How can you protect children online while keeping the conversation open?

Protecting a child online is not about making them afraid of the internet or monitoring everything they do. The aim is more lasting: teach them good habits, put age-appropriate protections in place and preserve enough trust for them to speak up when a situation makes them uncomfortable.

Digital activities also bring many benefits. They offer opportunities to learn, create, play and stay connected. Risks arise when a child encounters content they do not understand, someone trying to manipulate them, pressure from a group or a service designed to capture their attention and data.

Good protection therefore rests on three pillars: sound technical settings, family rules that make sense and a conversation that continues beyond the first incident.

Understanding the four types of risk

It is easier to take action when you distinguish between the situations that may arise.

• Content risks include violent or sexual images, misinformation, dangerous challenges and content that normalises harmful behaviour.
• Contact risks arise when a stranger, an adult with harmful intentions or a fake profile tries to gain the child’s trust.
• Conduct risks include cyberbullying, humiliation, sharing a photo without permission or taking part in a group attack.
• Commercial and data-related risks include in-app purchases, misleading advertising, excessive information collection, geolocation and mechanisms that encourage people to stay connected.

This distinction helps avoid reducing safety to screen time alone. Two hours spent creating with friends the child knows raise different issues from ten minutes of secret conversation with a stranger.

1. Develop the rules with your child

A rule imposed without explanation will be sidestepped as soon as the adult looks away. A rule that has been discussed becomes a guide the child can follow independently.

Agree on a few simple principles together: which apps are allowed, when screens should be put away, what information must not be published, who can be accepted as a contact and what to do when a message seems strange. Explain the reason for each rule and expect it to change as the child grows older.

Above all, make a mutual promise: the child can come and talk about a problem without automatically losing their phone or being humiliated. Fear of punishment often leads children to hide a mistake, precisely when an adult’s help would be most useful.

2. Secure devices and accounts first

Before discussing complex threats, close the most obvious doors.

• Regularly install updates for phones, tablets, computers and apps.
• Download apps from official stores and check who publishes them.
• Use a screen lock code that classmates do not know.
• Create a long, unique password for each important account.
• Enable two-factor authentication whenever the service offers it.
• Set up a recovery address or method that the parent can access if the child loses their device.
• Delete old accounts and apps that are no longer used.

For younger children, a child account built into the device generally allows you to restrict installations and purchases. Do not automatically link a bank card to a game. When a payment method is needed, require adult approval for every purchase.

3. Adjust privacy settings before the first post

Default settings do not always reflect what a family wants to share. Open the settings with your child instead of configuring them in secret.

Start by making the profile private. Limit messages and contact requests to people the child knows. Turn off geolocation when it is not essential and check who can see stories, the friends list, date of birth or online status.

Also review each app’s permissions. A puzzle game generally does not need constant access to the microphone, contacts and location. Remove permissions that do not serve a function you understand and actually use.

Teach your child that a photo can reveal more than their face: a school uniform, house number, location, habits and the people present. Before posting, three questions are enough: who will be able to see this content, could it hurt someone and would I feel comfortable if it resurfaced later?

4. Teach the habit of pausing

Scams and manipulation often try to provoke an immediate reaction: fear of losing an account, the promise of a gift, an exclusive invitation or a message from a friend who supposedly needs help.

Give your child an easy rule to remember: when a message asks for a secret, money, a code, an intimate photo, a meeting or an urgent click, stop and talk to a trusted adult.

Explain that a name, photo and even a voice do not prove someone’s identity. An account can be hacked, an image copied and a message generated to resemble one from someone close to them. Verification must take place through another, already familiar channel.

5. Talk openly about strangers and coercive control

In a game or on social media, a malicious contact does not necessarily begin with a shocking request. They may first offer compliments or virtual items, listen to the child’s problems and then ask for the conversation to remain secret or move to a more private messaging service.

Explain the warning signs without assigning blame: a concealed age difference, repeated gifts, intimate questions, pressure to turn on the camera, requests for photos, threats to publish content or attempts to arrange a meeting.

The child needs to know that they can end the conversation at any time. If there is any doubt, keep the evidence, block the account and use the reporting feature. Never arrange a confrontation or a meeting with the suspected person on your own.

6. Respond to cyberbullying without making things worse

Cyberbullying can continue after school and reach a child even in their bedroom. Repeated messages, an exclusionary group, a humiliating edited image or a circulating rumour must not be dismissed just because they happen on a screen.

Start by listening and thanking the child for speaking up. Do not ask why they did not act sooner. Take screenshots showing the content, account, date and context. Block and report those responsible after preserving this evidence.

If pupils are involved, contact the school with specific facts. If there are threats, blackmail, intimate images being shared or immediate danger, promptly seek help from a specialist service or the police. Do not reshare the harmful content to condemn it: that can increase the harm.

7. Use parental controls as a guardrail

Parental controls can filter certain content, limit purchases, set time boundaries and prevent unsuitable apps from being installed. However, they cannot recognise every form of manipulation or every instance of bullying.

Explain what is enabled and why. Regularly review the limits with your child and allow more independence when they show that they understand and follow the rules. Invisible, constant surveillance can damage trust without teaching appropriate behaviour.

The right tool supports digital education. It does not replace it.

8. Set an example, including with family photos

Adults also shape their children’s digital identity. Before posting a photo, ask for their permission as soon as they are able to give it. Avoid embarrassing images, school documents, medical information and content that reveals a routine or precise location.

Model the behaviour you expect: put your phone down during a conversation, ask before taking a photo, check information before sharing it and acknowledge mistakes. Rules are more credible when they apply to the whole family.

Age-appropriate guidance

At primary school

Prioritise shared spaces, child accounts, a small selection of apps and very concrete explanations. The child should know how to close a window, block a contact and call an adult.

In early adolescence

Set up social media together and discuss purchases, reputation, intimate photos and strangers. Regularly check permissions and any new services being used.

For more independent teenagers

Focus on judgement: online relationships, consent, misinformation, fraud, blackmail and the consequences of a post. Keep a clear plan for getting help even as technical controls decrease.

The family plan when something goes wrong

1. Stop: do not keep replying, paying, clicking or sending content.
2. Talk: contact a parent or another trusted adult.
3. Preserve: take screenshots and note accounts, links, dates and times.
4. Protect: change compromised login details, block the contact and adjust privacy settings.
5. Report: use the platform’s reporting tools and then, depending on the severity, contact the school, a helpline or the police.

Conclusion

The strongest protection is not a piece of software installed once and forgotten. It is a child who can recognise that something is wrong, stop the exchange and ask for help without fearing a disproportionate reaction.

Start by securing accounts, making profiles private and setting a few easy-to-follow rules. Then regularly revisit how your child actually uses digital services. Technology changes quickly, but the essential principles remain the same: caution, respect, verification and dialogue.

Useful sources

• European guidelines on protecting minors under the DSA — European Commission
• Safer Internet Centres — European Commission
• Protect your children’s privacy — CNIL
• Cybersecurity: good habits for families — CNIL