Security & Privacy
A balanced, reassuring guide to protecting your child's privacy online, with age-appropriate settings, gentle conversations, and practical everyday habits.
Protecting your child's privacy online comes down to three concrete layers stacked together: device- and account-level controls (Apple Screen Time, Google Family Link), per-app privacy settings on the handful of apps they actually use, and habits you teach so the protection travels with them. The single highest-impact thing most parents get wrong is faking a birth year at signup — the platform minimum age of 13 exists because of the US COPPA law, and entering an accurate age is what unlocks stricter default privacy, restricted messaging, and reduced ad targeting.
Start at the operating-system level, because these settings cover every app at once rather than one at a time.
Create a child Apple Account through Family Sharing (Settings > [your name] > Family > Add Member) instead of lying about a birthday on an adult account. Then open Settings > Screen Time and turn on Content & Privacy Restrictions to block explicit content, control app installs, and lock privacy settings so they can't be quietly reversed. Enable Ask to Buy so downloads need your approval, and switch on Communication Safety (Settings > Screen Time > Communication Safety), which uses on-device detection to blur suspected nude images in Messages and AirDrop without sending anything to Apple.
Install Google Family Link and create a supervised Google Account for your child. From the parent app you can approve or block every Play Store download, set daily limits and a bedtime, force SafeSearch on in Chrome and Google Search, and see the device's location. Treat that location feature as a safety tool you discuss openly, not covert surveillance — the difference matters for trust later.
Phones are only one screen. Use the Xbox Family Settings app, PlayStation Family Management, and the Nintendo Switch Parental Controls app to set age ratings and spending limits on consoles. For a whole-home filter that also covers a smart TV or a visitor's laptop, change your router's DNS to a family-safe resolver: Cloudflare's 1.1.1.3 blocks malware and adult content, and OpenDNS FamilyShield (208.67.222.123) does the same. It isn't foolproof, but it raises the floor across every device on the Wi-Fi at once.
Generic advice to "check the privacy settings" is useless without specifics. Here is exactly what to change on the services kids gravitate toward.
Across all of these the pattern is identical: set the account to private, disable messages from strangers, and turn off location sharing.
Location is where privacy quietly breaks. Every photo a phone takes can embed precise GPS coordinates in its EXIF metadata, so an innocent picture posted from the backyard can hand a home address to anyone who inspects the file.
Also audit "find my child" apps like Life360 or Apple's Find My. They are reasonable safety tools, but check who in the network can see the child's position, and remember that a shared family location history is itself sensitive data — protect the account guarding it with a strong, unique password.
Nearly every mainstream app sets 13 as its minimum age not because 13 is magically safe, but because the US Children's Online Privacy Protection Act (COPPA) forbids collecting personal data from under-13s without verifiable parental consent, so platforms simply bar them. In the EU and UK the equivalent "age of digital consent" ranges from 13 to 16 depending on the country.
Signing a younger child up with a fake older birth year to sneak them onto a platform strips away every child- and teen-specific protection in a single move: it opts them into adult default settings, public visibility, open messaging, and full behavioural ad targeting. If your child is genuinely too young for a service, the honest answer is usually to wait or use the child-specific version — not to lie the safeguards away.
Other common errors are worth naming. People trust a single Restricted Mode toggle as a complete filter (it isn't). They secure the phone while leaving the console, tablet, or smart TV wide open. And they reuse passwords. Give your child's email account — the master key that can reset every other login — a unique passphrase and two-factor authentication, ideally an authenticator app or a passkey rather than SMS codes.
Settings get outgrown; habits don't. Repeat a few simple rules until they become instinct:
Your own behaviour teaches louder than any rule. "Sharenting" — posting your child's photos, school, and daily routines — builds a public trail they never agreed to, and researchers who study it warn that a child can accumulate a large, searchable image history long before they are old enough to have a say. Ask permission before you post about them, and as they get older, genuinely ask them. When you slip up, say so; showing that privacy is a practice you adjust, not a wall you build once, is the most durable lesson of all.
There is no universal right age; it depends on maturity and need, and first-smartphone decisions commonly land somewhere between 10 and 13. Many families bridge the gap with a basic call-and-text phone or a kids' smartwatch limited to family contacts and location, then move to a full smartphone with Screen Time or Family Link switched on from day one.
No. Controls reduce exposure but can be bypassed — on a friend's device, a school laptop, or by a determined teenager — and they say nothing about how a child behaves when no filter is present. Treat them as one layer beneath ongoing conversation, never a replacement for it.
Covert monitoring tends to break trust and pushes kids onto apps you can't see. A healthier default is transparent oversight — tools like Snapchat's Family Center or Google Family Link that show who they talk to, agreed on openly — with visibility loosening as they demonstrate good judgement.
Ask the person directly first; most will take them down. If that fails, every major platform has a reporting route for images of minors, and Google offers a dedicated request to remove images of people under 18 from Search results. Going forward, ask relatives to check with you before they post.
Theo writes about online safety the way a good friend would — clearly, calmly, and without trying to scare you. He's interested in the simple habits that stop most problems, and he thinks staying private online is a skill anyone can learn.
Keep reading
A reassuring, jargon-free guide to spotting fake online stores, covering the warning signs in prices, contact details, payment options, and reviews.
Theo Vance
A calm, jargon-free guide to protecting your privacy on your phone, covering app permissions, location sharing, lock screens, and trimming back data tracking.
Theo Vance