Cyberbullying prevention in schools: what web filtering can and cannot do
A web filter is often listed as an anti-bullying tool. It helps, but only in specific ways, and over-selling it leaves gaps that hurt students.
This page sets out the filter's real job, the policy and state law around it, and the steps staff take when a concern comes in.
A filter can
- Block anonymous messaging and confession sites
- Block proxies and VPNs used to dodge rules
- Limit social networking by age group and time
- Keep reporting and help sites open
- Keep domain records your policy allows
A filter cannot
- Read messages, chats or posts
- Tell a joke from a threat
- Reach phones on mobile data
- Identify who is bullying whom
- Replace adults who notice and act
Where cyberbullying actually happens
Most online cruelty between students happens in group chats, direct messages, comment threads and games. Much of it happens on personal phones, at night and at weekends.
Personal phones
A phone on a cellular plan never touches the school network. No network filter, ours included, sees that traffic.
Private messaging
Direct messages and group chats are encrypted between the app and its servers. A category filter sees the app's domain, never the words.
Anonymous sites
Anonymous question and confession sites invite cruelty because no one is accountable. These are the sites a filter handles best.
Games and voice chat
In-game chat and voice servers are hard to manage by domain without blocking the whole game. Policy and supervision matter more here.
Image sharing and fakes
Edited photos and AI-made fake images are a growing form of harassment. Filters can block the generator sites; the response is a safeguarding matter.
School devices and accounts
School Chromebooks and school email are where the district has the most control, and where clear rules and logs carry real weight.
Cover the technical layer of your anti-bullying plan
The filter cannot read messages, so its job is narrow and useful: keep the anonymous and hiding tools away from school networks. Our hosted CIPA filter does that by category, and your counsellors keep the human side.
- VPN/Proxy/Anonymizers stay blocked, even when a staff PIN is used
- Social categories can be set differently for each school
- Nothing is installed on student computers
Which website categories matter for bullying prevention
These are the categories from our 58-category set that districts most often review when they write anti-bullying settings. The right choice differs by age group.
VPN / Proxy / Anonymizers
Proxies let students reach blocked anonymous apps and hide where they go. Blocking them keeps every other rule meaningful. See how to block proxy sites in schools.
Hate/Discrimination
Sites that attack people for race, religion, disability, sexuality or gender feed the slurs that show up in bullying. Most districts block this category for all students.
Social Networking
Commonly blocked for elementary and middle school, sometimes allowed for high school or for named class use. Our social media filtering for schools page covers the options.
Forums / Message Boards and Community Sites
Some are useful for learning, others are known for pile-ons. Many districts allow by exception rather than open the whole category.
Email and Messaging
Web chat and consumer messaging sites are usually blocked for students while school email stays open. Your allow list keeps school tools working.
Education/Reference and Health & Medicine
Anti-bullying lessons, reporting forms and youth health advice live here. Over-blocking these categories cuts students off from help.
Before changing a rule, look a site up with the school web filter domain check to see which categories it carries. A domain can hold several categories, ranked by how much of the site they describe.
How the chat and question apps are categorized
Families usually name these apps first at a parents' evening. Here is how our data files them, so you can see which category switch controls each one.
| App or site | Our categories |
|---|---|
| discord.com | Email and Messaging, Social Networking, Gaming |
| snapchat.com | Social Networking |
| ngl.link | Social Networking |
| reddit.com | Social Networking, Forums / Message Boards, Community Sites |
| tumblr.com | Blogs/Personal Sites, Social Networking |
Cyberbullying risks and the filter's real role
Use this table in planning meetings. It shows where the filter carries weight and where other parts of your program have to do the work.
| Risk | Filter's role | What does most of the work |
|---|---|---|
| Anonymous question and confession sites | High: block the site category and the domains | Clear rule in the acceptable use policy, plus lessons on why anonymity breeds cruelty |
| Getting around blocks with a proxy or VPN | High: block VPN and proxy categories and encrypted DNS bypass | Device management that stops students adding VPN apps and extensions |
| Hate sites used for insults and memes | High on school devices and network | Classroom discussion of respect and harm |
| Group chats on social platforms during class | Medium: block or schedule the platform on school devices | Phone policy, classroom routines, supervision |
| Harassment through private messages at night | Low: personal phones off the school network | Reporting routes, parent contact, counselling, discipline policy |
| Fake or edited images of a student | Medium: block generator and nudify sites on school devices | Safeguarding response, removal requests, law enforcement where needed |
| Threats made online | Low: a filter does not read threats | Your threat assessment team and school safety procedures |
For image abuse specifically, our page on deepfake and NSFW AI filtering in schools covers the generator categories. For threats, see school violence prevention and web filtering.
