How to Block a Website on Your Router, Brand by Brand
How to block a website on your router: the menus for eero, ASUS, NETGEAR, TP-Link Archer and Deco, plus why blocks fail and how to make them stick.

On this page
To block a website on your router, sign in to its app or web settings, find the parental controls or URL filter, add the site’s domain (such as example.com) to the block list, and save. Then test it on the device you’re trying to block, because a cached page or a second domain can make the block look broken. The exact menu depends on your router’s brand; the steps for eero, ASUS, NETGEAR, TP-Link Archer and TP-Link Deco are below, taken from each maker’s support pages.
Router-level blocking covers every device on your Wi-Fi without installing anything on them. It doesn’t follow a phone onto cellular data, and a determined user can get around it (see why blocks fail). Menus can differ by model and firmware; if yours doesn’t match, search your maker’s support site for your model number.
Before you start: what to type
- Use the domain, not the URL. Type
example.com, nothttps://www.example.com/page. eero says URLs aren’t accepted, and TP-Link tells Deco users to enter “the full domain name of the websites rather than the keywords.” - Know what the entry covers. On eero, blocking
example.com“affects the entire domain,” including subdomains, whilewww.example.comcovers only that one subdomain. - Expect more than one domain. eero warns that popular sites may need several domains blocked. TP-Link suggests checking a profile’s History page to find the related domains a site redirects to.
eero (eero app, needs eero Plus)
eero calls this Block & Allow Sites, and it’s “an eero Plus feature.”
For one person’s devices:
- On the Home tab, tap the person’s Profile.
- Tap Block & Allow Sites.
- Tap Add Blocked Site, enter the domain, and turn on the toggle.
- Tap Save.
For the whole network: go to Home > Security & privacy > eero Plus > Network controls > Block & Allow Sites and add the domain the same way.
eero says allowed sites “always take priority over Content Filters and Blocked Sites,” and changes usually apply within seconds, though caches can delay them by minutes or hours. To decide whether Plus is worth paying for, see Is eero Plus worth it?.
ASUS (web settings: Firewall > URL Filter)
- Open
http://www.asusrouter.com(or your router’s LAN IP) and sign in. - Go to Firewall and choose the URL Filter tab.
- Turn the URL Filter on and set the list type to Black List (block the listed sites) or White List (allow only listed sites).
- Enter the address, click +, then Apply.
The catch: ASUS’s FAQ (last updated July 22, 2024) says its routers don’t support blocking a website for one specific device, or exempting particular devices from the URL filter. Treat it as a whole-network block.
NETGEAR Nighthawk (web settings: Block Sites)
- Go to
www.routerlogin.netand sign in as admin. - Open ADVANCED > Security > Block Sites. Some models use Settings > Content Filtering > Block Sites instead.
- Under Keyword Blocking, choose Per Schedule or Always.
- Type a keyword or domain, click Add Keyword, and click Apply.
NETGEAR’s article (last updated July 7, 2025) lists many Nighthawk routers, such as the R7000, RAX50 and XR1000. It doesn’t list Orbi systems.
NETGEAR Orbi and Nighthawk app (Smart Parental Controls)
On models managed with the Orbi or Nighthawk app, including Orbi systems and the RS100, RS200 and RS300, NETGEAR’s knowledge base describes per-profile blocking in the app:
- Open the Orbi or Nighthawk app and tap Parental Controls.
- Pick the profile, then open its History tab.
- Swipe right on a website and choose Set as Not Allowed.
Because this works from history, the person’s device needs to have visited the site first. NETGEAR’s article doesn’t say whether this needs a paid Smart Parental Controls tier; check the app on your model.
TP-Link Archer (web settings or app: Parental Controls)
- Sign in to your router and go to Advanced > Parental Controls.
- Click Add to create a profile for a family member and add their devices.
- At the blocked-content step, add keywords. TP-Link says “all websites containing the keywords will be blocked.”
- Save the profile.
Two cautions from TP-Link’s guide (updated October 21, 2025), which covers many Archer models, including the A7 and AX3000: turn off the private MAC address on the profile’s devices, “otherwise, the parental control won’t take effect,” and only devices that have already joined your network show up in the list. Our private Wi-Fi address guide explains how that setting works and when to turn it off. A broad keyword can block more than you mean to: “news” would catch every domain containing it.
