Coming soon

The Kookabytes app is on its way.

Join the waitlist

Guide · Responsibility + Critical thinking

Kids’ first phone: a cyber-pro’s pre-handover checklist

What to set up, what to talk about, and what to forget — before you hand over a phone to a primary-school kid. No phone reviews, no age cut-offs.

  • Device setup
  • App-store controls
  • Screen time
  • Messaging safety
  • Location privacy
  • Photo privacy
  • Passwords
  • Scam awareness
  • AI voice scams
  • Family agreement
7-min read45-min job
Tilly the wombat seated at the kitchen table holding her first smartphone, with Mum and Dad watching warmly. The phone screen shows the Kookabytes mascot, oriented right-way-up from Tilly's perspective.

When is my kid ready for a phone?

Wrong question. The right question: what do they do when something on a screen makes them uncomfortable and you’re not in the room. Age tells you nothing about that. A switched-on Year 4 can be readier than a switched-out Year 7.

Here’s the readiness shortlist I use in my own house — none of it about how old they are.

  • The handover reflex

    When something weird happens on a screen they tell a trusted adult inside ten minutes — without being asked.

    If not yet:More conversations. Don't drill them; just notice + name when they DO tell you, so the reflex grows.
  • Names the yuck feeling

    Can articulate WHY a popup, message, or video felt wrong. "That ad asked for my password."

    If not yet:Watch and discuss real examples together (Scamwatch screenshots, recent ads). Build the vocabulary first.
  • Copes with a no

    "No, you can't install that" doesn't turn into a 40-minute meltdown today.

    If not yet:The phone will turn it into a four-hour one. Work on the no-handling muscle for a few months first.
  • Charging happens outside the bedroom

    You've already got an established habit of devices charging in the kitchen / hallway overnight.

    If not yet:Set this up with the iPad / shared family device first. Easier to import the habit than impose it.

For full disclosure: my older kid didn’t get a phone until late Grade 6, and the two-year debate that preceded it was the most useful cyber-safety lesson she got. The waiting was the lesson.

The 11-item pre-handover checklist

Three phases. Eleven steps. About 45 minutes start to finish. Coffee helps.

  1. Set the lock screen together — and don't memorise the PIN for them

    Six-digit PIN minimum. Bio-unlock (Face ID or fingerprint) on top. Sit next to them and let them pick the PIN themselves. If you set it, they'll ask you to unlock it forever — and you've trained them out of the habit you wanted: that the device is theirs to defend.

  2. Turn on app-store approval before anything else

    Apple Family Sharing (Ask to Buy) on iPhone, Google Family Link on Android. Every install — free or paid — pings your phone first. This one setting kills most of the "Mum, why is there a strange app on my phone?" conversations.

      iOS Android
    Feature nameFamily Sharing → Ask to BuyGoogle Family Link
    Setup pathSettings → Family → Add Member → Ask to BuyFamily Link app → Add child → Approve installs
    Approval prompt arrives onFamily organiser's iPhone (push notification)Parent's phone in the Family Link app
    Covers free apps tooYes (every install requires a tap)Yes (and in-app purchases)
    Daily-driver tipPin the Family widget to your home screen so approvals are one tap.Enable notifications for Family Link or you'll miss prompts.
  3. Set screen-time limits, then forget the headline number

    Hours don't matter much. App-category limits do. Cap social and video to a number you agree on, leave creative apps and reading uncapped, hard downtime across the school night. The argument is never "two hours is enough" — it's "phone goes in the kitchen at 7".

  4. Decide the four-app rule before the phone is in their hand

    Pick the chat apps you allow, discuss, and rule out for now. A common Grade 6 start: allow iMessage / Google Messages, discuss WhatsApp and Discord (only if friends are already there), block TikTok DMs and Snapchat. Write it down. "We made our list" is a complete answer when a friend's parent said yes.

    • iMessage / Google Messages

      Allow

      Carrier-tied, no friend-graph creep, blocking is simple, you can read it from the family iPad.

    • WhatsApp

      Discuss

      Group dynamics get heavy fast in Year 5/6. OK if a small known friend group is already there + group settings locked.

    • Discord

      Discuss

      Server-by-server review. Allow only specific servers (school chess club, scouts) — never general public servers.

    • TikTok DMs

      Not yet

      DM moderation is the worst in the category and AI-voice-clone source material is one TikTok post away.

    • Snapchat

      Not yet

      Disappearing messages + Snap Maps + the 'best friends' ranking — three of the worst incentives stacked together.

