Most families know they should do something about their elderly parent's online safety, but never quite get around to a systematic review. A scammer doesn't wait for the perfect moment. This checklist gives you a concrete, structured way to work through every major risk area in one focused session with your parent. Print it, bring it to their next visit, and check off each item together.
The goal isn't perfection — it's meaningful improvement across the areas that matter most. Even completing half of this list will substantially reduce your parent's exposure to fraud.
Section 1: Browser and Device Security
GrannySafe installed on ChromeThe single highest-impact step you can take. GrannySafe analyzes every website in real time and alerts your parent before they interact with known scam sites, phishing pages, or suspicious domains. Install it from the Chrome Web Store in under two minutes.
Chrome updated to latest versionOutdated browsers contain known security vulnerabilities that scammers actively exploit. Open Chrome, click the three-dot menu, go to Help, then About Google Chrome — it will update automatically if needed.
Enhanced Safe Browsing enabledIn Chrome settings, go to Privacy and Security, then Security, and select Enhanced Protection. This provides proactive protection against phishing and malware beyond the standard setting.
Pop-up blocker confirmed onPop-up windows are a primary delivery mechanism for fake tech support alerts and virus warnings. Verify this is enabled in Chrome's settings under Privacy and Security, then Site Settings, then Pop-ups and redirects.
Suspicious extensions removedOpen Chrome's extension manager (three-dot menu, Extensions, Manage Extensions) and review every installed extension. Remove anything your parent doesn't recognize or actively use — malicious extensions can monitor browsing and steal login credentials.
Section 2: Accounts and Passwords
Unique password for email accountEmail is the master key to every other account. If a scammer gets into email, they can reset every other password. The email password should be unique — not reused from any other site.
Unique password for online bankingSimilarly, the bank password must not be shared with any other service. If your parent has used the same password for years and on multiple sites, now is the time to change it.
Two-factor authentication on emailEnable 2FA on Gmail, Yahoo Mail, or whatever email service your parent uses. This means even if a scammer gets the password, they still can't access the account without the phone code.
Two-factor authentication on bankMost banks offer text-message verification for logins. Enable this in the bank's security settings or by calling the bank's customer service line.
Password manager set up and in useA password manager like Bitwarden (free) or 1Password generates and stores strong unique passwords so your parent never needs to remember them. Set it up together and save the master password somewhere physically secure.
Section 3: Financial Safety
Bank transaction alerts enabledLog into the bank account and set up text or email alerts for every transaction above a low threshold (such as $50). This creates an early warning system if any unauthorized charges occur.
Trusted contact registered at bankMany banks now offer a "trusted contact" program where a family member can be alerted if suspicious activity is detected. Ask your parent's bank about this option — it takes five minutes to set up.
Credit monitoring activeFree credit monitoring is available through AnnualCreditReport.com and many banks. Enable it so any new accounts opened in your parent's name trigger an immediate alert.
Section 4: Social Media Privacy
Facebook privacy settings reviewedGo to Facebook's Privacy Settings and review who can see your parent's posts, friend list, and profile information. Set these to "Friends" rather than "Public" wherever possible.
No personal info in public profileRemove phone numbers, home addresses, and birth years from the public-facing profile. Scammers harvest this information to make targeted calls and impersonation attempts more convincing.
Friend request policy discussedAgree together that your parent will not accept friend requests from people they don't personally know in real life, and will check with family before accepting requests from accounts claiming to be relatives.
Section 5: Phone Safety
Scam call blocking enabledEnable the carrier's built-in robocall blocking (AT&T ActiveArmor, T-Mobile Scam Shield, Verizon Call Filter) or install a third-party app like Nomorobo. This reduces the volume of scam calls reaching your parent.
"Never give payment over phone" rule establishedHave an explicit conversation and reach a verbal agreement: no matter who calls — IRS, Social Security, Medicare, grandchild — your parent will never provide gift card numbers, wire transfer details, or bank information over the phone. Legitimate agencies never demand immediate payment this way.
Section 6: Family Safety Network
Monthly digital check-in scheduledPut a recurring monthly call or visit on the calendar specifically to review any concerning emails, websites, or phone calls your parent has encountered. Regularity matters — it becomes a habit for your parent to save questions rather than act impulsively.
Emergency code word agreed uponEstablish a family code word that confirms the identity of someone claiming to be a family member in distress. If someone calls saying a grandchild is in jail and needs money immediately, the code word confirms whether it's actually them.
Trusted contact list written down physicallyWrite down the names and phone numbers of two or three trusted people (family or friends) your parent should contact before taking any online financial action they're uncertain about. Post this list near the computer.
How to Use This Checklist
Print this page before your next visit with your parent. Plan for about two hours to work through everything together — don't rush. If your parent is resistant or feels like you're taking over, reframe it as something you're doing together: "I'm updating my own settings too, let's go through this side by side."
Prioritize the items in order of impact if you can't complete everything in one session. GrannySafe installation, unique passwords for email and banking, and bank transaction alerts are the three highest-leverage changes you can make. Everything else provides additional layers of protection on top of that foundation.
For more guidance on the conversation itself, see our article on how adult children can protect parents online. For browser-specific guidance, read our complete guide to safe browsing for elderly parents.
The best security setup is one your parent will actually use. Focus on making each change feel natural and non-threatening rather than forcing every item in a single exhausting session.
Revisit this checklist every six months. Technology changes, new threats emerge, and your parent's digital life evolves. A twice-yearly audit keeps protections current and gives you a regular touchpoint for open conversations about online safety.
Protect your parents today
GrannySafe automatically detects scams before your loved ones fall victim. Install in under 2 minutes — free for 7 days.
Install GrannySafe Free →