- Upgrade, use unique passwords with 2FA, and protect your devices.
- Protect your privacy: share wisely and encourage online interaction.
- Strengthen your email and website with TLS, S/MIME, and DMARC.
- Secure Wi-Fi and VPN in public areas; teachers and families with clear rules.
Today, children spend a significant portion of their day online, and this hyperconnectivity shapes their digital identity , their relationships, and what happens in the classroom. To ensure they benefit from technology without overexposing themselves, we all—families, teachers, and the students themselves—must do our part by promoting safe digital habits, using appropriate tools, and establishing clear rules.
The aim of this guide is to gather, in a practical and straightforward way, the key recommendations already highlighted by leading sources for protecting devices, data, and digital interactions. You'll learn what to do with passwords, how to avoid phishing, why it's important to keep everything updated, what policies to implement at your school, how to secure emails and academic documents, and what roles parents, teachers, and students play in creating a truly safe online environment.
Protect devices and data from day one
First, it's time to update your computer and apps: updates fix bugs and add critical patches . In Windows, type "update" in the Start menu to open Windows Update; in Office, go to File > Account > Update Options > Update Now . Don't forget to do the same on your mobile phone, tablet, and any other apps your students use.
Install a reliable antivirus/antimalware program , ensure your firewall is active , and check your router: change the password to a strong one and disable WPS. Be wary of USB drives and unknown attachments; if in doubt, don't open or click on anything. On your phone, enable screen lock with a PIN , pattern, or biometric authentication to prevent unauthorized access.
The key is strong, unique passwords: use long phrases of 12 or more characters, mixing letters, numbers, and symbols; it's best to use a password manager like 1Password, Bitwarden, or LastPass to generate and store them. Never reuse them across different services or share them, not even with friends.
Save your work to the cloud to avoid surprises. With OneDrive, your files are encrypted, accessible from any device, and include a recycle bin and version control to undo mistakes or recover accidental deletions.
Sharing yes, but wisely: reputation and privacy
Everything you post leaves a trace and can reappear in searches years later. Avoid uploading compromising images or videos and adjust your social media privacy settings to limit who can see your profile, tagged photos, comments, or who can find you.
Use profiles and email addresses that don't reveal sensitive information. When accepting new contacts on social networks or in games, use discretion: if you wouldn't say it out loud in class, you probably shouldn't post it . And never share other people's information without their explicit permission.
Good digital citizenship and cyber coexistence
If you wouldn't print it on a t-shirt, it's best not to post it. Standing up for your friends matters: cyberbullies often back down when they see a group supporting each other . If you detect cyberbullying, gather evidence and report it through the appropriate channels at your school.
In schools, a clear ICT policy, signed by students before they use the equipment, is crucial. It should explain what is allowed, how to communicate, and how to respond to incidents. Blocking websites helps, but it's not a solution: this measure must be accompanied by education, critical thinking, and dialogue.
Involve students in defining rules and choosing tools. By feeling involved, they become more engaged and often provide valuable information about emerging apps or devices that the faculty may not yet be aware of.
Teachers need to stay up-to-date: Digital native students turn to their peers when they perceive that adults are "out of touch." Stay current so they can trust you as a resource. Research educational resources before recommending them to ensure safety, privacy, and reliability.
Connect honestly: no piracy or plagiarism
Avoid downloading pirated music, games, or software: besides being illegal, it's a common way to get malware. Copying work from the internet or buying essays doesn't teach anything, and plagiarism detectors are available in many schools these days. If you're going to meet someone in person whom you only know online, go with a trusted adult and meet in a public place.
Threats in education: why prevention is victory
Education has been a recurring target of technological risks such as ransomware and other threats. There have been campaigns that have paralyzed schools and universities through data exfiltration and extortion . In Latin America, countries like Colombia, Mexico, and Brazil have suffered numerous recent incidents.
Educational systems face two challenges: protecting sensitive data and securing classrooms and communications. Schools store a great deal of information (age, grades, attendance, educational needs, incidents, etc.), so it must be encrypted and access restricted by user profile wherever it resides.
The institutional website must be protected with TLS/SSL. There are three levels of validation: DV (domain), OV (organization), and EV (extended). Certificate authorities verify at different levels, and EV certificates provide the strongest authentication for critical data.
If the center provides devices, it will need remote management. An MDM platform, supported by PKI, allows for controlling identity, security profiles, and permissions, and revoking access in case of loss. For email, add S/MIME and work to obtain DMARC on the domain to prevent impersonation of teachers or administrators.
To prevent tampering with official records or diplomas, digital document signing guarantees integrity and legal validity ; it's more secure than scanned images and doesn't expire. From an IT perspective, strengthen security with IDS/IPS, segmentation, offline backups, and robust MFA.
Passwords and managers: the first barrier
Ideal passwords are long and unique. Create memorable phrases using uppercase letters, lowercase letters, numbers, and symbols; for example, by combining an idea with an easy-to-remember detail. To avoid going crazy, use a password manager that generates and stores passwords for you.
