How to Block Porn in Incognito and Private Browsing
Extensions, private browsing policies, DNS filters and blockers compared · Updated
Most porn blocking extensions do not run in Incognito, InPrivate or Firefox private windows until you allow them. To block porn in private browsing, allow the extension in private windows, turn private browsing off with a browser policy, use a family DNS filter, or use a blocker that checks private browsing is covered.

Key takeaways
- Extensions are off in private windows by default: Chrome, Edge and Firefox all require you to allow them.
- Allowing an extension is one switch: the same switch turns it off again.
- Chrome and Edge can remove private browsing: each has a policy for it.
- A family DNS filter covers private windows automatically, unless the browser's secure DNS setting points at another provider.
- Every browser on the computer needs the same setup: a browser without it stays open.
Methods compared
| Method | Chrome Incognito | Edge InPrivate | Firefox private | How easy to undo |
|---|---|---|---|---|
| Allow the extension in private windows | Yes | Yes | Yes | One switch |
| Turn off private browsing by policy | Yes | Yes | Not covered here | Delete the registry value |
| Family DNS filter | Yes | Yes | Yes | One setting |
| Ascension | Yes | Yes | Yes | Difficult |
1. Allow your blocking extension in private windows
A blocking extension that works in a normal window does nothing in a private window until you allow it. Chrome calls the setting Allow in Incognito, Edge calls it Allow in InPrivate, and Firefox calls it Run in Private Windows.
Chrome
- 1.Select More, then Extensions, then Manage extensions.
- 2.Select Details on the blocking extension.
- 3.Turn on Allow in Incognito.
Edge
- 1.Type edge://extensions in the address bar.
- 2.Select Details on the blocking extension.
- 3.Turn on Allow in InPrivate.
Firefox
- 1.When you install the extension, tick Allow extension to run in private windows before selecting Add.
- 2.For an extension already installed, open the menu, then Add-ons and themes, then Extensions, and select the extension.
- 3.Next to Run in Private Windows, select Allow.
Limits: the same switch turns it off again, and the extension can be removed in one click.
2. Turn off private browsing with a policy
Chrome and Edge both have a policy that removes Incognito or InPrivate from the browser.
Chrome
- 1.Press Windows + R, type regedit and press Enter.
- 2.Go to HKEY_LOCAL_MACHINE\SOFTWARE\Policies, and create a key named Google, then a key named Chrome inside it, if they do not exist.
- 3.In Chrome, create a DWORD (32-bit) Value named IncognitoModeAvailability and set it to 1.
- 4.Restart Chrome and open chrome://policy to confirm it is active.
Edge
- 1.In regedit, go to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft and create a key named Edge if it does not exist.
- 2.In Edge, create a DWORD (32-bit) Value named InPrivateModeAvailability and set it to 1.
- 3.Restart Edge and open edge://policy to confirm it is active.
For both, 0 means private browsing is available and 2 means every window is private.
Limits: it only affects the browser it is set for, it does not block any sites in normal windows, and an administrator can delete the value.
3. Use a family DNS filter
A family DNS filter blocks adult sites for the whole computer, so it applies in every window of every browser, private or not. Set one of these on your computer or router:
| Service | Preferred DNS | Alternate DNS |
|---|---|---|
| CleanBrowsing Family Filter | 185.228.168.168 | 185.228.169.168 |
| OpenDNS FamilyShield | 208.67.222.123 | 208.67.220.123 |
| Cloudflare for Families | 1.1.1.3 | 1.0.0.3 |
Then check the browser's secure DNS setting. In Chrome it is Use secure DNS under Settings, Privacy and security, Security. In Edge it is under Settings, Privacy, search, and services, Security. Keep it on your current service provider or turn it off, because another provider sends lookups past the filter.
Limits: anyone with administrator access can change the DNS back, and a VPN is not filtered.
4. Use a blocker that checks private browsing
A dedicated blocker applies the same blocks in normal and private windows of every browser, and locks them so they cannot be switched off on impulse.
Ascension is a hard-to-bypass Windows application that blocks harmful and distracting content on the web. It is intended for people who struggle with addiction, and it tracks your digital usage automatically to give insights on how one can improve.
Ascension requires its extension to be allowed in private windows. While a block is active, a browser running without the extension, or with it not allowed in private windows, is closed.
- 1.Install Ascension and add its extension to Chrome, Edge, Firefox and your other browsers.
- 2.Allow the extension in private windows in each browser.
- 3.Load the premade Adult Content categories for domains and keywords.
- 4.Set the block to Always block, and lock it so it cannot be edited or removed.
Key features
- Block variety: block whole sites, sections of a site, keywords and search terms, always or on a schedule, with daily time limits and entry delays for whole sites.
- Block tampering: a block cannot be edited or deleted.
- Uninstall protection: Ascension cannot be uninstalled while a block is locked.
- Extension tampering: removing or disabling the browser extension does not lift a block, and a browser running without it is closed while a block is active.
- Premade block lists: adult content, gambling and social media lists are ready to block in one step.
Limits: Windows only. iOS and Mac are in development.
For a wider Chrome setup, read how to block porn on Chrome. For Edge setup beyond private browsing, read how to block websites on Microsoft Edge.
Frequently asked questions
Do porn blockers work in Incognito mode?
Extensions do not, until you turn on Allow in Incognito on the extension's Details page. A family DNS filter works in Incognito automatically.
Is there a porn blocker for private browsers?
Yes. Any blocking extension works in private windows once allowed, and a family DNS filter covers them automatically. Ascension requires its extension to be allowed in private windows and closes a browser that runs without it while a block is active.
How do I block porn in Edge InPrivate?
Turn on Allow in InPrivate for your blocking extension at edge://extensions, or set the InPrivateModeAvailability policy to 1 to remove InPrivate.
How do I turn off Incognito mode in Chrome?
Set the IncognitoModeAvailability policy to 1 under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome and restart Chrome.
Does Incognito mode get past a DNS filter?
No. Incognito uses the same DNS as normal windows. The filter only stops working if the browser's secure DNS setting points at another provider, the DNS is changed back, or a VPN is used.
Available on Windows 10 & 11