How to Explain Online Safety to Grandparents (Without Talking Down)

Why Most Online Safety Conversations Fail

If you've ever tried to explain phishing to a 75-year-old and watched their eyes glaze over, you're not alone. Most online safety conversations fail for three reasons:

• Too much jargon: Words like "phishing," "malware," "two-factor authentication," and "VPN" mean nothing to someone who just learned to use email
• Condescending tone: Nobody — especially someone who ran a household or business for 50 years — wants to be talked to like a child
• Abstract threats: Saying "hackers can steal your data" is meaningless without concrete, relatable examples

The AARP consistently finds that seniors are more receptive to safety advice when it comes from a place of shared concern rather than authority. You're not their teacher — you're their partner in staying safe.

Use Real-World Analogies They Already Understand

The key to explaining online safety to grandparents is connecting digital concepts to physical ones they already know:

• Phishing emails = fake letters in the mail: "Remember when people used to send fake letters pretending to be the bank? Same thing happens with email now. If an email asks you to click a link and enter your password, it's like someone sliding a fake form under your door."
• Strong passwords = house keys: "Using the same password everywhere is like having one key that opens your house, your car, and your safe deposit box. If someone copies that key, they get into everything."
• Software updates = home maintenance: "You know how you fix a broken lock on the door right away? Software updates fix broken locks on your computer."
• Suspicious links = strangers at the door: "You wouldn't let a stranger into your house just because they knocked. Don't click on links from people you don't know."

These analogies work because they map new concepts onto existing knowledge. Your grandparent doesn't need to understand TCP/IP — they need to understand that the same caution they use in the physical world applies online.

The Three Rules That Cover 90% of Threats

Don't overwhelm them with a 20-point security checklist. Instead, focus on three rules that prevent the vast majority of online scams:

Rule 1: Never click links in emails or texts asking you to log in or pay something. Instead, open your browser and go directly to the website yourself. This single rule defeats almost every phishing attack.

Rule 2: No legitimate company will ever call you and ask for your password, Social Security number, or remote access to your computer. If someone calls asking for these things, hang up. It doesn't matter how official they sound.

Rule 3: If something feels urgent or scary, stop and call me first. Scams work by creating panic. The antidote to panic is a phone call to someone you trust.

Write these three rules on a card and put it next to their computer. Laminate it. Stick it on the fridge. The simpler the rules, the more likely they are to be followed when it matters.

How to Have the Conversation Without Causing Shame

The biggest barrier to online safety isn't technical — it's emotional. Many seniors feel embarrassed about not understanding technology, and bringing up scams can feel like an accusation that they're gullible.

Here's how to frame the conversation:

1. Start with "I" not "you": "I've been reading about these really convincing scams and honestly, some of them would fool me too" — not "You need to be careful because you could get scammed"
2. Share your own close calls: "I almost clicked a fake Amazon email last week" normalizes the experience and removes shame
3. Make it about the scammers, not the victim: "These criminals are professionals — they run call centers and spend millions making their scams look real. It's not about being smart or dumb, it's about knowing their tricks"
4. Offer to be their tech buddy: "Any time something feels off, just call me. I'd rather you call me 100 times about nothing than miss the one time it matters"

This approach preserves dignity while building a safety net. Your grandparent is far more likely to call you about a suspicious email if they don't feel stupid for asking.

Setting Up Simple Safety Tools Together

After the conversation, offer to set up protection together — not for them, but with them. This preserves their sense of agency while ensuring critical safeguards are in place:

• Install GrannySafe: It runs silently in the background and blocks scam websites automatically. They won't need to do anything — it just works.
• Set up a password manager: Something simple like the built-in browser password manager. Show them how it auto-fills passwords so they don't reuse the same one.
• Turn on automatic updates: On both their computer and phone. Updates fix security holes that scammers exploit.
• Enable spam filtering: Most email providers have this on by default, but verify it's active.

Do this as an activity together, not a task you perform on their device while they watch. Involvement builds confidence and makes them more likely to notice when something seems wrong.

For more practical guidance, read our complete safe browsing setup guide and our advice on having the digital safety talk with aging parents.

Frequently Asked Questions