How I Actually Handle Online Safety Across Three Generations of My Family
How I Actually Handle Online Safety Across Three Generations of My Family
I used to treat "family cyber safety" as one conversation I'd eventually get around to having, a single sit-down where I'd cover passwords, scams, and app permissions in one go and consider the job done. It doesn't work like that. My kids, my teenager, and my parents are exposed to completely different risks, use completely different platforms, and need completely different explanations, and trying to give all three the same generic talk just meant nobody actually retained anything useful. What's worked better is treating it as three separate, ongoing relationships, each with its own approach, revisited regularly rather than delivered once and filed away.
Why I Stopped Treating "Family Cyber Safety" as One Conversation
The turning point was realising that a warning genuinely useful to my dad, about a caller pretending to be his bank, would have meant nothing to my ten-year-old, who has never had a bank call him in his life. Meanwhile the thing my teenager actually needed to hear, about what she shares with people she's only ever met through a game, wasn't remotely relevant to my parents. Once I stopped trying to write one script for the whole family, the conversations actually started landing, because each one addressed a risk the person in front of me could recognise from their own life rather than a hypothetical.
What I Actually Set Up on My Kids' Devices
For my younger kids, the safety work happens mostly in settings rather than conversation, because they're too young for a lot of the reasoning to stick yet. I set up parental controls at the device level rather than trusting an individual app's own settings, since those get changed or reset far more easily than I'd like. Screen time limits and app-approval requirements go on before a device is ever handed over, not added later once habits have already formed. I also keep their accounts logged in under a shared family password manager rather than letting them create their own logins with whatever they can remember, which usually means the same three passwords reused everywhere. It's less about them understanding the "why" at this age and more about the guardrails simply being in place before they need them.
The Conversation I Have With My Teenager That Actually Lands
My teenager is a different problem entirely, because at this age the controls I could still enforce on a younger child stop being appropriate, and honestly stop being effective too. What's worked is treating her as capable of understanding real reasoning rather than just being told what's off-limits. We've talked through a family code word, the same one I use to verify anyone claiming to be a relative on the phone, so she has something concrete to fall back on if she's ever contacted by someone pretending to be me or another family member asking for money or details urgently. We've also gone through what she actually shares with people she only knows through games or group chats, not as an accusation but as a genuine "here's what that information could be used for" conversation. She's more receptive to it framed that way than she ever was to a flat "don't talk to strangers online" rule, which she'd correctly point out doesn't match how she actually socialises.
Helping My Parents Without Making Them Feel Patronised
My parents are the group I've had to be most careful with, because the instinct to just take over and manage everything for them comes from a good place but lands as condescending fast. What's worked is setting things up alongside them rather than doing it to them, explaining each step as we go rather than just handing back a device that now works differently with no explanation. I've helped my dad set up the same account check-in I run on my own accounts every few months, checking for known data breaches, cleaning up recovery details, and reviewing what's still connected, but I frame it as something we're doing together rather than a fix for a problem he caused. I've also talked through specific scam patterns rather than vague warnings, since "be careful online" means very little but "if someone calls claiming to be your bank and asks you to move money, hang up and call the number on your card yourself" is something concrete he can actually act on when it happens.
The One Rule That Applies to Everyone in the House
Despite all the differences in approach, there's one rule I've made non-negotiable for every generation in the family: if something creates urgency, whether that's a call demanding immediate action, a message saying an account will be locked in the next hour, or a text claiming a family member needs money right now, the response is always to stop and verify through a separate channel before doing anything else. Urgency is the one tactic that shows up identically whether the target is a ten-year-old, a teenager, or a retired parent, and it's the one thing I can teach the same way to everyone in the house without needing three different scripts. The NCSC has useful guidance aimed specifically at families if you want a second source to build your own approach around, and my free Safety Toolkit covers the account-level basics I'd recommend having in place regardless of which generation you're setting up. None of this is about achieving some perfect, permanent state of protection. It's an ongoing set of conversations and check-ins I keep having, adjusted for whoever I'm actually talking to.