A child gets their first account earlier than their first phone: a game, a learning platform, a school service. The password there is usually invented by a parent in three seconds and reused everywhere — which is exactly the habit that stays for life.
By age
-
Under eight: the parent's password
The child does not need to know it. Accounts are set up by an adult, purchases blocked, the device used in a shared room.
-
Eight to eleven: the first own password
A passphrase works far better here than random characters: four words are remembered at once and typed without suffering. Let the child pick from several generated options — that is what makes it theirs.
-
Twelve to fifteen: a manager and a second factor
The age when the number of accounts outgrows memory. A family plan in a password manager solves it, and a second factor is easiest to explain through a gaming account, where the value is obvious.
-
Sixteen and older: their own vault
Passwords stop being shared with parents. That is normal and worth saying out loud rather than letting it happen silently.
What to explain, and when
| Idea | How to put it | From what age |
|---|---|---|
| A password is not shared | “Not even with a best friend — friendships change, the password stays” | 8 |
| Different passwords everywhere | “One key for every lock means one lost key opens everything” | 8 |
| Free things are not free | “Nobody gives away game currency for a login” | 9 |
| Links from friends are still links | “If it opens a login page, the friend has been hacked” | 10 |
| Nothing is deleted forever | “Anything sent can be saved by the other side” | 11 |
| A second factor | “A second lock, so the password alone is not enough” | 12 |
What not to do
- Do not use family dates and names. A child's password of “Rex2015” is the pet plus the year of birth — findable in one look at your social media.
- Do not use the same password across the family. Convenient today, and one leak covers everybody.
- Do not read their messages secretly. It gets discovered, and what follows is a second account you know nothing about — why controls have limits.
- Do not punish the first mistake. That is the price of hearing about the second.