns the filter on a bus router, it tends to drift until a parent complaint brings it back into view.
| Role | Owns | Typical questions |
|---|---|---|
| Superintendent and board | Whether each program continues and how it is funded. | Is the benefit worth the full local cost now that the discount is gone? |
| Technology director | Router, hotspot and device filter settings, testing and records. | Which layer filters what, and what happens when the signal drops? |
| Transportation director | Router installation, power and maintenance on each bus. | Which routes have working wifi this week, and who reports faults? |
| Business office | Contracts, data plans and grant tracking. | Do existing contracts still match the new funding position? |
| Principals and counselors | Hotspot eligibility, family contact and incident follow-up. | Which families most need a hotspot, and how are concerns raised? |
| Library or media staff | Lending, returns and resets for hotspots held in school libraries. | Is each returned hotspot reset and checked before the next loan? |
Privacy on buses and at home
Off-campus filtering reaches into family life more than on-campus filtering does. Keep the data you collect small and the rules clear.
Filter, do not watch
A category filter decides allow or block. It does not need to read messages or record what a student types, and your policy should say so.
Short log retention
Keep blocked-request logs only as long as you need them for safety and support. Write the period into policy.
Limit who can see logs
Give access to named staff roles only, and record when logs are reviewed for an incident.
No location tracking by default
Bus routers and hotspots may report location for fleet reasons. Keep that data separate from browsing logs.
Family devices stay out
Where a hotspot serves the household, avoid logging the family's own devices beyond what the filter needs to work.
Say it in plain words
Loan agreements and parent letters should state what is filtered and what is recorded, in a few short lines.
Our guide on student data privacy, FERPA and web filtering covers the wider privacy rules that apply to filter logs.
One policy outside school
The private encrypted link carries the same rules on devices using bus wifi or lending hotspots.
Testing the filter in the field
Bench tests in the IT office do not show what happens on a moving bus or in a family kitchen. Test where the device is actually used.
| Test | Where | Pass looks like |
|---|---|---|
| Core CIPA categories | Bus, hotspot, home broadband | Adult, gambling and similar categories blocked on every network. |
| Newly registered sites | Any network | A recently created site in a blocked category is caught by category, not left open. |
| VPN and proxy attempts | Bus and home | Known bypass services blocked, and an alert or log entry created where your policy uses them. |
| Signal loss | Rural bus route | Device keeps filtering with cached policy when the connection drops and returns. |
| Learning resources | Any network | Assigned sites and video load without unblock requests. |
Repeat these tests at the start of each term and after any change to routers, data plans or device policy. Record the date, the network and the result so the next review has a baseline.
You can check how a specific site is categorized with the domain checker.
Telling families about the change
Families who relied on a bus connection or a borrowed hotspot need notice before it changes. A short message in five parts covers what most parents want to know.
What is changing
Say plainly whether bus wifi or hotspot lending continues, narrows or ends, and from which date.
Why
Explain that federal E-Rate support for these services ended in 2025, and how the district decided what to keep.
What stays filtered
Confirm that school devices remain filtered on any network, including home wifi and public hotspots.
Help for families without internet
List any remaining hotspot loans, library access, or community options the district knows about.
Who to contact
Give one contact for device problems and one for concerns about blocked or allowed sites.
Keep the message short and translate it into the main languages of your community. A two-paragraph letter that families read beats a long one they skip.
Bus, hotspot or building
Coverage by location
| Place | Building-only filter | Hosted filter |
|---|---|---|
| School building | Covered | Covered |
| Bus wifi | Often missed | Same categories |
| Lending hotspot | Not covered | Private encrypted link |
| Student home | Not covered | Private encrypted link |
| Evidence | Scattered | Reports and log export |
Bus wifi and hotspot filtering FAQ
Does E-Rate still pay for school bus wifi?
No, the FCC voted on 30 September 2025 to end eligibility for bus wifi and off-premises hotspots. Check current USAC guidance for later changes.
Do we have to filter bus wifi if E-Rate no longer pays for it?
Students are still minors on a school connection. Most districts keep the same filtering, which is the safer reading of their duties.
What is the simplest way to filter school hotspots?
Filter the device. An agent or managed browser policy applies the same categories on any network.
Will the FCC take back money already paid for bus wifi?
Reports on the 2025 orders indicated no move to recover Funding Year 2024 bus wifi support. Keep your records and watch USAC notices.
Can students use bus wifi with their own phones?
Many districts limit it to school devices. If phones are allowed, filter at the bus router with DNS or category filtering.
Are libraries affected too?
Yes. The same vote ended E-Rate support for library hotspot lending, so libraries fund it from other sources.
Related guides
Your quote is based on schools and devices, and we return it within one business day. A pilot on one site shows the blocks and reports before you commit.
Talk to us about your district
Tell us which buses, hotspots and devices you still run. We will suggest a filtering setup that follows students on and off campus.
Talk to us about your district See the hosted CIPA filterChromebook is a trademark of Google LLC and is named only to identify the devices discussed. CIPA Web Filtering is not affiliated with, sponsored or endorsed by Google LLC.