Most children are online long before they can read. Ofcom’s Children and Parents report, published in May 2026, makes the point clearly. Among parents of children aged six months to two years, 65% say their child goes online. By secondary school, nearly every child has a smartphone. Teaching internet safety can’t wait for the first phone, and it can’t be a single talk either.
What works is a steady shift from control to trust. Toddlers need locked-down devices and an adult beside them. Teenagers need privacy skills, honest talk about serious harms, and the confidence to tell you when something goes wrong. The rules also changed in 2025 and 2026, with new duties on platforms and a planned ban on social media for under-16s.
This guide covers teaching internet safety at four stages: under 5s, ages 6 to 10, ages 11 to 13, and ages 14 to 18. Each stage pairs technical safeguards with the conversations that matter at that age. You’ll also find the 4 Cs risk framework used in schools and a quick-reference table. Finally, we cover the latest UK and Irish rules and a zero-blame plan for when things go wrong.
Table of Contents
Online Safety at a Glance: Risks and Tools by Age
The table below summarises the whole guide. Use it to find your child’s stage, then read the matching section for the detail behind each row.
| Age | Main online activity | Biggest risks (4 Cs) | Key safeguard | Core conversation |
|---|---|---|---|---|
| Under 5 | Watching videos, simple games | Content | Child profiles, locked app store | “Ask me before you tap” |
| 6 to 10 | Games, searching, first chats | Contact, Commerce | Chat off, spending locked | The Billboard Test |
| 11 to 13 | First phone, group chats, feeds | Conduct, Contact | Screen Time or Family Link | Banter versus bullying |
| 14 to 18 | Social media, AI tools | All four | Privacy audit, two-factor login | Sextortion and deepfakes |
The 4 Cs: A Simple Way to Think About Online Risk
Schools in England use the 4 Cs from Keeping Children Safe in Education, the Department for Education’s statutory safeguarding guidance. They give parents a simple checklist for any app or game.
- Content is what your child sees. That includes violent or sexual material and content promoting self-harm. The 2025 update to the guidance added misinformation, disinformation and conspiracy theories to this category.
- Contact is who reaches your child. This covers strangers in game chats, adults posing as children, and peer pressure from people they know.
- Conduct is how your child behaves. Sharing nude images, joining in with online bullying, and posting personal details all fall here.
- Commerce is what your child is sold. Think in-game purchases, scams, gambling-style features and targeted advertising. Ofcom found that only 42% of 8 to 17-year-olds knew the top search results in a test were there purely because they were paid adverts.
Teaching internet safety through the 4 Cs stops the topic from shrinking to “stranger danger”. A child can be perfectly safe from strangers and still be overspending, sharing too much, or seeing harmful videos.
Under 5s: Co-Viewing and Locked-Down Devices
At this age, safety comes almost entirely from you. Young children can’t judge what they see, so the aim is a small, safe space online and a habit of sharing screens with an adult.
Technical Safeguards for Under 5s
Start with the device, not the child. A few settings cover most of the risk before your child ever taps a screen.
Set up a child profile on every tablet and smart TV your toddler uses. Use YouTube Kids with a profile set to the youngest age band, or approve individual videos yourself. PIN-protect the app store so nothing new can be installed without you. Turn on your broadband provider’s family filter too, which covers every device on your home Wi-Fi. Our guide to setting up parental controls walks through the main devices step by step.
The Conversation: Asking Before Tapping
Teaching internet safety to a three-year-old sounds odd, but the habits start here. Keep the talk short and repeat it often.
Sit with your child while they watch and chat about what’s on screen. Teach one rule: ask a grown-up before tapping anything new. Praise them when they come to you about a pop-up or an advert. Keep devices in shared rooms and out of bedrooms. Build calm routines for switching off, such as a two-minute warning before screen time ends.
Ages 6 to 10: First Searches, First Games
Primary school is when children start searching, gaming and chatting on their own. Ofcom’s 2026 data shows that 51% of 8 to 14-year-olds used Roblox in the previous four weeks. This is the age for teaching internet safety through games your child already loves.
Technical Safeguards: Safe Search, Chat and Spending Locks
Three settings do most of the work for this age group. Check each one on every console, tablet, and account your child uses.
Turn on SafeSearch in Google and any other search engine your child uses, and lock it through Family Link or your router. Switch off voice and text chat for strangers on consoles and in games. Since January 2026, Roblox has required a facial age check before anyone can use chat. Users are grouped by age, and chat stays off for under-9s unless a parent consents. Remove saved payment cards from every account and require a password for each purchase. Our guide to safe online games for children covers settings for the most popular titles.
The Conversation: The Billboard Test
Children at this age understand rules better when they have a simple test. The Billboard Test gives them one.
