Most students at our school have access to a smartphone, and most use the internet daily. This article covers what we think every student and parent should actually understand — stated practically, and without pretending that the answer is simply to use technology less.
Passwords: the one change that matters most
The most common serious mistake is reusing the same password across several accounts. The reason this is dangerous is not obvious, so it is worth explaining.
Large websites are broken into regularly, and when that happens, lists of email addresses and passwords are published online. Attackers then take those lists and try the same combinations on other services — email, banking, social media. This is automated and costs them almost nothing. If your password for a game forum is also your email password, one unrelated breach hands over your email account, and from there the password reset link for everything else.
What to do instead:
- Use a different password for your email than for anything else. Your email is the master key — every password reset arrives there. If you protect one account properly, protect that one.
- Use length rather than complexity. Four unrelated words joined together is both far harder to break and far easier to remember than an eight-character jumble of symbols.
- Turn on two-factor authentication for email and any account holding money. It means a stolen password alone is not enough.
- Never share a password with a friend. Friendships change; passwords, once shared, cannot be unshared.
Recognising a scam
Fraud attempts are increasingly well made. The days of obviously misspelled emails are largely gone. What has not changed is the underlying structure, and it is the structure you should learn to recognise.
Nearly every scam combines urgency with a request. Your account will be closed today — click here. You have won a prize — pay the delivery fee. A relative is in trouble — send money now. The urgency exists to prevent you from stopping to think, because thinking is what defeats the attempt.
A reliable habit: when a message creates a sense of hurry, that is the signal to slow down. Do not use the link provided. Go to the organisation's website yourself, or telephone a number you already had. A genuine message survives this check. A fraudulent one does not.
Two specifics worth naming. No bank will ever ask for your OTP, PIN or full password — anyone who does is committing fraud, regardless of what they claim. And an offer of easy money for little work is, essentially without exception, a way of taking money from you.
What you post does not go away
Students often assume that deleting a post removes it. In practice, anything you have published may have been screenshotted, downloaded, forwarded or archived within seconds. “Disappearing” messages disappear from your screen, not from the recipient's phone camera.
This is worth taking seriously because the audience for your online life extends further than you expect and lasts longer than you imagine. University admissions offices and employers do search for candidates. A remark that was funny within a group of friends at fifteen can read very differently to a stranger assessing you at twenty-two.
A workable test before posting: would you be comfortable if this were read aloud, out of context, by a teacher, a parent, and someone who dislikes you? If not, it is worth reconsidering.
Privacy in practical terms
- Review app permissions. A torch application does not need your contacts. A game does not need your location. Most phones let you inspect and revoke these; it takes ten minutes and is worth doing.
- Turn off location tagging on photographs. Images often carry the exact coordinates of where they were taken. Posting a photograph from home can publish your address without your realising it.
- Keep accounts private by default. There is rarely a reason for a school student's social media to be publicly visible.
- Be careful with school uniform in public posts. A uniform identifies where you are every weekday morning, to anyone who looks.
If something goes wrong
This is the part we most want students to hear.
If you are being harassed online, if someone is pressuring you, if you have been tricked into sending money or images, or if you have made a mistake you are frightened about — tell an adult. A parent, a class teacher, any member of staff you trust.
The fear of being blamed or losing phone access is what keeps students silent, and silence is what allows a bad situation to become far worse. We would much rather help you with a problem early than discover it months later. Nobody at this school will punish you for reporting something that has happened to you.
Practical steps: keep the evidence rather than deleting it, stop replying, block the account, and tell someone. In cases involving threats, extortion or images of minors, this becomes a matter for the police, and the school will help you approach them.
For parents
Monitoring software has its place with younger children, but it is not a substitute for conversation, and older students will generally find a way around it. What protects a teenager most reliably is the confidence that they can bring a problem to you without the immediate response being confiscation and anger.
Asking occasionally and without accusation — what are you using at the moment, has anything odd happened, has anyone messaged you who you do not know — tends to achieve more than any application. The goal is for you to be the first person they tell, not the last.