TP-Link Deco (Deco app)
In the Deco app, open Parental Controls, select the person’s profile, and go to its Blocked Websites page. Tap Add a Website and enter the full domain name. TP-Link’s troubleshooting page (updated August 25, 2026) says to confirm the Malicious Content Filter is turned on under Security if blocking doesn’t work, to add redirect domains from the profile’s History page, and to clear the browser cache before testing again.
Why a blocked site still loads
| Cause | What to do |
|---|---|
| Browser or device cache | Clear the browser cache, or restart the device. eero and TP-Link both list this. |
| The site uses other domains | Block the parent domain, and add redirect domains from the profile’s history. |
| Device uses a private (random) MAC address | Turn it off for your network so the device matches its profile (TP-Link). |
| Encrypted DNS (DNS over HTTPS) | Check the browser’s secure DNS setting; see below. |
| VPN or cellular data | A VPN hides which sites a device visits from your router, and cellular data skips your router entirely. Use the device’s own parental controls too. |
On encrypted DNS: Mozilla’s support page says Firefox checks for network filtering and parental controls and turns its automatic DNS over HTTPS off when it finds them. But “if a user has chosen to manually enable DoH, the signal from the network will be ignored.” In other words, a router block works against casual browsing, not against someone who changes their browser settings. For stronger controls, pair router blocking with device-level parental controls; our parental controls router guide compares what each brand offers, and How to see who’s connected to your Wi-Fi helps you find every device to put in a profile.
Sources and verification
| Important claim | Source | Status |
|---|---|---|
| eero Block & Allow Sites steps; eero Plus required; domain rules; allowed sites take priority | eero Support | Verified |
| ASUS URL Filter steps; no per-device blocking | ASUS | Verified |
| NETGEAR Block Sites steps and model scope | NETGEAR | Verified |
| NETGEAR app blocking via History tab; models | NETGEAR | Verified (Premium requirement not stated) |
| TP-Link Archer keyword blocking; private MAC caution | TP-Link (VIGI mirror) | Verified |
| Deco Blocked Websites; full domain names; troubleshooting steps | TP-Link | Verified |
| Firefox ignores network signal when DoH is manually enabled | Mozilla | Verified |
Frequently asked questions
Can I block a website for just one device?
On most brands, yes, by putting the device in a parental-controls profile: eero, TP-Link (Archer and Deco) and NETGEAR's Smart Parental Controls block per profile. ASUS says its URL filter doesn't support blocking a site for one specific device.
Why does a blocked website still load?
Common reasons: your browser or device cached the site, the site uses other domains you haven't blocked, the device uses a private MAC address so it isn't matched to its profile, or the device uses encrypted DNS, a VPN or cellular data that skips your router's filter.
Do I need a subscription to block websites on my router?
Not on most routers. ASUS, NETGEAR and TP-Link include site blocking in their settings. On eero, Block & Allow Sites requires eero Plus. NETGEAR's Smart Parental Controls also offers a Premium subscription; check the app for what's included on your model.
Should I type the full web address?
No. Enter the domain, such as example.com. eero says URLs aren't accepted, and TP-Link's Deco guide recommends entering the full domain name rather than keywords.
Sources
- What is Block & Allow Sites?, eero Support
- [Wireless Router] How to set up the URL Filter - Black/White List? (Firewall), ASUS (Jul 22, 2024)
- How do I block Internet sites on my NETGEAR router from the router web interface?, NETGEAR (Jul 7, 2025)
- How do I block or allow access to a website with NETGEAR Smart Parental Controls?, NETGEAR (Jul 7, 2025)
- How to configure Parental Control on TP-Link Wi-Fi Router, TP-Link (VIGI mirror) (Oct 21, 2025)
- Troubleshooting Guide: TP-Link Router/Deco Parental Control Not Working as Expected, TP-Link (Aug 25, 2026)
- Configure networks to disable DNS over HTTPS, Mozilla Support (Dec 1, 2024)


