How to protect your child's Chromebook with WhitelistVideo
Set up WhitelistVideo on your child's Chromebook to filter YouTube videos. Chromebooks are one of the most secure platforms for families because they only run Chrome and approved apps.
Chromebook Security: A personal Chromebook does not lock the extension in place, but if your child uninstalls it, you're alerted by email. To make it impossible to uninstall, buy a Google Workspace subscription (about US $5 per month; check Google's pricing for your region), set yourself up as the administrator and force-install the extension from the Google Admin console. A school-managed Chromebook is already admin-managed.
Required Chromebook setup
- Install the WhitelistVideo Chrome extension on the child's Chromebook
- In Family Link: block Guest mode and Incognito, and require your approval for apps and extensions
- Turn off Family Link's own YouTube restrictions, so they don't interfere with WhitelistVideo
Don't block youtube.com: the extension needs it to play the videos you approve.
Optional: block google.com (Google results play video snippets) and set DuckDuckGo (privacy-focused) as Chrome's default search engine.
What do I need to protect a Chromebook?
- Your child's Chromebook (ChromeOS device)
- Google Chrome browser (pre-installed)
- A WhitelistVideo account
- About 2-5 minutes depending on device type
How does WhitelistVideo work on Chromebooks?
WhitelistVideo for ChromeOS uses the browser extension only. Unlike Windows and Mac, there is no desktop installer on ChromeOS. Managed device enrollment is required for tamper-resistant force-install.
Scroll horizontally to see all columns.
| Feature | Personal Chromebook | Personal + Enterprise Enrollment | School-Managed Chromebook |
|---|---|---|---|
| Extension installation | Chrome Web Store | Google Admin Console | Google Admin Console |
| Can child remove extension? | Yes | No (force-installed) | No (force-installed) |
| Developer tools blocked | No | Yes (admin policy) | Yes (admin policy) |
| Guest mode access | Available | Blocked (admin policy) | Blocked (admin policy) |
| Best for | Everyday family use, with the Family Link steps | Families wanting un-removable protection | Students of all ages |
What protection levels are available?
Level 1: Extension only (personal Chromebook)
- Install the Chrome extension from the Web Store
- Child can remove it by going to chrome://extensions
- If they uninstall it, you're alerted by email (the dashboard also shows the device as "Inactive")
- Best for: trying WhitelistVideo out; complete the Family Link steps (Level 2) for everyday use
Level 2: Extension + Family Link (personal Chromebook)
- Install extension via Family Link supervised account
- Family Link requires your approval to install extensions — and to re-install after removal
- Child CAN still disable or remove the extension (this is a ChromeOS limitation, not something any app can prevent)
- You're alerted by email if your child uninstalls the extension
- Family Link blocks guest mode so the child can't browse without the extension via guest profile
- Best for: every personal Chromebook (this is the required setup)
Important clarification: Family Link does NOT prevent extension removal. It prevents extension installation without approval. If your child removes WhitelistVideo, you're alerted by email, and they need your approval to re-install it. This is meaningful friction, not absolute prevention.
Level 3: Google Workspace + Admin console enrollment (personal Chromebook, tamper-resistant)
- Parent buys a Google Workspace subscription (about US $5 per month; check Google's pricing for your region), sets themselves up as the administrator and enrolls the device in their own Google Admin Console
- Extension is force-installed — child cannot remove, disable, or modify it
- Admin policies block developer tools, guest mode, and incognito
- Requires a one-time Powerwash (factory reset) to enroll the device
- Best for: Families who need managed, tamper-resistant protection on a personal device
This is the "power parent" option. You get the same enterprise-grade protection that schools and corporations use, on your own family Chromebook. It costs one Google Workspace subscription, about US $5 per month (check Google's pricing for your region), and takes about 30 minutes to set up.
