There are plenty of situations where you may want to stop a specific app from accessing the internet on your Windows 11 PC. Maybe an application keeps displaying ads, syncing data in the background, consuming bandwidth, or sending information online when you do not want it to. In some cases, you may simply want to use a program offline without uninstalling it.
In this guide, you will learn exactly how to turn off internet access for an app in Windows 11.
Block an App from Accessing the Internet on Windows 11
To turn off internet access for an app in Windows 11:
- Open Windows Defender Firewall with Advanced Security.
- Select Outbound Rules from the left pane.
- Create a New Rule.
- Choose Program as the rule type.
- Browse and select the app’s executable file (.exe).
- Select Block the Connection.
- Apply the rule to all network profiles.
- Give the rule a name and save it.
Once the rule is enabled, the selected application will no longer be able to access the internet while the rest of your system remains connected.
Step 1: Open Windows Defender Firewall With Advanced Security
The first thing you need to do is open the advanced firewall management console.
Click the Start Menu and type Windows Defender Firewall with Advanced Security into the search box. When the result appears, click it to open the firewall management window.
You can also press Windows + R, type wf.msc, and press Enter. This shortcut opens the same utility instantly.
Once the window opens, you will see several sections on the left side, including Inbound Rules, Outbound Rules, and Connection Security Rules. For this guide, you will primarily work with Outbound Rules because internet access, leaving your computer, is what you want to block.
Take a moment to familiarize yourself with the interface. While it may seem advanced, you only need a few options to complete the task successfully.
Step 2: Create a New Outbound Rule
Now that the firewall console is open, click Outbound Rules in the left pane.
The center section will display a list of existing outbound rules already configured on your system. Do not worry about these entries. You only need to create a new one.
In the right pane, click New Rule. This launches the New Outbound Rule Wizard.
The wizard will ask what type of rule you want to create. Select Program and then click Next.
Choosing a program allows the firewall to apply the restriction to a specific application instead of affecting all network traffic on your computer. This gives you precise control over which app loses internet access.
Step 3: Select the Application You Want to Block
The wizard will now ask you to specify the program.
Choose This Program Path and click Browse. Navigate to the installation folder of the application you want to block.
Most desktop applications are located in either:
C:\Program Files
or
C:\Program Files (x86)
Find the application’s executable file, which typically ends with the .exe extension. Select the file and click Open.
The full path to the executable will now appear in the wizard. Double-check that you selected the correct file because the firewall rule will apply specifically to that executable.
Click Next to continue.
If you are unsure where the executable file is located, right-click the application’s desktop shortcut, select Properties, and look at the Target field. That location points to the correct executable.
Step 4: Block the Connection
The next screen asks what action should be taken when the application attempts to connect to the network.
Select Block the Connection and click Next.
This setting tells Windows Firewall to deny all outbound network requests from the selected application. As a result, the app will not be able to access websites, online services, cloud synchronization features, updates, or other internet-based functions.
This is the key step that actually disables internet access for the program.
Make sure Block the Connection is selected before moving forward.
Step 5: Apply the Rule to All Network Profiles
Windows uses different network profiles depending on your environment.
These profiles include Domain, Private, and Public.
The wizard will ask which profiles should use the new rule. To ensure the application remains blocked regardless of the network you connect to, leave all profile options checked.
This ensures the restriction works whether you are using your home WiFi, office network, mobile hotspot, or public internet connection.
After confirming all profiles are selected, click Next.
For most users, applying the rule to every profile is the simplest and most effective approach.
Step 6: Name and Save the Rule
The final screen allows you to name the firewall rule.
Choose a clear and descriptive name such as:
- Block Chrome Internet Access
- Block Spotify Network Access
- Block Game Internet Connection
You can also add an optional description if you want to remember why the rule was created.
Click Finish to save the rule.
The new rule immediately becomes active. There is no need to restart your computer in most cases.
