How to stop kids using VPNs and proxy sites

If your child has discovered VPNs, you're not alone: it's the number one workaround shared at school. Here's how to close it.

Updated November 11, 2026·2 min read

Short answer

Sheepdog Filter's Filter bypass protection blocks known VPN services, web proxies, encrypted-DNS services and "unblocked games" sites by default, and learns new ones every hour. Pair it with app approvals (Ask to Buy on iPhone, Family Link on Android) so new VPN apps can't be installed.

Three kinds of workaround

  • VPN apps tunnel all traffic somewhere else.
  • Web proxies and "unblocked" sites load blocked sites through another address, often shared as Google Docs or links at school.
  • Encrypted DNS services in browsers can skip a router's filter.

What Sheepdog Filter does

The Filter bypass protection is on for every child by default. It blocks:

  • the sign-in and connection servers of well-known VPN services,
  • web proxies and "unblocked games" mirrors, by name pattern and from community lists, with new ones learned every hour,
  • popular public encrypted-DNS services, so browsers can't skip your filter.

Lock the device too

  1. iPhone: turn on Ask to Buy, and set Screen Time › Content & Privacy Restrictions › VPN & Device Management to Don't Allow.
  2. Android: use Family Link app approvals.
  3. Computers: give your child a Standard account so they can't install software. On Windows, the optional browser lock keeps every browser filtered even with a VPN on.

If you spot one getting through

Every block and every app your child uses shows up in the Activity tab. If something slips through, block it with one tap from there, and tell us at hello@sheepdogfilter.com so we can add it for everyone.

Sheepdog Filter

The internet, childproofed in five minutes.

One switch per worry, every device in the house, and a plain-English report each week. Free to start, no app to install.

Start free

Keep reading