How to Unblock Websites on a School Chromebook (2026)

First, Find Out What Kind of Chromebook You Have

Everything below depends on one question: is the Chromebook enrolled in the school's management system, or is it your own?

A school-enrolled (managed) Chromebook usually shows a small building icon or a "managed by" notice on the sign-in screen and at the bottom of the settings page. The school's IT team controls it through an admin console, and that control does not stop at the school gate: it applies on home Wi-Fi, on a hotspot, anywhere the device goes.

A personal Chromebook on school Wi-Fi only has to deal with the network filter. Nearly everything in the broader Unblocked at School guide works on it.

On a managed device, read the next section first. It will save you time.

What a Managed Chromebook Usually Blocks

The school chooses these settings, so yours may be looser or tighter. These are the common ones:

• Extensions. Installs are often limited to a school-approved list. A VPN or proxy extension will not install, and the Chrome Web Store may be hidden entirely.
• Android apps. The Play Store is often turned off. When it is on, the school chooses which apps appear in it, so a VPN app is usually missing.
• Guest mode. Commonly disabled, so there is no way to browse outside the managed profile.
• Developer mode. Blocked on enrolled devices. Trying to force it typically wipes the Chromebook, which re-enrolls itself as soon as it connects again. Schools treat this as tampering. Leave it alone.
• Incognito and secondary accounts. Incognito windows are often disabled, and adding a personal Google account alongside the school account is often blocked.
• Network and VPN settings. Built-in VPN configuration and proxy settings are usually locked. Some schools also restrict the device to approved Wi-Fi networks only.
• Secure DNS. The school can force this setting on, off, or to its own filter.
• URL blocklists. A list of blocked sites enforced by the device itself, on any network.

On top of these, many schools install a classroom management and filtering extension from companies such as GoGuardian, Securly or Lightspeed. It runs inside the browser, applies the block list, logs the sites you visit, and can show a teacher your open tabs during class. It keeps doing all of that on a hotspot.

The honest consequence: on a tightly managed Chromebook there may be no method that reaches a blocked site. The sections below say which ones are worth trying and where they stop.

Method 1: Connect to a Personal Hotspot

This removes the school Wi-Fi filter from the picture. It does not remove device policies or the monitoring extension.

1. On your phone, turn on the personal hotspot (Android: Settings, then Network and internet, then Hotspot and tethering. iPhone: Settings, then Personal Hotspot).
2. On the Chromebook, click the clock in the bottom-right corner, then the Wi-Fi icon.
3. Choose your phone's hotspot name and enter its password.
4. Open What Is My IP. The provider shown should now be your mobile carrier, not the school.
5. Try the site.

If the site now loads, the block was network-only. If it still fails, it is enforced on the device, and you can stop here: no network trick will change that.

Android phones can also tether over a USB cable. Check your plan before streaming anything; video burns through mobile data fast.

If the hotspot does not appear or the Chromebook refuses to join it, the school has restricted which networks the device can use, and there is no workaround on the device.

Method 2: A Web Proxy in the Browser

A web proxy is a site that loads another site inside itself. Nothing to install, so it works on managed devices where the extension and app routes are closed.

1. Open a new tab and go to a web proxy site. New ones appear constantly and get blocked just as fast.
2. Paste the blocked address into the proxy's box.
3. Press Go and browse inside the proxy's frame.

Expect slow pages, broken layouts, ads, and video that rarely plays. Never sign in to anything: every keystroke passes through the proxy operator's server, and a proxy that shows a login page can keep what you type. Assume the proxy page itself is visible to the monitoring extension and to a teacher's screen view.

The device URL blocklist applies to proxies too, and many schools block the "proxy and anonymizer" category wholesale, which ends this method before it starts.

Method 3: Saved and Text-Only Copies

Useful for articles and reference pages. Useless for anything you need to interact with.

Wayback Machine. Go to web.archive.org, paste the blocked page's address, and pick a saved date. The copy comes from the archive's servers, so a network block on the original site does not apply. Some schools block the archive too.

Google Translate as a page loader. Open translate.google.com, paste the full address of the blocked page into the text box, and click the link that appears in the translated side. Google fetches the page and shows it through a translate address. It is clunky, it breaks on complex sites, and it is often blocked, but it costs nothing to try.