Ask your child: “Would you be happy for this to be on a giant billboard outside school?” If the answer is no, it stays private. That covers real names, school uniforms, home street, birthdays, and photos showing local landmarks. Gamer tags should never include a real name or age. Explain that people online aren’t always who they say they are, even if they seem friendly. Ofcom found that 55% of children who game online play with people they’ve never met, at least sometimes. Our guide to netiquette for kids has more ready-made rules.
Virtual Currencies and Commerce Traps
Robux and V-Bucks hide the real price of what children buy. A pack of coins feels like play money, not pocket money.
Show your child the pound value of their currency before they spend it. Explain that loot boxes and mystery rewards work like a lucky dip, and you can’t choose what you get. Warn them about “free skin” or “free Robux” websites, which are almost always scams designed to steal logins. Ofcom found that 51% of parents whose children game worry about pressure to make in-game purchases. A fixed monthly allowance on a prepaid gift card keeps spending visible and capped.
Ages 11 to 13: First Phones and Social Feeds
The move to secondary school changes everything. Ofcom found that phone ownership jumps from 56% of 10-year-olds to 83% of 11-year-olds. Teaching internet safety at this stage means preparing for independence rather than preventing it.
Is Your Child Ready for a Smartphone?
Age alone doesn’t answer this. Before handing over a phone, work through these seven questions with your child’s other carer.
- Do they follow screen time rules without constant reminders?
- Can they put a device down when asked, without a meltdown?
- Do they tell you about problems, including ones that make them look bad?
- Will they agree to keep the phone out of the bedroom overnight?
- Do they understand what not to share, using the Billboard Test?
- Can they explain what to do if a stranger messages them?
- Do they know who to tell if a friend is being bullied?
Five or more confident “yes” answers suggest readiness. Fewer than five points to a basic phone or a delay of a few months.
Transparent Controls, Not Secret Spyware
Teaching internet safety to pre-teens depends on trust, and covert monitoring apps destroy it. Apps that log keystrokes or record screens in secret damage that trust quickly. When children find them, and they usually do, they tend to move risky behaviour to places you can’t see.
Use Apple Screen Time or Google Family Link openly instead. Set downtime overnight, approve new apps, and review weekly reports together. Tell your child exactly what you can and can’t see. Our mobile parental filter guide explains network and device options side by side.
Group Chats, Banter and Algorithmic Feeds
Most pre-teen problems start in group chats with classmates, not with strangers. Short-video feeds then add a second risk: content your child never searched for.
Talk about the line between banter and bullying. A useful test is whether everyone in the chat is laughing, or just most people. Agree that your child can leave any group chat without being in trouble. Our guide to cyberbullying solutions covers how to respond if they’re targeted. Explain that feeds learn from what they watch, so pausing on one upsetting video brings more like it. Show them how to mark videos as “not interested” and reset their feed.
Most social apps set 13 as their minimum age, although the table below shows the gap between the rules and real readiness.
| App | Official minimum age (UK) | Hidden risk | Suggested readiness |
|---|---|---|---|
| 13 | Large group chats, forwarded content | 13, with agreed group rules | |
| TikTok | 13 | Fast-learning video feed | 14 or later |
| Snapchat | 13 | Disappearing messages, Snap Map | 14 or later |
| 13 | Appearance pressure, direct messages | 14 or later | |
| Discord | 13 | Unmoderated voice servers | 15 or later |
| Roblox | No minimum; chat needs age check | In-game spending, off-platform contact | Supervised from 7 or 8 |
Suggested readiness ages are ISS editorial guidance, not legal limits.
Ages 14 to 18: Independence, AI and Serious Harms
Teenagers need you less for settings and more for judgement. Teaching internet safety now is about the harms that grow in their teens: sextortion, deepfakes and AI companions.
Privacy Audits, Location and Two-Factor Authentication
A short privacy audit every few months keeps your teenager in charge of their own accounts. Do it with them, not for them.
Check that Snap Map is set to Ghost Mode and that location sharing is limited to family. Set accounts to private and review who follows them. Turn on two-factor authentication for email, social media, and gaming accounts. Encourage them to use an authenticator app rather than text codes.
Deepfakes, Nudification Apps and AI Companions
AI tools are now part of daily life for most teenagers. Ofcom found that 56% of 8 to 17-year-olds have used AI, and 11% of those users have treated it as a friend.
Explain that creating or sharing a sexual image of anyone under 18 is illegal, even if AI made it. For adults, creating a sexual deepfake without consent became a criminal offence in England and Wales in February 2026. In December 2025, the government announced plans to ban nudification apps outright. Make sure your teen knows that “just a joke” edits of classmates can lead to police involvement. Talk too about AI companions. They’re built to keep users chatting, and they aren’t a replacement for real friends or trusted adults. Our guide to child internet safety covers AI risks in more depth.
Sextortion: What Every Teenager Should Hear
Sextortion is blackmail using intimate images, often run by organised gangs abroad. The Internet Watch Foundation confirmed 397 sextortion reports in 2025, a 127% rise on 2024. Boys were the victims in 98% of them.
