Every child using the internet today faces risks that didn’t exist a generation ago: contact from strangers with harmful intentions, exposure to age-inappropriate content, cyberbullying from peers, online scams targeting young people, and long-term privacy consequences of sharing personal information before understanding what that means. Child online safety is the set of practical measures that parents and guardians implement to reduce these risks without disconnecting children from the genuine educational and social value the internet provides. You’ll find the complete rundown in our Complete Guide to Online Security and Privacy.
The goal is not to eliminate internet use but to establish informed, age-appropriate guardrails that evolve as children grow. Child online safety looks fundamentally different at 7, 13, and 16 — technical controls for younger children give way to a communication-led approach as teenagers develop the judgment to navigate the internet more independently.
Technical controls for younger children (under 12)
For children under 12, technical controls are the foundation — not as a replacement for conversations, but as the guardrails within which those conversations develop meaning. Three main control categories:
Content filtering:
- iOS/iPhone: Settings → Screen Time → Content & Privacy Restrictions → Content Restrictions → set age-appropriate ratings for apps, web content, movies, TV, and music. Enable “Limit Adult Websites” under Web Content for Safari filtering.
- Android: Google Family Link (separate app installed on both parent and child devices) provides centralised controls for app installation, content filtering, location, and screen time from the parent’s phone.
- Windows PC: Microsoft Family Safety (family.microsoft.com) controls access on Windows PCs and Xbox, including website filtering and app time limits.
- Router-level filtering (covers all devices): services like Circle, Bark Home, or Eero’s parental controls apply filtering to every device on the home network including smart TVs, game consoles, and tablets that have their own built-in browsers. This is more comprehensive than device-level filtering because it can’t be bypassed by switching to a different app or browser on the same device.
Screen time management: iOS Screen Time allows per-app time limits and scheduled downtime windows. Google Family Link provides the same for Android. These controls establish healthy usage patterns and natural breaks supporting sleep and attention — as much about wellbeing as about safety from external threats.
Location awareness: Apple’s Find My (Family Sharing), Google Family Link, and Life360 provide location visibility for parents. These are most appropriate for younger children and work best when explained to the child as a safety measure rather than surveillance — “so I know you got to school safely” rather than “so I can monitor everything you do.”
The conversation framework — more important than the controls
Technical controls have gaps, children find workarounds, and eventually all children navigate the internet without parental controls. The conversations that build judgment and communication habits are the most durable child online safety measure available.
Establish the “tell me anything” rule first. Child online safety begins with the child knowing they can tell a parent about anything they encounter online — something uncomfortable, confusing, or frightening — without fear of having their device taken away. This is the foundation. If children fear the consequence of disclosure, they don’t disclose, and parents cannot respond to problems they never learn about. The rule must be established before it’s needed, and demonstrated when it is.
Teach “online strangers” age-appropriately:
- Young children: the same rules as real-world strangers apply online — don’t share personal information (name, school, address, photo), don’t agree to meet, and tell an adult if an online stranger makes you uncomfortable
- Older children: explain that online people may not be who they claim to be, that grooming is a real pattern (with age-appropriate language), and that adults who ask children to keep secrets from parents have bad intentions
Explain what personal information is — full name, school name, home address, phone number, photos that reveal location, and daily routine — and why it should not be shared with people who have no reason to know it. Make this concrete: “if someone you’ve never met asks where your school is, that’s the same as a stranger on the street asking. What would you do?”
Cyberbullying response: children should know that cyberbullying is not their fault, that they should save evidence (screenshots) rather than delete messages, and that telling a trusted adult is the right response. The instinct to hide cyberbullying — from embarrassment or fear that the phone will be taken away — is the primary reason it persists without adult intervention.
Platform and age restriction management
Most social media platforms require users to be 13+ to create accounts, but age verification is typically a checkbox rather than any real confirmation. Many children create accounts by entering a false date of birth. Child online safety for platforms involves:
- Know which platforms your child uses — not just the ones you’ve approved, but the ones their peer group is on. Peer adoption is the primary driver of children joining new platforms.
- Review platform-specific settings:
- Instagram Supervision: allows parents to set time limits, see accounts the child follows, and receive weekly reports through a linked parent account
- TikTok Family Pairing: links parent and child TikTok accounts, allowing control of screen time, filtered feed, and direct message restrictions
- YouTube Supervised Experience: restricts content to age-appropriate material, disables comments, and limits search
- Roblox: privacy settings control who can chat, who can follow, and what chat content is allowed (younger children can be restricted to pre-set phrases)
- Public profiles for children should be private accounts. The default on many platforms is public. Check and change this for each platform your child uses.
Gaming platforms — an often-overlooked entry point
Online games — Roblox, Fortnite, Minecraft servers, Discord gaming communities — include in-game chat, direct messaging, and voice communication that often bypass content filters applied to browsers and social media. Adults targeting children frequently initiate contact through game chat before moving to less-monitored channels. Game voice chat is particularly hard to monitor in real time.