Reader mode does not help. It still has to load the page first, so a blocked page stays blocked.

Method 4: Secure DNS

This only beats filters that work by refusing to look up blocked sites. It does nothing against a filter that inspects the connection or the device blocklist, and on managed Chromebooks it is often locked. It takes a minute to check.

1. In Chrome, open Settings, then Privacy and security, then Security.
2. Scroll to Use secure DNS.
3. If the switch is grey with a note that it is managed, the school controls it and you can stop.
4. If it is available, choose a public provider from the list and turn it on.
5. Reload the blocked site.

If it worked, the monitoring extension still logs what you visited.

Method 5: A VPN, Where the School Allows It

There are three ways to run a VPN on a Chromebook. On a managed device all three are usually closed, and it is better to find that out in a minute than an hour.

Android app from the Play Store. If the Play Store opens and a VPN app appears in it, install it, sign in and tap Connect; the whole device then routes through the VPN. If the store is missing or the app is not listed, the school has disabled it.

Built-in VPN. Recent ChromeOS versions can set up a VPN directly in Settings, under Network, then Add connection. On managed devices this is usually greyed out.

Chrome extension. A VPN extension protects only browser traffic, and only installs if the school allows extensions outside its list.

Even when a VPN connects, the monitoring extension and the device blocklist still apply. A VPN hides what the network sees, not what the device sees.

On your own laptop or phone it is a different story: a VPN is the method that works most consistently on school Wi-Fi. GhostShield, as one option, has apps for Windows, macOS, Android, iPhone and iPad, uses WireGuard with ChaCha20 encryption, and keeps a strict no-logs policy, with one plan covering up to 10 devices.

The Monitoring Part Nobody Mentions

Getting a page to load does not mean nobody knows. On a managed Chromebook, someone usually can.

The filtering extension logs visited sites, hotspot or not, classroom tools can show the teacher your screen live, and activity inside your school Google account is visible to the school's admins. The school can usually also see that a managed device left its network.

None of that is a reason to panic over a blocked news article. It is a reason to keep what you do on the school device inside the acceptable use policy, and to use a personal device for the rest.

When to Just Ask

If the site is for schoolwork, say so. Teachers can usually request an unblock from IT, and at many schools the block list is reviewed when someone asks. It feels slower than a trick, but it is the only route that cannot backfire.

For sites that are blocked for a reason, the Chromebook is simply the wrong device. The companion guides on school iPads, social media at school and YouTube at school cover other situations, the original school or work unblocking guide covers personal devices in more depth, and the pages for ChatGPT and YouTube go straight to the steps.

Key Takeaways

• Managed school Chromebooks enforce blocks and monitoring on every network, not just school Wi-Fi.
• Extensions, Android apps, Guest mode, Developer mode and VPN settings are usually disabled by the school.
• A personal hotspot removes the school Wi-Fi filter and nothing else; check What Is My IP to confirm it connected.
• Web proxies and archived copies work without installs but are slow, often blocked and unsafe for logins.
• Secure DNS is worth a one-minute check and rarely works on a managed device.
• For anything beyond schoolwork, use a device you own; for schoolwork, ask a teacher to unblock the site.

FAQ

Can I unblock websites on a school Chromebook without a VPN?

Sometimes. A personal hotspot, a web proxy or an archived copy of the page needs nothing installed. Each one fails against device-level blocks, which are common on managed Chromebooks.

Why is Guest mode missing on my Chromebook?

The school turned it off through its management console. Guest mode would let you browse outside the managed profile, so most schools disable it. No setting on the device brings it back.

Will the school know if I use a hotspot?

The filtering extension keeps logging on any network, and the school can usually see that the device was off its Wi-Fi. Whether anyone looks depends on the school. Assume the record exists.

Does a VPN hide me from the teacher's screen monitoring?

No. Screen monitoring and filtering extensions run on the device itself and see the page you are looking at. A VPN only changes what the network between you and the internet can see.

Final Word

A managed Chromebook is built to stay managed, and the most reliable fix for a blocked site on one is a polite request. For your own devices on school Wi-Fi, a VPN on your own device is the route that works. GhostShield offers a 10-day free trial with a card, a 30-day money-back guarantee and plans from $3.99 a month on the 3-year plan at ghostshield.ai/pricing.