Privacy Basics: Passwords, Data & Oversharing

Teach password habits, data-sharing awareness and oversharing instincts before your child's digital footprint is set.

Kids share information online the way they talk to a friend at recess: freely, without thinking about who else is listening. A birthday in a game profile, a school logo in a photo background, a location tag on a post - none of it feels risky in the moment, but together it can build a surprisingly complete profile of a child that strangers, advertisers, and scammers can all use. Privacy is a skill, not a one-time lecture, and it is built through small repeated habits: strong unique passwords, knowing what "data" even means, and pausing before posting. This guide breaks those habits down by age and gives you exact settings to lock down first.

Passwords and account security

The single best password upgrade for any family is a password manager. Apple's built-in Passwords app (Settings > Passwords) or Google Password Manager (passwords.google.com) will generate and store a unique strong password for every account, so your child never has to remember more than one master password.

Teach the "three unrelated words" method for any password they do need to memorize, like a phone passcode or the manager's master password - something like "purple-tractor-lamp42" is both memorable and hard to guess, unlike a pet's name or birthday.

Understanding what "data" means

Most kids do not realize that free apps make money by collecting and selling information about how they use the app - what they watch, how long they stay, what they click. Explaining this once, in plain terms ("the app is free because your attention and your information are worth money to them"), reframes a lot of behavior for older kids.

Location data is one of the most sensitive types collected. Check each app's location permission directly: on iPhone, Settings > Privacy & Security > Location Services, and go through each app to set it to "Never" or "While Using the App" rather than "Always." On Android, Settings > Location > App location permissions does the same.

Checklist

• Password manager set up for the whole family
• Two-factor authentication enabled on email and main accounts
• Location Services reviewed and limited app by app
• Ad tracking turned off (Allow Apps to Request to Track = off)
• No full name, school, or address in any public profile