In today's digital age, children are more connected than ever. While the internet provides many ways to learn and socialise, it also exposes children to online threats, such as identity theft and online predators. As a parent or carer, it is crucial you understand the importance of cyber security.
The steps in this guide can help you ensure that your children stay safe and secure online.
Tips for securing accounts and devices
Cybercriminals use a range of tactics to carry out their attacks. Their aim is to steal personal information about you and your family for money and other motives. Let your children know about common online threats to:
- information – stealing passwords to accounts
- identity – stealing personal information to impersonate others
- finances – accessing bank accounts or demanding money.
Below are actions you can take to minimise these risks.
If you are still unsure or need immediate help, report it. If you suspect your child has had a negative experience online, share our advice with them on how to get help.
Passwords should be private and sharing them can put your data, identity and devices at risk. Children may find it tempting to share passwords with their friends, but this is not cyber secure.
Teach your children to:
- set secure passwords such as a passphrase
- not share or reuse passwords or passphrases.
A passphrase has at least 14 characters using four or more random words. For example, ‘purple duck potato boat’. Passphrases are harder for cybercriminals to guess and easy for children to remember.
Involve your children when securing their accounts to teach them good password habits.
Find out more about passphrases.
MFA is when you use two or more proofs of identity to log in. For example, using your login details as well as an authentication code.
MFA puts an extra shield around your account. It is one of the best ways to protect accounts from cybercriminals. If someone steals your password, they need another step to access your account.
Turn on MFA for your children’s accounts and explain to them why it is important.
Find out more about MFA.
The number of published vulnerabilities is on the rise. ASD has reported a 50 per cent increase in vulnerabilities since 2021.
Cybercriminals hack devices by using known weaknesses in systems or applications. Updates from app and software providers have security upgrades that fix these weaknesses.
Regular updates are crucial for keeping your devices secure.
Make sure your children’s devices and apps are up to date. Check automatic updates are on and install updates as soon as possible.
Find out more about updates.
A backup is a digital copy of your important data such as photos, videos and documents.
If you lose your data, you can use a backup to restore it. You can create backups using the cloud (a secure way to store data online), or physical media such as an external hard drive.
Backing up your data will put you more at ease knowing it’s protected. Think about the impact to your family if you lose your most valued information.
Find out more about backups.
Geolocation can help you keep track of your children. But, some applications may use or sell location data for commercial purposes.
To stay secure, you can disable geolocation for each app in your child’s device settings. Consider deleting apps where this is not possible.
It’s best to check apps that your children want to install. Find out what data they collect and turn on relevant security and privacy settings.
Sometimes you might let your children use your smartphone or tablet. Before you do, consider what type of data, apps and websites you have on it.
Letting a child use your device without security measures can put your family at risk.
Clear your browser history often to limit access to your accounts and private data. Don’t share your passwords and PINs with your children. This ensures they have to ask before they use your device or go online.
Bring Your Own Device (BYOD) is a common trend in schools. BYOD is where children bring their personal devices to class such as:
- laptops
- tablets
- smartphones.
BYOD can have many benefits. This includes providing more flexibility and access to technology for children at school. But, there are challenges like ensuring the security and privacy of your children.
Encourage your children to lock their device with a strong passphrase or PIN when not in use.
Ask your children to be careful with what cords or USB devices they use. These can be carriers of malware so it’s best to check they are trusted and it’s preferred to use their own.
You can also enable a feature to locate and lock the device if it becomes lost or stolen. For more information, search for ‘find my’ guidance on the device's platform website.
Social media and gaming
Social media and gaming can be an engaging way to connect with friends, share interests and explore new ideas. But not everyone using social media or gaming platforms are who they say they are.
Online gaming has gained popularity among children. It is important to be aware of the potential cyber security risks of gaming.
When playing online games, children may interact with strangers who have malicious intent. Remind your children not to share personal details with anyone they don’t know. Cybercriminals could even be impersonating their friend. It is important they are aware of the risks and know they can tell an adult if a stranger contacts them.
Be careful of phishing scams in games. This includes offers of free upgrades, in-game currencies, or rare character items. It’s best to check the source before downloading anything.
Be aware of your child's online activities. You can turn on parental controls on gaming devices and apps.
Find out more about security tips for online gaming.
If your children use social media, they might have ‘friends’ or ‘followers’ they haven’t met in real life. Your children might also follow their favourite celebrities or official fan sites.
Many official celebrity and entertainment news websites are safe to use. But it is very easy for people to pretend to be someone else on the internet.
It is important to help your children navigate the digital world to guarantee their online security. Learn additional tips in the next section.
