Privacy: Passwords and Account Security

Help your child understand how accounts are protected and how to build strong, practical habits to keep them secure.

Why this matters

For young people, accounts are more than just logins, they’re where their social lives, conversations, and personal information exist. When an account is compromised, it’s not just a technical issue. It can mean:

private messages being read
someone impersonating them
content being shared without permission
loss of control over their online identity

This can feel confusing, embarrassing, or even distressing. The reality is that most account breaches don’t happen because of advanced hacking, they happen because of:

weak or reused passwords
shared login details
clicking unsafe links

That’s why building simple, consistent habits can make a big difference.

How accounts get compromised

Common ways accounts are accessed include:

Password reuse (one password used across multiple platforms)
Guessable passwords (names, birthdays, or simple patterns)
Sharing with friends (even trusted friends can accidentally or intentionally misuse access)
Phishing (messages or links designed to trick them into entering login details)

These situations often don’t feel risky in the moment, which is why awareness matters.

Helping your child understand how things go wrong makes security feel more real and less abstract.

What makes a strong password (and why it works)

Strong passwords aren’t about complexity, they’re about length and uniqueness.

A good password or passphrase is:

- long enough to be hard to guess

- unique to that account

- not based on personal information

Passphrases (a combination of random words) are often easier for young people to remember and more secure than short, complex passwords.

Rather than focusing on “perfect security,” aim for habits your child can realistically maintain. Focus on what matters most, such as using different passwords for important accounts, keeping passwords private and enabling extra security where available.

Practical ways to support your child

Do it together

To help make it practical for your child you might:

create a passphrase together
talk about which accounts matter most (email, social media, gaming)
show them how login alerts or security notifications work

Normalise not sharing passwords

Many young people see password sharing as a sign of trust in friendships or relationships.

It helps to reframe this:

Trust doesn’t require access to your accounts
Privacy is still important, even with people you trust

Add two-factor authentication (2FA)

Two-factor authentication adds a second step when logging in (like a code sent to a device) and it’s one of the most effective ways to protect accounts, even if a password is compromised.

Helping your child understand this as a normal safety step, not an inconvenience, can increase uptake.

If something goes wrong

If an account is compromised, quick action can reduce harm. Your first focus should be on locking down other accounts, regaining access, limiting further use and understanding what happened.

Practical steps to take:

change the password immediately
log out of all devices or sessions
check for changes (email, profile, linked accounts)
enable 2FA if not already on
report the issue to the platform

A final thought

Account security isn’t about being perfect, it’s about reducing risk in simple, consistent ways.

Start with

✔ Does your child use unique passwords for important accounts?
✔ Do they understand why passwords shouldn’t be shared?
✔ Have you enabled extra security features where possible?

Helping your child understand how accounts are accessed, and giving them practical tools to protect themselves, builds confidence as they become more independent online.