A website blocker with a password only works as well as the person who knows the password. If you set it yourself, you can type it in at a weak moment. It holds better when someone else picks the passcode. It holds best when turning the block off also sends that person an alert. Here's how each setup works, and where each one falls short.
In short
A password you set yourself is a speed bump. You can still get past it whenever you decide to.
A passcode held by someone you trust is harder to get around, but you have to ask them for every change, even the reasonable ones.
An alert changes the deal. You can still turn the block off, but it's no longer private, and that is what tends to stop people.
No password or blocker can make a block impossible to remove. The aim is to make removing it a choice you can't hide.
Does a website blocker with a password actually work?
It works as a speed bump. A password puts one step between you and the site. That step gives you a few seconds to notice what you're doing, and sometimes that's enough to close the tab.
What a password can't do is decide for you. Everything depends on who knows it. Most setups fall into one of three kinds:
- You set the password and you know it. The block lasts until you want it gone.
- Someone else sets the password. To change anything, you have to ask them.
- Someone else gets told when the block comes off. The password matters less, because turning the block off is no longer something only you know about.
Each kind asks a bit more of another person, and each one tends to hold a bit longer.
Why does a password you know rarely hold?
When you set up a block, you're calm and you know what you want. When you want to take it off, you're often tired, bored, stressed, or awake too late. Those are two very different moods, and the same password has to hold up in both.
The person who wants the block gone already knows the code. Four digits take a second to type. Nobody asks why, and nobody sees a record of it afterward.
Some people try tricks. They make up a long random password and hide the note in a drawer. They ask a roommate to type something they never see, then lose track of it. Tricks like these add friction, and friction does help a little. But the note can be found by the person who hid it, and a forgotten password often becomes a reason to wipe the whole setup and start over.
None of this is a character flaw. For a lot of people, the urge seems to show up at the exact moment their reasons feel far away. A setup that doesn't depend on that moment going well has a better chance of lasting.
How do you set up Screen Time with a passcode someone else holds?
Screen Time is free and already on your iPhone. In iOS 26, start by adding the sites you want blocked:
- Go to Settings > Screen Time > Content & Privacy Restrictions and turn on Content & Privacy Restrictions.
- Tap App Store, Media, Web, & Games > Web Content.
- Select Limit Adult Websites.
- Tap Add Website below Never Allow, and enter the website's URL.
Then lock it. Go to Settings > Screen Time, scroll down, and tap Lock Screen Time Settings. At this step, hand the phone to the person you trust so they can enter a four-digit passcode twice. Don't watch them do it.
Apple says a Screen Time passcode is not the same as the passcode that unlocks your phone. Once it's set, it must be entered before you can change any Screen Time settings. If your partner holds it, your blocklist stays as it is until they help you change it.
Two things to know before you rely on it. First, Apple says that by default, Screen Time limits can be ignored once you reach them. With a passcode set, you can turn on Block at Downtime (Settings > Screen Time > Downtime) so restricted apps can't be opened during downtime. With it off, you see a reminder and can keep going. Second, Apple's iOS 26 page on blocking websites doesn't say which browsers or apps the web limits apply to, so test your block in every browser you use. How to block websites on iPhone walks through that check.
A partner-held passcode has a cost too. Your partner becomes a gatekeeper. Every legitimate change, like a work site that got caught in the filter, means a message and a wait. Some partnerships handle that fine. Others start to feel like asking permission. Should a partner hold your Screen Time passcode covers how to talk that through.
What does an alert add that a password can't?
A password tries to stop you. An alert lets you make the choice and makes sure someone hears about it.
That sounds weaker, but in practice it often holds better. With a password, the pull is to find a way around it. With an alert, getting around it doesn't help, because someone you care about will know either way. The question in your head shifts from "can I get past this" to "do I want to explain this," and for many people that second question is enough.
An alert also takes the gatekeeper job off your partner. You keep control of your own settings. They don't approve every change. They only find out when protection drops, and they can reply with a calm question.
What the partner sees matters here. With Blockd, your partner sees your protection status, your blocklist, and every change to it. They don't see your full browsing history. Blockd doesn't read messages or track location. If protection turns off, your partner gets an alert within seconds. If the app is deleted, they're alerted within minutes, once the device goes quiet.
What can't any password or blocker do?
Any blocker can be turned off by the person who installed it. Blockd doesn't try to make that impossible. It makes turning it off visible to a partner, and that visibility is what holds you back. If you're looking for something you truly can't remove, is there a website blocker that cannot be deleted explains why that's harder than it sounds.
DNS blocking has its own limits:
- It decides by address. It can't see what's on a page, and it doesn't take screenshots. A site that isn't on your list will load.
- One VPN at a time on iPhone. A VPN (an app that routes your traffic through another server) from another app can replace Blockd's connection on iPhone. A work VPN can set off the same alert as a slip, so an alert is a reason to ask, not a verdict.
- Hard-coded DNS. Apps that use their own hard-coded DNS can get around DNS filtering.
These gaps are the reason the partner matters. A password on its own can't cover them. A person who notices changes covers a lot of them.
Which setup fits you?
Start with an honest look at how your last block ended. If you turned it off within a day, a stronger password probably won't change much. Someone else knowing about it often will.
| Setup | What it does well | Where it falls short |
|---|---|---|
| A password you know | Free, quick, and gives you a pause | You can type it in any time you want |
| A passcode your partner holds | Hard to change without asking them | Every change needs your partner's help, even reasonable ones |
| An alert to your partner | You keep control, and turning it off isn't private | Your partner has to agree to the role and reply calmly |
Three ways to hold a website block in place, and the trade-offs of each.
You can also combine them. Some people let a partner hold the Screen Time passcode and use an alert-based blocker on top. Pick what you'll actually keep using for months.
If the habit you're blocking feels out of your control, or it's hurting your sleep, work, or relationships, think about talking with a licensed therapist. They can help in ways no password can.