Here are some extra security tips for your children when they are on social media and gaming.
- Follow our advice on securing accounts and devices.
- Use legitimate software: Always use apps and games from official and reputable companies. This includes through a trusted physical store, online retailer or app store.
- Avoid saving payment details: Where possible, don’t save payment details in your accounts. This includes your credit card or bank details. Some devices have a setting that asks for a password when downloading an app. You can also set the app to prompt for your password after a period of inactivity.
- Be wary of strangers: Teach your children to check if they know the person online is genuine. If they don’t, tell them to ask for help.
- Be suspicious of unsolicited messages: This can be a phone call, SMS, instant message, in-game chat or email. If someone your child does not know has contacted them, teach them to ignore this and to tell an adult.
- Monitor your children’s online presence: Tell your children not to share any personal or sensitive information on social media. For example, their home address or date of birth. Check your child’s account privacy settings to know who can see their details. Be aware of age restrictions on social media. Ensure your children understand social media guidelines.
CyberSprinters is an educational game for 7–11 year olds by the UK's National Cyber Security Centre. It also has interactive online security resources and activities. CyberSprinters gives children a head start on staying cyber secure by helping them to make smart decisions. You can play the game with your children and try the puzzles together at home. Find out more about CyberSprinters.
Teach your children to set boundaries for what they share online. You can encourage them to keep their profile private. For example, don’t share phone numbers, home or school address, or date of birth. This also includes anything that can reveal these details, such as a school uniform in a photo.
Scammers also often get you to provide financial information or open a file.
Ask your children to block any unusual or malicious profiles. They can do this by choosing the ‘block’ option on the user profile, which prevents any further communication.
When visiting a website, make sure the website address (URL) is the real one. Scammers can create fake websites that look like the real one. This can trick you and your family into giving out their personal information.
Check the domain name (first part of the URL) and spelling is correct. It can be hard to spot since there may only be one letter different.
When making online payments to a bank or store, the URL should:
- start with ‘https’ (the 's' stands for secure)
- have the company’s name in the domain name.
Important: Don’t open links or use contact details sent to you. If in doubt, contact the company using the details on their official website.
Scammers might offer something tempting such as a free vacation or money. Remember, if it seems too good to be true, it probably is.
Tell your children to check with a trusted adult before giving out personal details or money.
Not everyone online is who they say they are. Encourage your children to take a moment to check if they know the person.
Teach them not to visit links or download files from people they don’t know. In some cases, a message may appear to be from their friend whose account has been hacked. If in doubt, they should check with the friend offline.
Your children may not be sure if something is a scam, or someone is asking them for too many personal details. Explain to them to ask for help to figure out if the request is real or fake.
If you are still unsure, it is better to ignore the request than risk losing personal data or money.
For more information on scams in Australia, visit Scamwatch.
The eSafety Commissioner also has resources on:
Are your children old enough?
Children under the age of 5 are still developing an understanding of the world, including the internet.
It is crucial for you to supervise and restrict your child's online activity. For example:
- keep devices out of reach and sight
- set up parental controls
- choose age-appropriate content.
Young children don’t yet understand the risks of online behaviour. Always be vigilant and don’t leave them unattended with electronic devices.
Children aged 5 to 10 are at an age when they are starting to explore the internet on their own.
Introduce them to basic cyber security concepts such as:
- use strong passwords
- don’t share personal information
- think before visiting a link.
Guide your children to secure websites, games and applications appropriate for their age.
It is important for you to be aware of your children's online activity. If they find something uncomfortable online, encourage them to tell you about it.
Always be vigilant and don’t leave them unattended with electronic devices.
As children reach their teenage years, they may start to get into social media and online gaming.
This is a good time to introduce them to more advanced cyber security concepts. For example:
- MFA
- how to avoid online bullying.
Teach your children the importance of privacy settings. Make sure they are aware of the potential impacts of sharing personal details online.
Help your children to use technology in a secure way and monitor their online activity.
Teenagers have more freedom and independence online. This makes them more vulnerable to online threats such as:
- cyberbullying
- scams
- identity theft.
Show your teens how to be secure and to spot suspicious activity online.
It is important for you to have open and honest communication with your teens. Encourage them to talk about their online activity while respecting their privacy.
Try to support them in making responsible choices, especially when gaming and on social media.
Make sure teens are aware of the potential impacts of their online actions. Share our guide cyber security for young people.
Children who are neurodiverse may have specific needs. You should tailor guidance and resources to suit their learning style and pace. For example, use visual aids or interactive activities.