This is the hardest part of teaching internet safety, and the most important. Tell your teenager plainly: if it happens, they won’t be in trouble with you. They should stop replying, never pay, keep the evidence, and tell you straight away. Paying rarely ends the threats. The IWF also found that 21% of reports to its Report Remove service in 2025 involved faked imagery. Our guide on protecting teens in online chat explains how these approaches usually begin.
UK and Irish Rules Every Parent Should Know
The law now puts more duties on platforms, but no law does the work of teaching internet safety at home. Here’s where things stand in September 2026.
In the UK, Ofcom’s Protection of Children Codes came into force on 25 July 2025 under the Online Safety Act. Sites allowing pornography or other harmful content must now use strong age checks. Feeds must also filter harmful content out for children. On 15 June 2026, the government announced it will ban social media platforms from offering services to under-16s. The ban is expected in spring 2027, subject to Parliament. It covers apps such as Snapchat, TikTok, YouTube, Instagram, Facebook and X, but not messaging services like WhatsApp. The July 2026 government response added proposed defaults for 16- and 17-year-olds, including overnight restrictions between midnight and 6 am. You can read the latest evidence in Ofcom’s children’s media use research.
Ofcom also found that only 32% of parents correctly named 13 as the minimum age for most social media. The Online Safety Act doesn’t set that age itself. Platforms choose it, in line with UK GDPR, which lets children consent to their own data use from 13.
In Ireland, the digital age of consent is 16 under the Data Protection Act 2018. Since 21 July 2025, Coimisiún na Meán’s Online Safety Code has required designated video-sharing platforms to use age assurance for adult content. Yet CyberSafeKids’ September 2026 report found that 70% of Irish 8- to 12-year-olds still have accounts on apps meant for over-13s. Its chief executive, Alex Cooney, said the report shows “those expectations haven’t been met.”
What to Do When Something Goes Wrong
Teaching internet safety includes planning for the day something goes wrong. Your reaction in the first hour matters more than any setting. Children who expect punishment hide problems, and hidden problems grow. The good news is that Ofcom found 83% of children say they would tell a family member about worrying content.
The Four-Step Response: Calm, Capture, Report, Support
These four steps work for bullying, grooming, image sharing, and scams. Keep them somewhere you can find them quickly.
- Calm: thank your child for telling you and promise the device won’t be taken away as a punishment.
- Capture: screenshot messages, usernames, and links before anything is deleted. Never screenshot or forward a nude image of a child.
- Report: block the account and report it on the platform, then escalate if needed.
- Support: check in over the following days and involve the school if classmates are involved.
Where to Report in the UK and Ireland
Knowing the right service saves time when your child is upset. These are the main routes for families.
In the UK, report grooming or sexual contact from an adult to CEOP, part of the National Crime Agency. Under-18s can use Report Remove, run by the IWF and Childline, to get nude images of themselves taken down. Childline is free on 0800 1111, and parents can call the NSPCC helpline on 0808 800 5000. In Ireland, report illegal images to Hotline.ie and contact Childline by ISPCC on 1800 66 66 66. If a child is in immediate danger, call 999 in the UK or 112 in Ireland. Our E-Safety for UK children page lists more support services.
Teaching internet safety works best as a running conversation, not a lecture. Settings will change as your child grows, and so will the law. What shouldn’t change is your child’s certainty that they can come to you. For quick definitions of any terms in this guide, see our internet glossary.
Which age stage is your family at right now? Share the rules that work in your house in the comments below, and help other parents find what works.
Frequently Asked Questions
These answers cover the questions parents ask most often about teaching internet safety at home.
At what age should I start teaching internet safety?
Start as soon as your child uses a touchscreen, often around two or three. Early lessons focus on asking before tapping and sharing screens with an adult, not on scary threats.
What are the 4 Cs of online safety?
They’re content, contact, conduct and commerce. The framework comes from Keeping Children Safe in Education, the statutory guidance for schools in England. It reminds parents that risk covers what children see, who contacts them, how they behave, and what they’re sold.
Is it legal for my 11-year-old to have TikTok or Snapchat?
It isn’t a crime, but it breaks both apps’ terms, which set 13 as the minimum age. Accounts with a false age also get adult-level settings and feeds. From spring 2027, the planned UK ban would raise the limit to 16.
Should I install secret tracking apps on my teenager’s phone?
We’d advise against it. Secret monitoring damages trust and pushes risky behaviour out of sight. Use open tools like Screen Time or Family Link, and agree on the rules together.
What should I do if my teenager is being blackmailed over an image?
Stay calm and don’t pay. Keep the evidence without forwarding any images, then report to CEOP and use Report Remove to get images taken down. Most of all, make sure your child knows they’re not in trouble.
How do I stop surprise gaming bills?
Remove saved cards, require a password for every purchase, and use prepaid gift cards for allowances. Check purchase history monthly with your child.