Do not reuse passwords across services. Enable confirmations for suspicious logins, regularly review login activity, and change your password immediately if you suspect a breach.
Two-factor authentication (2FA): essential reinforcement
Two-factor authentication (2FA) adds a second step to the login process, so even if someone steals your password, they can't log in without that code. It's preferable to use authenticator apps (Google Authenticator, Authy, Microsoft Authenticator) rather than SMS.
Activate it in email, networks, storage, and apps in the center. Scan the QR code, save the recovery codes securely , and test that it works. If you change phones, migrate the tokens in advance to avoid being locked out.
Safe Browsing: Browser, Extensions, and Warning Signs
Check for a padlock icon and ensure the URL starts with https. Be wary of "clone" websites, spelling mistakes, and intrusive pop-ups. Don't download executable files indiscriminately, and verify the actual domain of each link before clicking. Signs of urgency and excessively generous gifts are often traps.
Using a modern browser helps. Microsoft Edge integrates Microsoft Defender SmartScreen, which scans pages, blocks malicious sites and dangerous downloads, and offers tracking prevention with Basic, Balanced, or Strict levels.
Complement your protection with extensions like uBlock Origin or AdBlock Plus to block ads and malware, and Privacy Badger to limit trackers and, where appropriate, force secure HTTPS connections on sites that support it. Always keep your extensions up to date.
Public Wi-Fi and VPN: Don't Take the Risk
In cafes or libraries, browse with caution. Avoid shopping or banking on open networks and disable automatic connections to known Wi-Fi networks. A reputable VPN (such as NordVPN, ExpressVPN, or CyberGhost) encrypts your traffic and makes it harder to intercept.
Delete old networks you no longer use and review the list of remembered devices. If you need to share your internet connection, use password-protected tethering and don't leave the device's real name visible.
Equipment updates and protection
Enable automatic system and app updates. Many attacks exploit vulnerabilities that have already been patched. An up-to-date antivirus (Norton, McAfee, Bitdefender, among others) and an enabled firewall are essential.
Also, take care of physical security: don't leave your laptop unattended in public, lock your session when you get up, and enable PIN/biometrics on your mobile device. In case of loss or theft, a good MDM system allows for remote wiping and certificate revocation.
Phishing, scams, and misinformation: learn to recognize them
Phishing attempts to trick you into visiting websites or sending messages that impersonate legitimate entities in order to steal your credentials. Be wary of implausible emergencies, magical prizes, or requests for sensitive information via email or messaging.
Do not open attachments or links from unknown senders, and if you have any doubts, contact them through official channels (phone or legitimate website) to verify. Never provide credentials via a link you receive; always type the address directly into your browser.
Furthermore, combat misinformation: verify sources, check reliable media outlets, and apply critical thinking. Fostering empathy and verifying information before sharing reduces misinformation within the educational community.
Families, minors and educators: each with their role
Families closely observe their children's relationship with technology. It is vital to agree on usage rules adapted to the child's maturity and the family's values: screen time limits, allowed apps, designated areas for screen use , and how to handle problems.
Parental controls—at home and in the classroom—are helpful when used wisely: time limits , age-based internet restrictions, download controls, and activity history monitoring. Transparency and open communication are just as important as the tool itself.
In Spain, INCIBE (through IS4K) promotes the safe and responsible use of the Internet by minors and offers the confidential and free 017 helpline to answer questions or ask for help with cybersecurity.
For teachers and schools, there are resources on data protection regulations and the processing of personal information: incorporating digital competence into the curriculum, offering regular talks and maintaining protocols for action against cyberbullying or sexting are key steps.
Classroom Tools: Secure Collaboration
In Microsoft 365 environments, Microsoft Teams offers a secure space for classes and tutorials: instructors can mute, moderate chat, remove intruders, and ensure that only class members connect. It's an environment with built-in classroom controls and customizable policies.
For families, Microsoft Family Safety goes beyond screen time: it provides insights into digital habits and, if the driving feature is activated, allows for monitoring safe behaviors without sharing data with insurers or intermediaries. The goal is trust through transparency , not blind control.
Checklist of minimums to start today
With all of the above in mind, here's a quick checklist to get you started. By checking each box, you'll have covered 80% of everyday risk with simple and effective measures, prioritizing those that most reduce exposure:
- Update system, apps, and browser; enable automatic updates.
- unique passwords with manager + 2FA by app, not by SMS if possible.
- Antivirus and firewall assets across all devices; copies to OneDrive.
- Privacy policy on social media: closed profiles, think before posting.
- Wi ‑ Fi secure (strong key) and VPN on public networks.
- E-mail with S/MIME/DMARC at its core; ICT policy and anti-harassment channel.
Online safety isn't about scaring people, but about normalizing good practices: keeping your software up to date, thinking before you share, strengthening your login credentials, and talking openly about what's happening online. With simple routines, the right tools, and a supportive and caring community , you can enjoy technology while keeping risks under control.