Child online safety for gaming:
- Discuss who they’re playing with (known friends vs strangers) and whether anyone in the game makes them feel uncomfortable
- Disable direct messages from non-friends in gaming platforms
- Restrict voice chat to known friends
- Configure in-game chat settings appropriately — Roblox chat can be restricted to pre-approved phrases for young children
- Normalise leaving a game or server that feels wrong — no game is worth staying in if something feels uncomfortable
One of the most effective single measures: where devices charge overnight
Devices that charge in children’s bedrooms overnight allow unsupervised internet access during the hours when most concerning online interactions occur. A household rule that all devices charge outside of bedrooms overnight addresses child online safety at the access layer without requiring content filtering on every platform.
Most child safety experts identify this as one of the most effective single measures available, because it eliminates the time period of unsupervised access while naturally improving sleep quality through reduced screen exposure before bed. Establish this habit before a smartphone is introduced rather than trying to implement it after a device has been in the bedroom for years — the earlier the rule is set, the easier it is to maintain.
Child online safety for teenagers — shifting to a communication-led approach
Blanket technical restrictions become counterproductive for teenagers who have the technical ability to bypass them and will seek independence online regardless. The child online safety goal for 13–17 year olds shifts from control to communication and capability:
- Teach privacy as a practical skill, not an abstract rule — what to share online, what not to, and the long-term consequences of content once posted (screenshots, archives, future employers seeing old posts)
- Online relationship discernment: what signs suggest someone online may be misrepresenting themselves; healthy vs unhealthy online relationships; the pattern of escalating contact and secrecy that characterises grooming
- Public profiles vs private information: teenagers who want public social media presences — YouTube channels, TikTok accounts, public Instagram — need guidance on separating online identity from real-world identity (using a pseudonym, not showing a bedroom revealing home layout, not mentioning school or location)
- Scam recognition: “too good to be true” offers, prize claims, fake job offers targeting teenagers, and romance scams that increasingly target young people
Our guide on protecting your online identity covers the identity protection practices that older teenagers can apply directly, and our guide on avoiding phishing scams covers the scam recognition skills relevant for teenagers encountering online fraud. For evidence-based guidance on child online safety practices, Internet Matters provides age-specific advice and resources for parents across every topic in this guide.
The one conversation that matters most — regardless of age
Across all ages and all technical configurations, the most durable child online safety measure is a child who feels they can come to a parent with anything that happens online without fear of punishment or judgment. Every other control — content filtering, screen time limits, platform settings — has gaps. The “tell me anything” rule, consistently demonstrated by not taking devices away when children disclose problems, is what fills those gaps.
This means that when a child does disclose something uncomfortable — a stranger messaging them, content that scared them, a peer being unkind online — the first response must be gratitude for the disclosure, not focus on the phone. “I’m really glad you told me. Let’s figure this out together.” That response, experienced once, makes the next disclosure more likely. The cumulative effect of that pattern, over years, is a teenager who has developed the judgment to navigate the internet safely and the habit of seeking adult guidance when something feels wrong.
Age-appropriate controls and conversations — quick reference
| Age range | Primary controls | Key conversations | What to watch for |
| 5–8 | Device-level content filtering; supervised use only; no personal accounts | Online strangers = real-world strangers; always tell an adult; what is personal information | Upset after online activity; unfamiliar apps or websites |
| 9–12 | Screen time limits; content filtering; location visibility; age-verified platform accounts | Not everyone online is who they say they are; grooming patterns (age-appropriate); cyberbullying response | Secretive behaviour about online activity; new “friends” from games |
| 13–15 | Shifting toward monitoring with explanation; router filtering may still be active; social platform supervision features | Privacy as a practical skill; public vs private information; scam recognition; healthy online relationships | Sudden change in online behaviour; withdrawal from family; unexplained gifts |
| 16–17 | Communication-led; technical controls mostly advisory; explicit discussions about autonomy and responsibility | Long-term consequences of online content; identity management; relationships online and offline; digital footprint | Signs of online exploitation; extreme secrecy; distress related to online interactions |
When to involve authorities or professional support
Some child online safety situations require professional involvement beyond what parents can or should handle alone:
- Online grooming or solicitation: if a child has been approached by an adult seeking to develop a relationship or requesting images, contact the National Center for Missing & Exploited Children (NCMEC) in the US, the Internet Watch Foundation in the UK, or your country’s national reporting body. Preserve the evidence (screenshots of messages) before reporting.
- Child sexual abuse material (CSAM): if a child has been asked to produce or has received this material, report immediately to NCMEC’s CyberTipline in the US or IWF in the UK. Do not delete the evidence but also do not forward or share it — preserve and report.
- Severe cyberbullying or threats: contact the school if the bully is a known peer; contact police if threats are credible or the behaviour constitutes harassment; contact the platform for content removal.
- Mental health impact: if online experiences (cyberbullying, comparison, exposure to harmful content) are visibly affecting a child’s mental health, involve the child’s GP or a mental health professional alongside addressing the online behaviour.
Child online safety is not a problem with a single solution — it’s an ongoing practice of age-appropriate controls, regular conversations, and responsive adaptation as children grow. The technical controls reduce risk. The conversations build judgment. The relationships — where children feel safe disclosing what happens online — create the resilience that makes both controls and conversations effective over time. Related: Online Privacy Tools.