Why the proxy category carries so much weight here
Students who want to bully unseen reach for a proxy, a VPN or a public encrypted DNS service. In our filter the VPN/Proxy category stays blocked even after a staff PIN, and those encrypted DNS and browser settings are blocked by default.
A layered cyberbullying prevention program
Filtering sits in the middle of a stack. Each layer covers gaps the others leave, so none of them should be judged alone.
School climate and teaching
Lessons on online behavior, bystander action and empathy, delivered every year and refreshed when new apps appear. This is also part of what CIPA asks schools to certify.
Written policy
A bullying policy that names electronic communication, an acceptable use policy that names anonymous apps and bypass tools, and clear consequences that are applied fairly.
Technical controls
Category filtering on the network and on school devices, bypass prevention, and device settings that stop unknown apps and extensions.
Reporting routes
A simple way for students and parents to report, including an anonymous option, with a named adult who reads every report quickly.
Response and support
Investigation, support for the targeted student, restorative or disciplinary steps for the student who caused harm, and follow-up with families.
Anti-bullying law and policy for US schools
These pointers help you find the rules that apply. They are a starting map, not legal advice, so confirm details with your district counsel and state education agency.
CIPA and E-Rate
- The Protecting Children in the 21st Century Act added an education duty to CIPA for schools.
- Your internet safety policy must cover educating minors about appropriate online behavior, including social networking and chat rooms, and cyberbullying awareness and response.
- The FCC put this into its CIPA rules in a 2011 order and chose not to define "cyberbullying" itself.
- The same order said social networking sites are not automatically "harmful to minors".
State anti-bullying laws
- Every state has an anti-bullying law. Montana was the last to pass one, in 2015.
- Most require districts to adopt a written bullying policy with reporting and investigation steps.
- Many explicitly include electronic communication, and some cover off-campus conduct that disrupts school.
- The federal stopbullying.gov site keeps a summary page for each state's laws and policies.
Federal civil rights
- There is no single federal anti-bullying statute.
- When bullying is based on race, color, national origin, sex, disability or religion, it can become harassment that federal civil rights laws require schools to address.
- Laws in this area include Title VI, Title IX, Section 504 and the Americans with Disabilities Act.
- Check current guidance from the US Department of Education, as it changes over time.
Student privacy
- Records of an investigation can become education records under FERPA.
- Filter logs tied to a named student need careful handling and a clear retention rule.
- Several states add their own student data privacy laws on top.
- Read our guide to student data privacy, FERPA and filtering.
Staff steps for a cyberbullying report
A short, shared routine stops reports getting lost between IT, teachers and counsellors. Adapt it to your own bullying policy.
Listen and reassure
Thank the student for telling you. Do not promise total secrecy, and explain who you will need to inform to keep them safe.
Preserve evidence
Ask the student or parent to keep screenshots with dates and usernames. Staff should not ask students to forward explicit images of minors.
Pass it to the named lead
Send the report to the person your policy names, usually a principal, counsellor or safeguarding lead, the same day.
Check for immediate risk
Threats of violence or self-harm go straight to your safety and crisis procedures, not to a routine bullying queue.
Ask IT only for what helps
IT can confirm whether a domain is blocked, add a newly reported site to the block list, or provide logs the investigation lawfully needs.
Support both students
The targeted student needs a safety plan and check-ins. The student who caused harm needs consequences and a chance to repair it.
Talk to families
Inform parents of both students as your policy and state law require, and share steps they can take at home.
Close the loop
Record the outcome, review whether a policy or filter setting should change, and follow up with the student weeks later.
Filter configuration checklist for cyberbullying prevention
Run through this list at the start of each school year and again when students report a new app.
- VPN, proxy and anonymizer categories blocked for every student group.
- Public encrypted DNS and browser secure DNS settings handled so they cannot skip the filter.
- Hate/Discrimination category blocked for students.
- Social networking rules set per age group, with a written reason.
- Known anonymous messaging domains on your block list, reviewed termly.
- Reporting forms, counselling pages and youth help lines on the always-allow list.
- Same rules on school Chromebooks when they go home. See enforcing CIPA on off-campus devices.
- Log retention period written down and agreed with your privacy lead.
- A named person who can add a newly reported site within the school day.
- Rules tested from a student account with the school web filter test.
Mistakes that weaken anti-bullying filtering
These come up again and again in district reviews. Each one is easy to fix once it is named.
