What actually puts kids at risk online
Most parents picture one risk: a kid stumbling onto pornography. That one is real, and it is usually accidental rather than sought out. But it is only one of four, and the other three are the ones filters alone do not catch.
- Content they are not ready for. Adult material, graphic violence, gore, gambling, self-harm and pro-eating-disorder content. Often arrived at sideways, through a search result, an autoplay, or a link a friend sent.
- Contact from people you did not choose. Strangers in game chats, comment sections and DMs. This is the risk most parents underestimate, and it does not live in a browser. It lives in games and messaging apps.
- Conduct, including their own. What your kid says, sends and posts. Group chats turn cruel quickly, and a screenshot lasts a long time.
- Contracts and cons. Scams, phishing, malware, in-game purchases, and apps designed to keep a kid scrolling well past the point they wanted to stop.
A good setup handles the first one almost entirely, helps with the fourth, and mostly just gives you a way in to talk about the middle two. Anyone who tells you software solves all four is selling something.
Where to start: five layers, in order
Do these in order. The first two take an evening; the rest are ongoing.
- Filter the browser, not just the network. Router-level filtering stops working the moment your kid is on cellular data or a friend’s wifi. The filter that actually travels with them is the one inside the browser app on their device. Whatever you choose, it should apply everywhere the device goes.
- Force safe search on, and lock it. Google, Bing, YouTube and TikTok all have a safe or restricted mode. All of them can be switched off by the kid unless something holds them on. Check that whatever you set cannot be undone from the device.
- Set the device limits. Apple Screen Time and Google Family Link handle bedtime, downtime, app installs and purchases. These are worth the setup hour. They are also the layer kids most often find a way around, so treat them as a help, not a wall.
- Agree the ground rules out loud. Where devices live overnight, whether headphones are allowed at dinner, who your kid is allowed to talk to in a game. Written on the fridge beats stored in an app.
- Keep the door open. The single highest-value sentence in this whole guide: “If anything online ever upsets you or scares you, you can tell me and you will not lose the device.” Kids hide things when telling you costs them their connection to friends. Take that cost away and you will hear about problems while they are still small.
What to do at each age
Ages are a rough guide, not a rule. A cautious nine-year-old and a headstrong nine-year-old need different internets. Go by the kid.
Under 5
No open internet, and no search. At this age a kid does not need the web; they need a handful of places you picked. Use a browser or app that only opens sites on an allow list, watch alongside them where you can, and skip anything with a comment section or a chat.
Ages 5 to 9
Search arrives, and with it the first real accidents. Turn on safe search and make sure it cannot be turned off. Keep browsing to shared spaces in the house. Start naming things out loud: that ads are trying to sell you something, that not everyone online is who they say they are, that some pages are made for grown-ups. Autoplay is the main hazard at this age, so turn it off wherever you can find the setting.
Ages 10 to 12
This is the hinge. Kids get their own device, friends get group chats, and the gap between what they can reach and what they are ready for is at its widest. Keep a filter on, but move from blocking silently to blocking with a reason and a way to ask you about it. Talk about pornography before they find it, because at this age many do, and the first conversation should not be a reaction to something you discovered. Set up the games they play with them, and turn off chat with strangers.
Ages 13 and up
Hard blocks start working against you. A teenager who feels policed will do their browsing on a friend’s phone, where you have no view at all and no way to help. Shift from control to visibility: keep the worst categories closed, let most of the web through, and make sure they know what you can see. Talk about the things filters cannot touch, which by now are the ones that matter most: what they send, what a screenshot does, who is in the group chat, and what to do when someone they do not know starts being very friendly.
Do device parental controls handle all of this?
No, and it is worth being precise about why. Screen Time and Family Link are good at the outside of the experience: how long, which apps, what time of night, what can be installed. They are much weaker inside the browser, because the browser they are restricting was built for adults and every rule is a patch on top of that. Safari’s content restriction, for example, is a blunt on/off that over-blocks harmless pages and still misses plenty.
So use them. Just do not expect them to be the whole answer, and do not be surprised when your kid works out a way around them. Most do, eventually, and a kid finding the workaround is not a sign that you failed; it is a sign that the layer was doing its job until it stopped.
How to talk to your kid about it
The technical setup buys you time. The conversations are what actually keep a kid safe, because they are the only layer that still works when your kid is at a friend’s house.
- Little and often beats one big talk. Two minutes in the car lands better than a summit at the kitchen table.
- Be specific about what you can see. Vagueness reads as surveillance. “I can see the sites you visit, I cannot see your messages” is a sentence a kid can live with.
- React small. If you want to hear about the next thing, do not make the first thing expensive to tell you.
- Use the flags as openers, not evidence. “Something got blocked yesterday, what were you looking for?” is a conversation. “I saw what you searched” is a trial.
- Let them earn more. Kids accept limits far better when there is a visible path out of them.
What to do when something goes wrong
Something will, eventually. A plan beats a panic.
- Stay calm out loud, whatever you feel. Your reaction sets the price of the next disclosure.
- Keep the evidence. Screenshot before you block or delete, especially for harassment or contact from an adult.
- Block and report inside the app or game where it happened.
- Escalate when an adult is involved. In the United States, contact from an adult seeking a child, or any sexual image of a minor, goes to the National Center for Missing & Exploited Children’s CyberTipline at report.cybertip.org, or call 1-800-843-5678. For an immediate danger, call 911.
- Do not take the device away as the first move unless safety requires it. If telling you costs a kid their phone, the next thing goes unreported.
Two other places worth knowing: Common Sense Media for age ratings on specific games, shows and apps, and Thorn for research-backed scripts on talking to kids about online sexual risk.
Where Shaka fits
We build one of these layers, so read this part with that in mind.
Shaka Surf is the browser layer: a web browser built for kids rather than an adult browser with restrictions bolted on. It moves through four age levels, from a small set of allowed sites for the youngest kids up to the open web behind a filter for teenagers, and you promote your kid when you both think they are ready. Wave Watch™ reads each page as it loads and either lets it through, warns, or covers it with the reason and a button to ask you about it. The parent app, Shaka Safe, shows you where they went.
The part we care most about is the part that is not a filter: your kid sees the same timeline you do, and the first screen they ever open explains exactly what you can see. No hidden mode, no silent tightening. That is the thing that keeps an older kid browsing where you can still help them.
What Shaka does not do: it is a browser, so it does not cover games, messaging apps, or what happens on someone else’s device. Layers three, four and five on the list above are still yours. Shaka Surf and Shaka Safe are launching on the App Store; you can join the waitlist to hear when.