All family devices are on the latest operating systemCritical
Why it matters: Updates patch security holes that scammers actively exploit.
Every device has a strong screen lock
Why it matters: Stops casual access to messages, photos and saved logins.
Devices are encrypted (default on modern iOS/Android)
Why it matters: Protects data if a device is lost or stolen.
Important devices back up automatically
Why it matters: Ransomware or loss becomes recoverable.
Find-my-device / lost mode is enabled
Why it matters: You can locate, lock or wipe a lost device remotely.

Account Protection

Two-factor authentication on the main email accountCritical
Why it matters: Email resets everything else — it must be the strongest link.
The family uses a password manager
Why it matters: Long, unique passwords for every account — without memorising them.
No passwords are reused across sites
Why it matters: One leak elsewhere means every reused account is at risk.
Recovery email and phone are up to date
Why it matters: Losing access to recovery is how accounts are lost forever.
Active sessions have been reviewed in the last 3 months
Why it matters: Old signed-in devices are a common takeover route.

Privacy

Children's profiles are private, not publicCritical
Why it matters: Public profiles are the first step in most grooming approaches.
Location sharing is off, or limited to close family
Why it matters: Snap Map, Find My and Instagram can leak real-time location.
Camera / microphone permissions are reviewed per app
Why it matters: Many apps request access they don't need.
Search visibility & 'suggest me' features are limited
Why it matters: Reduces cold contact from strangers.

Home Network

The router admin password has been changed from the default
Why it matters: Default router passwords are public and widely scanned.
The router firmware is up to date
Why it matters: Router flaws let attackers see and redirect traffic.
A guest Wi-Fi network is used for visitors and IoT devices
Why it matters: Isolates smart bulbs, TVs and guests from family devices.

Social Engineering

The family knows never to click login links from messages
Why it matters: Type the site directly — never trust a link from an unexpected message.
The family knows to never share security codes — with anyone
Why it matters: 'From your bank', 'from Instagram support' — always a scam.
The family has talked about AI voice / video scams
Why it matters: Cloned voices are used to trick relatives into sending money.

Overall score

0 of 20 actions

Your family has started its safety journey.

Critical actions

All family devices are on the latest operating system
Updates patch security holes that scammers actively exploit.
Two-factor authentication on the main email account
Email resets everything else — it must be the strongest link.
Children's profiles are private, not public
Public profiles are the first step in most grooming approaches.

Easy wins

Helping Keep Children Safer Online. Protect · Educate · Empower.

Project OWL identifies possible warning signs. It does not determine guilt and does not replace police or safeguarding professionals.

Get help

Protect

Learn

Trust

Fictional demonstration data throughout. UK-focused. English & Welsh coming soon.