Kids are online earlier than ever — tablets in preschool, group chats by third grade, gaming accounts before they can spell “password.” That means the window to teach real internet safety habits has shrunk. The good news is that kids under 10 don’t need a lecture on cybersecurity. They need a short list of clear, memorable rules they can actually use. Here are ten that matter most, plus how to teach them in a way that sticks.
1. Never share your name, school, or address with someone you only know online
Young kids often don’t distinguish between a “friend” they play games with online and a friend from school. Teach them a simple test: if you’ve never shaken this person’s hand in real life, you don’t tell them where you live, where you go to school, or what your last name is — even if they seem nice, even if they say they’re a kid too. Scammers and predators often pretend to be children to build trust quickly.
Why does this matter so much for younger kids specifically?
Children under 10 are still learning that not everyone online is who they claim to be. They tend to take usernames and profile pictures at face value. Practicing the “handshake test” gives them a concrete rule instead of an abstract warning.
2. Ask before you click — every single time
Pop-ups, prize notifications, “you won a free skin” messages in games, and links from strangers are all designed to look exciting. The rule for kids under 10 should be simple and non-negotiable: stop and ask a parent before clicking anything unfamiliar, even if it looks like it’s from a game they already play.
- Set a household rule: “When in doubt, don’t click — show a grown-up.”
- Praise kids for asking, even if the link turns out to be harmless. You want to reward the pause, not just the correct guess.
- Point out that real prizes, real game updates, and real messages from friends almost never show up as flashing pop-ups.
3. Passwords are private — even from best friends
Many kids think sharing a password is a sign of trust, like sharing a locker combination. Reframe it: a password is like a house key. You wouldn’t hand out a copy to everyone you like. Teach kids to keep passwords private from friends, classmates, and anyone who asks “just this once.”
What makes a good password for a kid to remember?
A string of three or four random words strung together (like “purple-tiger-bicycle-lamp”) is both easy for a child to remember and hard for someone to guess. Avoid pet names, birthdays, or anything posted on a public profile, since those are the first things guessers try.
4. If a message feels urgent or scary, slow down
Scammers rely on rushing people. A message that says “Your account will be deleted in 10 minutes!” or “Click now to keep your gift card!” is designed to skip past careful thinking. Teach kids that real problems rarely need to be solved in the next five minutes. Urgency is a red flag, not a reason to act fast.
- Teach the phrase: “If it’s trying to rush me, it’s probably trying to trick me.”
- Practice recognizing urgent language: “act now,” “limited time,” “your account is locked,” “final warning.”
5. Not everything you see online is true — or even real
Kids under 10 are increasingly exposed to AI-generated images, fake videos, and doctored screenshots. They should grow up knowing that a photo or video isn’t automatic proof something happened. Encourage a habit of asking “who made this, and why?” before believing or sharing something surprising.
How do I explain fake content to a young child without confusing them?
Keep it concrete: “Just like a costume can make someone look like a different person, computers can make pictures and videos look real even when they aren’t.” That comparison usually clicks faster than a technical explanation.
6. Never download or install anything without a parent’s okay
Free game mods, “cool new apps,” and browser extensions are common ways malware reaches family devices. Set a firm household rule that downloading anything — apps, games, files, extensions — always requires asking first, no exceptions for “everyone else has it.”
7. Only accept friend or follow requests from people you know in real life
A stranger’s follow request is not a compliment — it’s an unknown. Teach kids to check with a parent before accepting requests from accounts they don’t recognize, and to understand that a low follower count, a profile that copies a real friend’s name, or a generic profile picture can be signs of a fake account.
What if the account claims to be a friend from school?
Teach kids to verify outside the app — text or ask the actual friend directly, since it’s easy to copy a name and photo to impersonate someone. This is also one of the most common tricks used to scam kids out of gift card codes or game currency.
8. Screens showing “you’ve won” are almost always lying
Kids are frequent targets of fake prize and gift card scams, especially inside games. A message claiming they’ve won free robux, skins, or a gift card — and just need to “enter their parent’s card info” or “verify their account” — is a scam nearly 100% of the time. Make this one memorable: real companies don’t give away prizes through pop-ups in the middle of a game.
9. Keep cameras and locations turned off unless a parent says otherwise
Many apps default to sharing location or enabling camera access. For kids under 10, the safest setting is off until a parent has reviewed it. This isn’t about distrust of any single app — it’s about building the habit of checking privacy settings before using something new, a habit that will matter even more as they get older.
10. If something feels wrong, tell a grown-up — you will not be in trouble
This is the most important rule of all, and it only works if parents make it true. Kids under 10 often stay quiet about a scary message, a strange request, or an accidental click because they’re afraid of losing screen time or getting in trouble. Make it clear, repeatedly, that telling a parent about something uncomfortable online always leads to help, never punishment. A child who trusts they can come to you is far safer than one who has memorized every rule perfectly.
Making These Rules Stick
Ten rules are a lot to absorb at once, especially for a young child. Instead of reciting the whole list in one sitting, try weaving one rule into conversation each week — while driving, during dinner, or right before screen time. Ask “what would you do if…” questions and let your child talk through the answer. Kids remember stories and practice far better than lists.
Some families also use tools like LanternPhish to turn this into hands-on practice — simulating the kinds of scam messages and suspicious links kids actually encounter, in a safe setting where mistakes are simply a learning moment. Practicing “spot the scam” together as a family activity builds the instinct faster than any single conversation can.
Frequently Asked Questions
At what age should I start teaching internet safety rules?
As soon as a child uses any connected device — often by age 4 or 5 for tablets and games. The rules don’t need to be technical at that age; simple ideas like “ask before you click” and “don’t share your name with strangers” are enough to start. You can layer in more detail as they get older.
My child already has social media even though they’re under 10. What should I focus on first?
Start with privacy settings and who can contact them. Set the account to private, review the follower and friend list together, and make rule 10 — telling you when something feels off — the top priority. Everything else can be taught gradually, but an open line of communication needs to be in place immediately.
How do I teach these rules without making my child afraid of the internet?
Frame safety rules the same way you’d frame street-crossing rules: not because the world is scary, but because a few simple habits let you enjoy it safely. Praise good decisions (“I’m glad you asked me before clicking that!”) more often than you warn about bad ones. Confidence, not fear, is what makes the rules last.
What’s the single most important rule if I can only teach one?
Rule 10 — tell a grown-up when something feels wrong, and know you won’t be in trouble for it. Every other rule reduces risk, but this one ensures that when something does slip through, your child comes to you quickly enough to fix it.
Protect your family from scams — get Lantern Phish free:
