Email Safety 101
Help get your child set up safely with a new platform or app, with this quick reference guide.
What is it?
Email is a digital messaging tool that allows people to send and receive messages, share files, communicate with teachers, and sign up for online services. It is often used for school accounts, homework platforms, password resets, and other everyday online tasks.
Children and young people might use email to:
- Communicate with teachers or school staff
- Access school platforms and learning tools
- Create accounts for apps, games, or websites
- Receive updates, newsletters, or notifications
- Reset passwords or verify accounts
Email is essential for high school sign-ins and communication, and common outside of school as many online services require it.
For parents and caregivers the key thing to understand is that email communication can seem formal and trustworthy, but it is also one of the most common ways scams, phishing, and harmful links reach young people.
Why it's popular
Email is likely a necessity for children once they reach Intermediate and High School
- It’s often needed for school communication
- Many apps and websites require an email address to sign up
- It helps with password resets and account recovery
- It can feel more “official” or grown-up than messaging apps
Young people might say:
- “It’s how I talk to my teacher.”
- “I need it for school logins.”
- “That’s where the code gets sent.”
What to watch out for
Phishing and scams
Many scams arrive by email and are designed to look real. A message might pretend to be from a school, a well-known company, or a platform your child uses, and try to get them to click a link, share information, or log in.
- Teach your child to slow down and check before clicking. Encourage them to look closely at who sent the email and whether the message feels expected or genuine. Let them know it is always okay to ask for help if something seems odd or urgent.
Oversharing personal information
Young people may not always realise that email should not be used to share passwords, private details, or sensitive information. Because email can feel formal, they may assume it is always safe.
- Be clear that passwords, verification codes, and personal details should never be shared by email. Reinforce that if someone asks for private information, they should stop and check with a trusted adult first.
Fake password re-set emails
Password reset emails can look convincing, especially if they use familiar logos or say there is a problem with an account. Some are genuine, but others are designed to trick people into entering passwords on fake websites.
- Talk about only using password reset emails when they have asked for one themselves. If an email says there is a problem with an account, encourage them to go directly to the website or app instead of clicking the email link.
Contact from strangers
An email address can sometimes be used by people your child does not know, especially if it has been shared publicly or used widely online. This can lead to unexpected messages, spam, or attempts to start conversations.
- Explain that they do not need to reply to emails from people they do not know. Encourage them to show you any unexpected message, especially if it asks questions, includes links, or feels confusing.
Harmful links and attachments
Emails can include links, files, or attachments that are unsafe, misleading, or inappropriate. Some may lead to fake websites, while others may try to download something harmful.
- Build the habit of checking before clicking. Ask questions like, “Were you expecting this?” or “Do you know who sent it?” to help them pause and think before opening anything.
5 minute safety settings
Sit together and work through settings to put some basic protections in place, and talk about why they're important.
Note: Settings and menu options will vary depending on your child’s device and account, but these controls are the most important to check.
Two-factor authentication adds an extra layer of security to your child’s email account. This means that even if someone gets their password, they may still need a second step, like a code, to get in.
- Go to the email account’s Security settings
- Turn on two-factor authentication or 2-Step Verification
- Follow the prompts to set it up
This is one of the most effective ways to protect an email account from being taken over.
A strong password helps keep your child’s email secure, especially because email is often linked to other accounts and services.
- Check that the password is not reused from games, apps, or other websites
- Use a strong passphrase made up of several words
- Store it safely if needed using a password manager
A secure email password matters because access to email can often be used to reset other accounts.
Most email services automatically move suspicious messages into a spam or junk folder. This helps reduce the number of scams that appear in the main inbox.
- Open the email app or website
- Find the Spam or Junk folder
Show your child that spam folders exist for a reason, and that suspicious emails should not be opened just because they arrived. Explain that messages there should be treated carefully and usually left alone.
Most email platforms allow users to report suspicious emails. This helps improve filters and gives young people a practical step to take when something feels wrong.
- Open a suspicious email
- Look for options like 'Report spam' or 'Report phishing'
- Practise this together on obvious junk mail
Knowing how to report a scam can help children feel more confident and less likely to click in the moment.
If your child has a school email account, it is best used only for school-related communication, platforms, and logins.
- Talk about what the account is for
- Avoid using it to sign up for games, shopping, or entertainment sites
- Keep school and personal accounts separate where possible
This reduces clutter, lowers risk, and helps children build good digital habits.
What else can help?
Support your child to navigate WhatsApp safely...
- Sitting alongside your child while they check email can help you understand what kinds of messages they receive and how they decide what to open. It also gives you a chance to model safe habits in real time, like checking the sender or spotting a suspicious subject line.
- One of the most useful rules for email is to pause before clicking links or opening attachments. Help your child get used to asking simple questions like, “Was I expecting this?” or “Do I know who sent it?” before taking the next step.
- Children do not need to open, reply to, or investigate every message they receive. Let them know it is okay to leave an email alone, delete it, or ask for help if it feels strange or pushy.
- Scam emails often try to create urgency, fear, or excitement. They may say something is wrong with an account, offer a prize, or ask for quick action. Talking through examples together can help your child recognise common warning signs.
- Many other accounts are connected to email, which means access to one inbox can unlock a lot more. Helping your child understand that email is an important account to protect can make password safety and caution feel more meaningful.
- As your child gets older, the way they use email will change. School demands, app sign-ups, and independent online activity can all increase. Regular, relaxed conversations help you stay connected and make it easier for them to come to you when something does not seem right.
Learn More
Email accounts become a necessity for many young people, and it's never too early to start building good digital safety habits and having open conversations about staying safe online when the first email account is set up.
Find more information on staying safe on email via the links below:
- Google Safety Centre: https://safety.google
- Microsoft Safety: https://www.microsoft.com/en-nz/digital-safety