Level 4: School-managed device (strongest)
- School IT admin installs extension via Google Admin Console
- Extension force-installed and cannot be removed by student
- Admin blocks developer tools, guest mode, incognito, Powerwash, and Linux/Crostini
- Requires enterprise Google Workspace for Education
- Best for: All students on school-issued Chromebooks
Chromebook protection comparison
Scroll horizontally to see all columns.
| Protection Method | Can Child Remove? | Managed enforcement? | Setup Time | Best For |
|---|---|---|---|---|
| Extension Only | Yes, easily | No — email alert on uninstall | 2 minutes | Testing only |
| Extension + Family Link | Yes, but you're alerted by email + re-install needs approval | No — friction + detection | 10 minutes | Every personal Chromebook (the required setup) |
| Google Workspace + Admin console | No through the supervised Chrome profile (force-installed) | Yes | 30 minutes (one-time) | Families needing managed enforcement |
| School-Managed | No (force-installed) | Yes | 5 minutes (IT admin) | School-issued devices |
Recommendation: For most families with personal Chromebooks, Family Link (Level 2) adds supervision and detection, but your child can still remove the extension. For tamper-resistant extension enforcement, use Google Workspace + Admin console enrollment or a school-managed device and test the managed policy.
Chromebook security advantages
Chromebooks offer unique security benefits for families:
- Chrome-centered environment — Browser access is centered on Chrome, while approved Android apps still need review
- No desktop software — Can't install programs that could bypass filtering
- Built-in Google integration — Family Link works seamlessly with ChromeOS
- Automatic updates — Security patches apply automatically
Don't forget Guest Mode. Make sure to disable Guest Mode via Family Link or admin policy to prevent your child from browsing without the extension.
Quick start guides
Which setup should I choose?
For personal Chromebooks
The required setup for every child:
- Set up Family Link on the Chromebook
- Install the extension and approve via Family Link
- In Family Link, block guest mode and Incognito and require app and extension approval
- Turn off Family Link's own YouTube restrictions
- If the extension is uninstalled, you're alerted by email
For families who need managed enforcement on personal Chromebooks
For tamper-resistant force-install without relying on a school:
- Buy a Google Workspace subscription (about US $5 per month; check Google's pricing for your region) and set yourself up as the administrator
- Powerwash the Chromebook and enroll it in your Google Admin Console
- Force-install the WhitelistVideo extension via Admin Console policies
- Block developer tools, guest mode, and incognito via policies
For school-issued Chromebooks
For maximum protection on school devices:
- Contact your school's IT department
- Provide them the school-managed setup guide or the IT request template
- IT admin deploys extension via Google Admin Console
- Activate the extension with your PAC code
School IT request template
Use this template to email your child's school IT department:
Subject: Request to install WhitelistVideo YouTube filtering extension
Hi [IT Admin Name],
I'd like to request that the WhitelistVideo Chrome extension be force-installed on my child's school Chromebook. It filters YouTube at the channel level — only parent-approved channels can play.
Extension details:
- Name: WhitelistVideo – Safe Videos for Kids
- Extension ID:
mapkkanjgaongckjkhklbhekefemookh - Chrome Web Store: Link (opens in a new tab)
- Requires: Chrome 90+, no special permissions beyond YouTube access
Recommended Google Admin Console setup:
- Go to Devices → Chrome → Apps & Extensions → Users & Browsers
- Add the extension by ID:
mapkkanjgaongckjkhklbhekefemookh - Set installation policy to "Force install"
- Optionally block all other extensions to prevent bypass tools
Firewall/network requirements:
*.whitelist.video(API and dashboard)*.googleapis.com(YouTube API)
Support contact: support@whitelist.video — our team can help with enterprise deployment questions.
The detailed IT setup guide is at: https://whitelist.video/docs/devices/chromebook/school-managed (opens in a new tab)
Thank you!
Chromebook troubleshooting
My child removed the extension
This is expected behavior on personal Chromebooks — ChromeOS does not allow any third-party app to lock an extension in place without managed enrollment.
What to do:
- Check the email alert we sent you (the dashboard also shows the device as "Inactive")
- Have a conversation with your child about why they removed it
- Re-install: if using Family Link, the child will need to request installation again
- For tamper-proof protection, consider Google Workspace + Admin console enrollment or ask your school IT to force-install
The extension won't install
- Check that Chrome Web Store access isn't blocked
- On school devices, contact IT — extensions may require admin approval
- Try signing out and back into Chrome
- Clear browser cache and try again
My child uses guest mode to bypass filtering
- Guest mode doesn't load extensions by design
- On school/enterprise-enrolled devices, guest mode is blocked by policy
- On personal devices, use Family Link to disable guest mode
- Monitor device access and establish trust-based rules
Extension works but videos aren't filtered
- Check that the extension is activated with your PAC code
- Click the extension icon to verify activation status
- Make sure your whitelist has approved channels
- Try deactivating and reactivating the extension