Blocking help along with harm
Keyword rules that block every page containing "bullying" also block the lessons and reporting guides students need.
Promising what tech cannot do
Telling parents "the filter stops cyberbullying" sets expectations no network tool can meet, and damages trust after the first incident.
Leaving bypass routes open
A strict social media rule means little if a free proxy or a browser VPN extension still works. Check blocking VPN extensions on school Chromebooks.
Stale block lists
Anonymous apps appear, rename and vanish fast. Category data that adds new domains daily keeps up better than a hand-built list.
IT working alone
Filter changes made without counsellors and principals miss the context. A short monthly check-in between them fixes most of this.
No written reasons
If a block is challenged, a one-line reason per category in your policy file saves a lot of time and shows the decision was considered.
Sample anti-bullying filter settings by grade band
A starting point many districts adapt. Treat it as a draft for your committee, not a rule, and record your own reasons for each choice.
| Category | Elementary (K to 5) | Middle (6 to 8) | High (9 to 12) | Staff |
|---|---|---|---|---|
| VPN / Proxy / Anonymizers | Block | Block | Block | Block, IT exceptions |
| Hate/Discrimination | Block | Block | Block | Allow for research by policy |
| Social Networking | Block | Block or class-only exceptions | Schedule or allow named platforms | Allow |
| Forums / Message Boards | Block | Allow by exception | Allow, block known pile-on boards | Allow |
| Email and Messaging | School email only | School email only | School email, consumer chat blocked | Allow |
| Health & Medicine, Education/Reference | Allow | Allow | Allow | Allow |
Tell parents what it covers
A one-page note explaining that the filter covers school devices and the school network, not home phones, prevents false reassurance.
Different rules for staff
Counsellors may need to view a site a student reported. Our guide to staff vs student filtering policies shows how to separate them.
Review each term
Ask counsellors which apps came up in recent reports. That list is the most useful input to your next filter review.
What each approach contributes to a bullying response
A web filter is one layer, and this table keeps its contribution honest.
| Need | Without a category filter | With our hosted CIPA filter |
|---|---|---|
| Anonymous and proxy sites | Staff chase them one address at a time | Blocked as categories, using 120M+ categorized domains |
| Different rules for age groups | One setting for everyone | Separate settings per school or branch in one console |
| Proof for a governors' review | Screenshots and memory | Activity reports, a policy record and log export |
| Students switching DNS to escape | Open door | Public encrypted DNS and browser bypass settings blocked by default |
| Reading private messages | Not possible | Not offered either; the filter decides by domain only |
Cyberbullying and web filtering FAQ
Can a web filter stop cyberbullying?
Not on its own. A category web filter can block websites built for anonymous messaging, harassment and hiding traffic, and it can limit social platforms during the school day. It cannot read messages or stop bullying on phones using mobile data, so culture, policy, reporting and staff follow-up do most of the work.
Does your filter read student messages or flag bullies?
No. Our category data and hosted DNS filter decide by website and domain category. They do not read messages, chats or posts, they do not analyze student behaviour and they do not identify students. Concerns about a student belong in your school's safeguarding and anti-bullying process.
Is cyberbullying education required for CIPA?
Yes, for schools. Your internet safety policy must include educating minors about appropriate online behavior, including on social networking sites and in chat rooms, and cyberbullying awareness and response. Our guide to the CIPA internet safety policy covers the wording.
Should we block all social media to prevent cyberbullying?
Blocking every platform on the school network rarely stops bullying, since most of it happens on personal phones and outside school hours. Many districts block social networking for younger students, allow selected platforms for older students, and always block anonymous messaging and proxy tools.
Do all US states have anti-bullying laws?
Yes. Every state now has one, with Montana the last to pass its law in 2015. Most require a district bullying policy and many include electronic communication, but the details differ, so check your own state's statute and education agency guidance.
What can filter logs contribute to a bullying investigation?
A DNS filter log shows which domains were looked up, when, and which were blocked. It does not show what was written or posted. Logs can help confirm a device reached a site at a given time, if your policy allows it and the request comes through the proper process.
Related guides for school filtering teams
We quote on the number of schools and devices involved and reply within one business day. If you would rather see it first, a pilot on one school demonstrates the blocks and reports before any commitment.
Talk to us about your district
We can walk your IT and safeguarding leads through category settings for each age group, bypass prevention and the hosted DNS filter. No pressure, just a practical conversation.
Snapchat and Discord are trademarks of their respective owners. They are named here only to identify the services discussed. CIPA Web Filtering is not affiliated with, sponsored or endorsed by them.