Learn Dark Web

Safety Center

Family Internet Safety Plan for All Ages

One plan, three generations. A family internet safety plan is a short, written agreement about how your household handles the internet — what stays private, what happens when something suspicious arrives, and who to tell. It works best when everyone helps write it, and it should fit on one page.

By Abdul Hannan · Published 14 November 2026 · Updated 14 November 2026

Try the tools: Family Safety Quiz · Family Safety Plan Builder

Why one plan for the whole household

Most safety advice is written for one age at a time: a page for kids, another for seniors, and nothing that joins them. But a household is one network. A grandparent who falls for a scam message can expose the family's shared accounts. A child who shares a photo can reveal the family's address. A parent who reuses a password can hand a thief the keys to everyone's email. No single page serves the whole household — so this one does. The plan below has three parts that apply to everyone, then age-staged rules for each generation, then a one-page version you can copy, print and put on the fridge.

Part 1: What stays private

Agree, as a household, what never goes online — in posts, in bios, in comments, in photos, in usernames:

  • Full names of children, and their school names
  • Home address, phone numbers, and email addresses
  • Birthdays, holidays and travel dates
  • Photos of children, especially in school uniform or at home
  • Passwords, verification codes, and bank details
  • Photos of documents, tickets, or anything with a barcode

The rule behind the list is simple: anything that identifies a person, places them, or unlocks an account stays offline. Photos spread further than expected, and once posted, assume a copy exists. Our sharenting guide explains the photo rules in full, and our metadata guide explains what photos reveal even when you say nothing.

Part 2: What happens when something suspicious arrives

Agree this sequence now, while nothing is happening, so nobody has to decide under pressure:

  1. Stop. Do not click, do not pay, do not reply, do not download. The pause is the whole defence.
  2. Tell an adult. Children tell a parent; adults tell another adult. Telling is always the right move, and nobody gets in trouble for reporting.
  3. Check through the official route. Call the company on the number on your card or statement, or open its official site or app yourself. Never check through the message.
  4. Call the bank if money or card details were involved. It can freeze cards and watch for fraud.
  5. Keep the evidence — the message, the receipt, any details the sender gave — and report the scam to your national fraud reporting service.

The full guide to recognising scams is our avoid online scams page, which teaches the shape every scam shares.

Part 3: Who to tell

Name the people, now, in writing: the adult children tell first, a second adult if the first is unavailable, and the family member who handles the bank. Add the numbers that matter: your bank's fraud line, and — in the UK — Childline on 0800 1111 for children and young people under 19, free and confidential (verified 14 November 2026 on childline.org.uk). Elsewhere, use a child helpline in your own country. If money has been stolen, or someone is in danger, contact your bank and your local police — do not wait for a website to tell you what to do.

The plan by age

Children (roughly 4–9)

  • Devices are used in shared family spaces, not alone in a bedroom
  • A parent approves every new app, game or account
  • The rule: "If something feels strange, tell me" — and telling never gets them in trouble
  • No chatting with strangers; no sharing names, school or photos with people they have not met

Pre-teens (roughly 10–12)

  • A shared family account list: parents know every account, and every password is recoverable by a parent
  • Safe search on, and a conversation about what ads and videos are trying to sell
  • The rule: "An adult asking to keep a conversation secret is a warning sign"
  • Photos and videos: ask a parent before posting anything that shows them, their friends or their school

Teens (13+)

  • Privacy settings checked together on every new account — posts to friends, not public
  • The rule: "What you post can be screenshotted and shared — assume it will be"
  • A plan for unkind messages and pressure online, including when to block, when to tell a parent, and when to report — see our what to do if your child is cyberbullied guide
  • Money rules: no buying, no "free" offers, no sharing card details — ever, without a parent

Adults

  • Unique passwords with a password manager; two-factor authentication on email first
  • The pause rule for every unexpected message about money or accounts
  • Regular checks of bank statements and of what old accounts still hold your data

Older adults

  • A family code word for emergency calls, so a cloned voice cannot trick them — see our AI voice clone scams guide
  • Two-factor authentication set up together, once
  • The rule: "Never pay or share details because of a message — call the company, or call a family member, first"
  • Patience and no blame: if something goes wrong, telling someone quickly limits the damage

Parental controls: the safety net, not the plan

Device controls and safe-search settings are a useful backstop — but no filter catches everything, and controls never replace the conversation. Set them up together, in about ten minutes per device: screen-time limits, content filters, safe search, and app approvals. Our parental controls setup guide walks through it device by device. But remember the order: conversation first, controls second. A child who trusts you will tell you what the filter missed.