    • Email

      Allow

      Yes, really. A boring email account they own + manage is excellent password-discipline practice.

  5. Back up their contacts to your account — not theirs

    Add contacts together: family, two trusted adults outside the family (godparent, aunty, the neighbour), school office, Kids Helpline (1800 55 1800). Sync to a shared family account, not their personal cloud. If the phone is lost or wiped, you still have the list.

  6. Turn off precise location for every app except Find My / Find Device

    iOS lets you grant "approximate" location to apps that genuinely need it (weather, maps). Snap Maps and similar live-location features off by default. Find My / Find Device on, shared with both parents.

  7. Make the photo roll less of a liability

    Auto-backup to a family-controlled cloud, not a personal one. Shared albums off by default. Have the conversation about what doesn't get photographed — uniforms with school crests, the inside of the house, anyone else's kid. The eSafety Commissioner has clear guidance on image-based harm; bookmark it.

  8. Install one password manager — and put your password in it

    1Password, Bitwarden, iCloud Keychain or Google Password Manager — pick one. Their accounts get unique long passwords (the manager generates them), and you have the master password too. The pair-with-a-trusted-adult password reflex from primary school carries straight in.

  9. Walk through what a scam pop-up looks like, on this device

    Open the browser together. On the first dodgy ad or fake-virus pop-up, freeze and say: "This is the thing I told you about. We close it, we don't tap it, and we tell." One demo beats ten lectures. ACCC Scamwatch keeps a running list of current scams if you want fresh examples.

  10. Agree the safe word — out loud, today

    AI voice clones now sound like a family member after thirty seconds of TikTok audio. Pick a word the family uses if anyone calls or messages asking for money, codes, or a pickup. "If they can't say the word, hang up and ring me direct." Do it before the phone goes home.

  11. Sign the visiting-rights agreement

    Not a contract. A short list on paper: this phone is yours to use, ours to look at when we ask. We won't read every message. We will check the apps. If something feels off, we talk first. Both sign it, stick it on the fridge. The handover ceremony matters — it's the first thing they own that the rest of the world can reach into.

The first conversation, on day one

The phone goes on the table between you. Not in their hand yet. The conversation is short, three things, in plain words.

  1. One

    Money, codes, passwords

    Even if it sounds like me. Stop, ring me on another phone. Our safe word is the test.

  2. Two

    Yuck-feeling = tell

    Don't work out why — tell. Won't be in trouble. Even if you tapped the thing.

  3. Three

    It's yours, and a window

    Sometimes I'll ask to look. You don't need to be ready, you just need to hand it over.

That’s the speech. They’ll forget two-thirds by Friday. Fine — you’ll have it again, and the version that sticks is the fifth re-tell.

What to skip (so you can focus on what matters)

Most of the parental-control market is theatre. Two columns: the rabbit hole and the move that actually pays off.

  • Third-party monitoring apps

    Built-in Family Sharing / Family Link first. Outgrow them in Year 8, not Year 5.

  • Keystroke loggers

    If you don't trust them with the device, they aren't ready for it. Have the readiness conversation, not the surveillance one.

  • The exact screen-time number

    Pick a daily window (e.g. 30 min after homework, none at dinner). Hold the window, ignore the headline minutes.

  • Reading every message

    Spot-check + ask questions + make it normal. Reading everything trains the wrong reflex (the second-app workaround).

If you only do three things…

Run out of weekend? Pick these three and do the rest next week:

  1. Priority 1

    App-store approval ON

    Apple Ask to Buy or Google Family Link. One setting, biggest payoff in the whole list.

  2. Priority 2

    Safe word agreed

    Today, out loud, drilled at the dinner table. Then you've got it the day you actually need it.

  3. Priority 3

    Hand it over with the sentence

    Not what to do to be perfect — what to do when they're not. The only sentence that matters.

Bookmark these (Australian + official)

The four official-source pages worth keeping in your phone’s bookmarks alongside this guide:

Three Australian resources worth bookmarking

None of them will sell you a phone.

When the phone goes home

Get the reflex set before the phone is.

Native iOS and Android — get on the early-access list and we’ll send the link the day it goes live.

Last reviewed: 5 May 2026by Clinton McKillop, founder + author. We re-check every guide quarterly against the AU eSafety + scam-watch landscape and update where it’s changed.

Coming soon

Kooka knows. The app's coming. Want in?

The guides are free reading right now. The Kookabytes app drops soon — join the waitlist and we'll email when your kid can play through the same threats they just read about.

Coming soon · Sydney-hosted · join the waitlist

Kooka, the wise narrator
Gabs, asking the questions