How To Get Online on a Locked-Down Chromebook

You can get online on a locked-down Chromebook without admin rights using built-in tools like Secure DNS, a manual proxy, or your phone’s tethering. If those fail, try a free proxy extension from the Chrome Web Store. Your school or employer blocks certain traffic, but they can’t block everything.

What Locked-Down Actually Means on a Chromebook

A locked-down Chromebook has restrictions set by an administrator—usually at a school or workplace. You can’t install apps outside the Chrome Web Store. You can’t change system settings like Wi-Fi or VPNs. You might not even see the normal ChromeOS setup screen. These restrictions are enforced through a policy file that syncs to your device. The admin can block specific URLs, disable incognito mode, and force safe search. But they can’t stop you from using features that exist inside ChromeOS itself.

If you can open Chrome, you can try these methods. If you can’t even do that, skip to the last section on Guest Mode or recovery.

Check Your Restrictions First (Before You Try Anything)

Open a blank tab and type chrome://policy in the address bar. Press Enter. You’ll see a list of policies applied to your Chromebook. Look for these:

• ProxySettings – If it’s set to “ProxyMode: system,” you can change your proxy. If it’s “ProxyMode: direct,” you’re locked out of manual proxy changes.
• URLBlocklist – Shows exactly which sites are blocked. If YouTube is on the list, your proxy needs to handle that.
• ExtensionInstallBlocklist – If this includes the Chrome Web Store, you can’t install new extensions.

Also check chrome://accessibility to see if the Chrome Web Store is even accessible. If it’s blocked, skip the proxy extensions section. Knowing what’s locked helps you choose the right method. If manual proxy is allowed, that’s the easiest fix.

Use a Free Proxy Extension (Like Hoxx or DotVPN)

Proxy extensions run inside Chrome and don’t require admin rights. They reroute your traffic through a different server, bypassing network blocks. Two free options work well.

Hoxx VPN Proxy

Hoxx offers a free tier with no sign-up required. Install it from the Chrome Web Store. Once installed, click the Hoxx icon in your toolbar, select a country (try Netherlands or USA), and click “Connect.” It’s lightweight and works for browsing. The free version has a data cap of 1GB per month, which is enough for light browsing or checking a blocked page.

Price: Free. Version: Hoxx VPN Proxy 3.6.0 as of 2026.

DotVPN

DotVPN also has a free tier, but it limits you to 2GB per month. Install it from the Chrome Web Store, create a free account (email only), and enable “Proxy Mode.” DotVPN is faster than Hoxx for streaming, but the 2GB cap runs out quickly if you watch videos.

Price: Free. Version: DotVPN 5.8.1 as of 2026.

Both extensions work on locked-down Chromebooks as long as the Chrome Web Store isn’t blocked. If it is, move on.

Try the Built-In Secure DNS Override (ChromeOS 108+)

ChromeOS 108 and later include a Secure DNS setting that can bypass network filters. It doesn’t hide your IP, but it encrypts your DNS queries. Many school networks block sites by DNS alone. Changing to a public DNS provider breaks that.

To enable it:

1. Open Settings (click the time in the bottom-right, then the gear icon).
2. Go to Privacy and Security > Security.
3. Look for Use secure DNS. Toggle it on.
4. Select “With:” and choose Google (Public DNS) or Cloudflare (1.1.1.1).

This works immediately. Test by visiting a site that was previously blocked. If it loads, the DNS was the issue. If not, the network is blocking at a deeper level. This setting is available on ChromeOS 108 and up. If your Chromebook is stuck on an older version, you can’t use this method.

Set Up a Manual Proxy in Chrome Settings

Manual proxy setup lets you route all Chrome traffic through a specific server. You need a proxy server address—free ones are easy to find online, but they’re slow and often unreliable. For testing, use “proxy.hide.me” on port 3128.

Steps:

1. Open Chrome Settings.
2. Go to System > Open your computer’s proxy settings. This opens the ChromeOS proxy dialog.
3. Select Manual proxy configuration.
4. Enter the proxy server address and port. For example: HTTP Proxy: proxy.hide.me, Port: 3128.
5. Click Save.

This method works only if the admin hasn’t locked proxy settings. If you see “Your proxy is managed by your administrator,” you can’t change it. Free proxy servers are slow and may log your traffic. Use this only for short-term access. For a better experience, pay for a private proxy or use your phone.

Use Your Phone as a Tethering Bypass (USB or Bluetooth)

Your phone’s data connection isn’t subject to school or work filters. Tethering gives you a separate internet path. Two methods: USB or Bluetooth.

USB Tethering (Pixel 6 or Samsung Galaxy S22)

On a Pixel 6 running Android 15, go to Settings > Network & internet > Hotspot & tethering > USB tethering. Plug your Chromebook into the phone with a USB-C cable. Your Chromebook will see a new network connection immediately. On a Samsung Galaxy S22 with One UI 6, the path is Settings > Connections > Mobile Hotspot and Tethering > USB tethering. Same result. No admin rights needed on the Chromebook. It treats the tethered connection like a wired ethernet link.

Bluetooth Tethering

Pair your phone and Chromebook via Bluetooth. On the phone, enable Bluetooth tethering under the same Hotspot & Tethering menu. On the Chromebook, go to Settings > Connected devices > Bluetooth and select your phone. Look for the “Internet access” option. It’s slower than USB but works. This method bypasses all network-level blocks because your traffic goes through your phone’s cellular data, not the school’s Wi-Fi.

What to Do If Everything Is Blocked (Guest Mode or Recovery)

If you can’t change DNS, install extensions, or set a proxy, and tethering isn’t an option, you have two last resorts.

Guest Mode

Guest mode on a Chromebook starts a fresh session with no extensions, no history, and no login. It doesn’t load the admin’s policy file. To enter it:

1. Click the time in the bottom-right.
2. Click Sign out (or the person icon).
3. On the login screen, click Browse as Guest.

Guest mode doesn’t load extensions or saved settings, but it still uses the same network. If the block is network-wide (not DNS), Guest mode won’t help. If it’s extension-based, it might.

Powerwash (Factory Reset)

Powerwash wipes all local data and resets the Chromebook to factory defaults. It removes the admin’s policy file—but only until you log back in with the same school account. If you don’t log in, you can use the Chromebook as a personal device.

To Powerwash:

1. Open Settings.
2. Go to Advanced > Reset settings.
3. Click Powerwash > Restart.

You lose all local files, downloads, and saved passwords. If you’re using a school-issued Chromebook, the admin can re-enroll it after Powerwash, locking it again. This only works if the Chromebook is not enrolled in a management system and you don’t sign in with the school account. Use this only as a last resort.

Start with Secure DNS. If that doesn’t work, try a proxy extension. Failing that, tether your phone. If none work, Guest mode is your best bet for temporary access. Powerwash is for when you own the Chromebook and want to start fresh.

Part of our guide to How Network Blocks Work, and How To Get Around Them.