How do I teach online safety and cybersecurity?

Teaching answer ยท Online safety

How do I teach online safety and cybersecurity?

Short answer: Teach online safety by pairing the technical habits with the social ones: strong passphrases, multi-factor authentication and spotting phishing, alongside privacy settings, digital footprint and knowing exactly who to tell when something goes wrong. Use short, realistic scenarios rather than lists of rules, and revisit them across the year instead of in one assembly.
Passwords and MFAPhishing scamsDigital footprintReporting routes

Resources that fit

Middle school digital safety and CS units

Computer science and digital literacy units covering security, data and responsible use; tap any cover for the full preview, contents and price.

Step by step

How to teach it in the classroom

  1. Start with an account they care aboutAudit the privacy settings on a game or social app together, so the lesson lands on something students genuinely use.
  2. Make passphrases physicalHave students build a four-word passphrase, then compare guess times as a class before you introduce multi-factor authentication.
  3. Run a phishing sortGive pairs six messages, real and fake, and ask them to justify each call using sender, urgency and link clues.
  4. Rehearse the reporting routeName the trusted adult, the in-app report button and the school process, then have students say the steps back.

What's covered

What is in each unit

You get the discussion material and the written work together, which matters for a topic that easily drifts into talk alone.

  • Scenario worksheets on four levels
  • Editable slide deck
  • Answer keys and model responses
  • Lesson plan with timings
  • Printable and digital versions

Make it work for everyone

Differentiation and checking it stuck

Reading level varies enormously in a middle school class, and a phishing email is a reading task before it is a security task. The lower tiers shorten the message and flag the clue words while the upper tiers hand over an unedited example. Ask for a written justification instead of a circled answer so you can see the reasoning.

Good to know

Frequently asked questions

How does this fit our CIPA obligation?

Schools taking E-rate funding must educate students about appropriate online behavior, including interacting on social networking sites and cyberbullying awareness. A taught unit with student work is far stronger evidence of that than a filtering log. Keep the completed scenario tasks: they show the instruction happened and what students concluded.

Where does this sit against the CSTA standards?

The material is written to the concepts the middle school networks and internet standards cover, such as explaining how physical and digital security measures protect information, and modeling simple encryption. It carries no badge from CSTA. Because the files are editable you can add the standard number your department tracks before printing.

What do I do if a student discloses something serious?

Stop teaching and follow your district's mandated reporter process immediately; that is not something to improvise mid-lesson. Tell students beforehand that you cannot promise confidentiality, so nobody feels tricked. Make sure they also know the platform report button and, in the United States, the NCMEC CyberTipline.

Teach it properly, not as an assembly

One download gives you a sequence students actually remember.

Browse online safety units โ†’