How to Stop Students Hotspotting at School (When Your Web Filter Can't See It)
- Matthew Worrall
- Jul 5
- 5 min read
A teacher walks past a laptop showing content the school's web filter should have blocked. The filter logs show nothing. The laptop was never on the school network: it was riding a hotspot from a phone sitting switched off and away in a bag, exactly as the policy requires.
If you are the person who has to fix this, here is the straight version: why every network-level fix misses, and the one approach that reaches the phone itself.
How hotspotting works in a classroom
A personal hotspot turns a phone into a private wifi network. Turning one on takes about ten seconds, and once a laptop connects, everything that laptop does runs over the phone's mobile data instead of the school's internet connection. There is nothing to see: the phone stays in the bag, the laptop looks like every other laptop in the room, and the whole arrangement is silent.
The student is not just distracted. They are online with no filtering, no monitoring and no logging, in the middle of a classroom, on a device the school provided.
Why your web filter cannot see it
School web filtering, whether it runs on the firewall, a DNS service or a filtering appliance, has one thing in common: it protects traffic that passes through the school's network. A personal hotspot is a different network. Traffic over it never touches the school's infrastructure, so the filter has nothing to inspect and the logs have nothing to record.
The common technical responses each hit the same wall:
Network filtering and firewalls: only govern the school's own connection. Hotspot traffic bypasses them entirely, by definition.
Device management (MDM): can block school-owned laptops from joining unknown wifi networks, and if your fleet is fully managed this is worth configuring. It does nothing about personal laptops, a student's second device, or the phone itself, and determined students find the gaps in BYOD environments quickly.
Blocking the phone directly: the phone is a personal device on a commercial mobile network. The school has no technical control over it and never will.
The uncomfortable conclusion: the problem is not in your network, so it cannot be solved in your network.
How schools spot it happening
The signs staff notice are behavioural and after the fact: students reaching content the filter should block, laptops joined to wifi networks that are not the school's, mobile data allowances drained during school weeks, and devices going quiet in the filter logs during particular classes. Some network tools can also detect unknown wifi networks broadcasting on campus.
Detection tells you the scale of the problem. It stops nothing, and chasing individual detections consumes IT time indefinitely.
The three ways schools try to stop it
Policy: 'phones must be switched off.' Every Australian state ban already says this, and it is the right rule. But a rule about an invisible state of an unseen device is an honesty system. A phone on silent in a bag looks identical to a phone that is off.
Technical controls: filtering, MDM, hotspot detection. Worth having for the devices you own, and structurally unable to reach the device that matters, as above.
Physical signal blocking: put the phone somewhere it has no signal. No signal means no mobile data, which means no hotspot, no mirrored messages reaching a laptop, and nothing pushing to a smartwatch. This is the only approach that works at the source, because it is the only one that touches the phone.
Blocking the signal at the source
A signal-blocking pouch uses a Faraday lining designed to block cellular, wifi and Bluetooth while sealed. The student keeps their phone with them all day, so the school stores nothing, but the device inside is genuinely inert: no data connection to share, no notifications to relay, no Bluetooth to reach a wrist or an earbud. The 'switched off' rule stops depending on honesty and becomes a physical fact.
Worth stating plainly: this is a passive fabric barrier around a single device. It transmits nothing and affects no other phone in the room, which makes it entirely different from an active signal jammer, a category of device that is illegal in Australia. A pouch is legal everywhere for the same reason a metal lunchbox is.
Test it before you believe it
Whether you buy from us or anyone else, run this test with a staff phone before committing to anything: turn on the phone's hotspot, connect a laptop to it, seal the phone in the pouch, and watch whether the laptop stays online. Then message the phone and see whether a paired smartwatch receives it. Five minutes, and you will know exactly what the product does and does not stop. A pouch that only locks will fail this test. A genuine signal-blocking pouch will not.
Frequently asked questions
Can a school wifi filter block personal hotspots?
No. Filtering applies to traffic on the school's network. A personal hotspot is a separate cellular network, so its traffic never reaches the filter. This is a structural limit, not a configuration problem.
Can MDM stop students hotspotting?
Partially. MDM can prevent school-owned, managed laptops from joining unknown wifi networks, and schools with fully managed fleets should configure this. It cannot control personal devices or the phone providing the hotspot, so it narrows the problem rather than ending it.
Is it legal for schools to block phone signal?
Passive shielding is legal. A Faraday pouch is a fabric barrier around one device that transmits nothing. Active signal jammers, which broadcast interference across a whole area, are illegal in Australia. The two are often confused and are completely different things.
Do lockable pouches stop hotspotting?
No. A standard lockable pouch removes access to the phone, but the device stays connected and can keep sharing data the entire time it is sealed. Only a signal-blocking pouch stops the hotspot itself.
Does the phone need to be switched off inside a signal-blocking pouch?
The blocking works either way, but switching off first is better practice: a sealed phone left on will search for signal and use more battery across the day. Off and sealed uses effectively none.
See it before you commit to anything
A sample pack takes two minutes to request: one standard lockable pouch, one signal-blocking pouch and an unlocking magnet. Run the hotspot test with your own devices, then decide.
This post covers one loophole in depth. For the full picture, including screen mirroring and smartwatches, read our guide to the phone ban loopholes schools can't see. Weighing up suppliers? Our honest comparison of Yondr, Phone Locker and screenfree is here.
screenfree supplies lockable phone pouches, with an optional signal-blocking lining, to schools across Australia, New Zealand, Singapore, Malaysia and the UAE. One-time purchase, founder-direct service, no subscriptions.




Comments