Your one-page plan (copy this)

Our family internet safety plan. 1) What stays private: names, addresses, schools, photos of children, passwords, codes. 2) If something suspicious arrives: stop, tell an adult, check through the official route, call the bank if money is involved, keep the evidence, report it. 3) Who to tell: [named adult], [second adult], bank fraud line [number]. 4) The rule for everyone: telling is always the right move, and nobody gets in trouble for reporting. 5) We revisit this plan when anyone gets a new device or account, and every year.

Fill in the brackets together, print it, and put it where everyone can see it. Revisit it when a child gets a new device or account, when someone joins a new app or game, and at least once a year. The age-staged checklists are in our online safety for kids, teens and parents guide.

Making the plan stick

A plan that nobody remembers is not a plan. Three habits keep it alive. First, keep it visible: one page, on the fridge or by the front door, where everyone sees it every day — not in a drawer. Second, keep it short: if it grows past one page, it is a policy document and nobody will read it. If a new rule matters, an old rule has to go or be folded in. Third, make it a ritual, not a lecture. Once a month, over dinner, ask one question: "Has anything strange happened online this month?" Ask it lightly, and accept any answer without alarm. The families that stay safe are not the ones with the strictest rules — they are the ones where telling is easy.

When the plan gets tested

Sooner or later it will be. A child will click a bad link. A grandparent will get the "urgent" call. A parent will reuse a password. When it happens, the plan's real value shows: nobody has to decide under pressure, because the decision was already made. Stop, tell an adult, check through the official route, call the bank if money is involved, keep the evidence, report it. Then debrief as a family — not to blame, but to learn: what gave it away, what nearly worked, what do we change in the plan? For example, if a family code word is in place, a voice-clone caller who does not know it is caught at the first question — the grandparent hangs up, the family changes the code word that evening, and nothing is lost. The plan did not prevent the call. It prevented the loss. That is the honest promise: a plan cannot stop every scam from arriving, but it can stop most of them from succeeding.

Start tonight, in ten minutes

You do not need a meeting or a printout to begin. Tonight, over dinner, agree three things: what stays private, the pause rule for suspicious messages, and the adult each child tells first. Write them on one piece of paper and stick it on the fridge. Add the code word and the bank's fraud number tomorrow, and the device settings at the weekend. A short plan written tonight beats a perfect plan that never gets written.

Sources

Last checked: 14 November 2026.

Frequently asked questions

What is a family internet safety plan?

A short, written agreement about how your household handles the internet: what stays private, what happens when something suspicious arrives, and who to tell. It works best when everyone helps write it, and it should fit on one page.

How do I get my children to follow a safety plan?

Let them help write it, keep it short, and make the first rule the most important one: they can always tell you if something upsets or confuses them online, without getting in trouble. A plan that punishes honesty will be hidden from, not followed.

What should a family safety plan include?

Three things: what stays private (names, addresses, school names, photos of children), what happens when something suspicious arrives (nobody clicks or pays; an adult is told; the company is contacted through its official site), and who to tell (a named adult, plus the bank if money is involved).

How often should we update our family safety plan?

Revisit it whenever a child gets a new device or account, when someone joins a new app or game, and at least once a year. A plan that never changes is a plan nobody reads.

Do parental controls replace a family safety plan?

No. Controls are a backstop, not a replacement for talking — and no filter catches everything. The plan is the conversation and the rules; the controls are the safety net underneath. Both are in this guide.

What if a family member is embarrassed about being scammed?

That is when they most need to hear it happens to careful people too — and that telling someone quickly limits the damage. Never blame; help them report it. The family rule should be: telling is always the right move, and nobody gets in trouble for reporting.