September 10, 2025

How to Talk to Kids about Online Safety

As summer draws to an official close, kids are now back in school. Families shift focus from vacations to acclimating to new schedules and routines. For many students, this transition also brings increased time spent online, whether for learning, entertainment or socializing with friends.

This is a good time for parents, teachers, aunts, uncles, caretakers, etc. to have a broader conversation with kids about cybersecurity as a whole. Revisit the past two cybersecurity newsletters about this time of year (Back to School: Cybersecurity 101 and Get Schooled on Cybersecurity). Take a step back and talk to the kids in your life about internet safety and digital responsibility.

Online threats come in many forms; some are obvious, but many are subtle. Children are especially vulnerable given their curiosity, openness and limited understanding of the risks they could face. But they are also growing up as “digital natives,” capable of grasping complex online behaviors as long as they are provided with correct guidance. Now is the time to seize your opportunity to help develop strong cyber hygiene, not only to stay safe but also act with kindness and respect in online environments. Follow the tips below to start the conversation about cybersecurity.

  • Be honest about threats.
    • Discuss the reality of online dangers in age-appropriate language.
    • Explain that cybercriminals don’t always look scary as depicted on TV or in movies. They often disguise themselves as friendly people or even friends kids know in real life.
    • Emphasize that threats are not always external. Sometimes careless mistakes, like oversharing personal information or clicking unknown links, can cause harm.
  • Encourage ongoing learning and awareness.
    • Digital threats evolve constantly, so remind kids that the learning and talking about cybersecurity is something they need to continue to do.
    • Introduce simple concepts, like digital hygiene and cyber habits. Revisit them on regular basis.
    • Keep your own cybersecurity knowledge current, as well. Not only will you keep your data secure, but you will also be modeling safe online practices that children will notice.
  • Engage positively by creating a safe and supportive environment.
    • Make it clear that the kids in your life can come to you without judgment or fear of punishment about anything that makes them upset or if they make a mistake online.
    • Use mistakes or close calls as a teachable moment rather than opportunities for blame and punishment.
    • Avoid overly strict monitoring of children’s online habits. Instead, empower children by building mutual trust and accountability through clear, consistent communication.
  • Establish rules and boundaries.
    • Discuss and set expectations around screen time, approved websites and apps and device usage.
    • Collaborate to make a list of acceptable versus unacceptable online behavior.
    • Revisit and adjust rules regularly as your child matures and technology evolves.
  • Teach the value of personally identifiable information (PII).
    • Explain that PII – like names, addresses, school information and photos – has high value, just like money.
    • Show children how this information can be used to impersonate, exploit, or manipulate people online.
    • Walk through privacy settings together on apps, games and devices to show them they have control over what they share on the internet.
  • Practice empathy and respect online.
    • Reinforce the idea that online behavior should mirror our real-life values such as kindness, honesty and respect.
    • Discuss cyberbullying, hate speech and rumor spreading, including how children should respond if they witness or experience such behaviors.
    • Remind them to always ask themselves, “Would I say this in person?” and “What would my parents think?” before posting or commenting online.
    • Teach children that they are digital citizens just as they are citizens in real life.
  • ‘Gamify’ learning cybersecurity habits.
    • Explore age-appropriate games and activities that teach cybersecurity in a fun, engaging way (see resources below).
    • Make your own games at home, like who can make the strongest password or decode a secret message.
    • Use hands-on projects to illustrate abstract cybersecurity concepts, like how encryption works or how easy it can be to crack a password.
  • Address the dangers of oversharing.
    • Kids love to share with others, not knowing that what they perceive as innocent details can carry risk.
    • Help kids understand that these small bits of information, like their parents’ name or pet’s name, can be used to guess their passwords or answer security questions.
    • Use simple terms to explain how certain types of personal information should not be shared in an online setting.
    • Discuss posting photos; pictures of family and friends should only be posted with their permission.
    • Teach children that any pictures they send via text message or post on social media, even on platforms where they supposedly disappear, are never truly scrubbed from the internet. If it’s a photo they would not want their parent, future employer, or college admissions counselor to see, they should rethink sharing it anywhere.
  • Monitor children’s social media consumption.
    • Review privacy settings on any video or social media apps.
    • Set boundaries around video content such as what is appropriate, what to avoid and how to report inappropriate material.
    • Explain to children what algorithms are and how they are designed to keep them watching online content. Encourage balance and awareness around social media.
  • Learn the signs of a scam.
    • Explain how scams work and what red flags to watch for, such as messages asking for urgent action, suspicious links or offers that seem too good to be true.
    • Show examples of phishing messages, fake giveaways and pop-up advertisements.
    • Communicate the importance of slowing down, pausing and asking questions before clicking. Scammers prey on haste.

Cybersecurity conversations can feel overwhelming, especially with so much evolving information and ever-growing threats. Digital literacy is an essential life skill, and the sooner children start to develop it, the better prepared they will be to face the digital world with confidence.

Remember that this is not a one-time talk; it’s a continuous dialogue that grows and evolves. Check in with children regularly. Ask open-ended questions, listen carefully to their responses and become a trusted advisor in your child’s digital life. Cybersecurity is not only about preventing harm but also includes equipping young people with the tools they need to thrive in an increasingly digital society. As a parent, guardian or educator you are their first line of support and most important role model.

 

Cyber Habit of the Month

Email bombing is a tactic where a cybercriminal floods your inbox with thousands of emails in a short time, often to hide malicious activity like unauthorized purchases or password changes.

If your inbox suddenly becomes overwhelmed with random email forwards, subscriptions or spam do not ignore it. These messages could be a sign that your personal information is under attack. They can also be a precursor to a tech support scam, where a scammer will contact you pretending to fix your email. To fight this type of attack, start by checking your financial accounts and email security settings.

If anything looks suspicious, contact the financial organization immediately. Mark the emails as spam, but do not click on any ‘unsubscribe’ links, as they could be malicious. To protect yourself further, use different emails when signing up for new services and enable two-factor authentication on all important accounts.

 

Additional Resources