Open the application and test its online functionality. You should notice that internet-based features no longer work while the rest of your system remains connected.
Step 7: Verify That the Block Is Working
After creating the rule, it is a good idea to verify that it works correctly.
Launch the application and attempt to perform an action that normally requires internet access. For example, try loading online content, checking for updates, signing in, or syncing data.
If the firewall rule is configured correctly, the app should fail to connect.
Meanwhile, your web browser and other internet-connected programs should continue working normally. This confirms that only the selected application is being blocked.
If the application still connects online, verify that you selected the correct executable file and that the rule is enabled under Outbound Rules.
How to Reverse the Process?
If you decide later that the application should be allowed to access the internet again, Windows 11 makes it easy to reverse the firewall rule you created. You do not need to reinstall the application or reset your network settings. Simply remove or disable the outbound rule.
Step 1: Open Windows Defender Firewall With Advanced Security
Click the Start Menu, type Windows Defender Firewall with Advanced Security, and open the result. You can also press Windows + R, type wf.msc, and press Enter.
Once the firewall management console opens, select Outbound Rules from the left pane. This section contains all outbound network rules currently configured on your computer.
Step 2: Find the Rule You Created
Scroll through the list of outbound rules and locate the rule you created earlier. If you gave it a descriptive name, such as Block Chrome Internet Access or Block Spotify Network Access, it should be easy to find.
Click the rule once to highlight it. You can review the details in the lower pane to confirm it is associated with the correct application.
Step 3: Disable or Delete the Rule
You have two options for restoring internet access.
The first option is to select Disable Rule from the right pane. This temporarily turns off the restriction while keeping the rule available for future use. If you think you may want to block the app again later, this is usually the better choice.
The second option is to select Delete. This permanently removes the firewall rule from Windows Firewall. Choose this option if you no longer need the restriction.
As soon as the rule is disabled or deleted, the application can access the internet again. In most cases, the change takes effect immediately. If the application was already open, close and reopen it to ensure it reconnects properly.
What Happens After You Remove the Rule?
Once the outbound rule is removed or disabled, the application returns to its normal behavior. Features such as online updates, cloud syncing, account sign-ins, multiplayer connectivity, and other internet-dependent functions will start working again.
Additional Tips
If you ever want to restore internet access, simply open Windows Defender Firewall with Advanced Security, locate the rule you created, right-click it, and choose Disable Rule or Delete.
Some modern applications use multiple executable files. If an app continues connecting after you create a rule, you may need to block additional executables associated with that program.
Using Windows Firewall is generally safer than uninstalling an application because it allows you to keep the software installed while controlling its network activity.
You can create separate rules for multiple applications if you want to manage internet access on a program-by-program basis.
FAQs
Can I block internet access for only one app in Windows 11?
Yes. Windows Defender Firewall allows you to create rules that target a specific application without affecting other programs.
Will blocking an app disconnect my computer from the internet?
No. The firewall rule only affects the selected application. Your computer and other apps will continue using the internet normally.
Can I unblock the app later?
Yes. You can disable or delete the firewall rule at any time to restore internet access.
Does this method work for games?
Yes. Many users block internet access for games to prevent updates, online connections, telemetry, or background network activity.
Do I need third-party software?
No. Windows 11 includes everything needed through Windows Defender Firewall with Advanced Security.
Summary
Learning how to block an App from accessing the Internet on Windows 11 is a useful skill that gives you more control over your computer. Whether you want to reduce bandwidth usage, improve privacy, stop background syncing, or force an application to operate offline, Windows Defender Firewall provides a reliable solution.
By opening Windows Defender Firewall with Advanced Security, creating a new Outbound Rule, selecting the application’s executable file, choosing Block the Connection, and applying the rule to all profiles, you can quickly prevent a specific program from accessing the internet.
The best part is that the change is completely reversible. If you ever need the application online again, you can simply disable or remove the firewall rule and restore connectivity in seconds.