Setting Up a Kid’s First Android Phone: The Complete Checklist

Handing a kid their first Android phone is less about the phone and more about the twenty minutes of setup you do before they touch it. Get that right and you’ve bought yourself years of fewer arguments. Get it wrong and you’ll be untangling a surprise in-app purchase bill or an unfiltered YouTube rabbit hole by the weekend.

The quick answer: Set the phone up yourself, on your own time, before you give it to them. Create a properly age-declared Google Account for the child rather than lying about their birth year, because the age determines which protections Google applies automatically. Link it to your account with Family Link so you can approve app installs. Turn on purchase authentication in the Play Store and remove or lock any saved payment method. Set Play Store content ratings to match their age, turn on YouTube’s restricted experience or use YouTube Kids, and enable Google Safe Search. Switch on location sharing both ways. Then, before you hand it over, agree out loud on where the phone sleeps at night and what happens if a stranger messages them.

Step 1: Decide what device you’re actually giving them

The hardware matters less than people think, but a few things do count.

Software support length. A phone that stops getting security updates in eighteen months is a phone you’ll replace in eighteen months. Budget Android handsets vary wildly here. Samsung’s A-series and Google’s Pixel A-series both commit to long update windows now, and that’s worth more than an extra camera.

Durability over specs. A cheap phone in a thick case with a glass screen protector survives a school year. An expensive phone in a slim case does not. Assume it will be dropped on concrete.

A hand-me-down is fine, with a caveat. If you’re passing down your old phone, factory reset it properly and set it up fresh under the child’s account rather than just deleting your apps. Half-migrated accounts are where the weird permission leftovers live. Our guide on moving everything to a new Android phone covers the clean way to shift your own data off it first.

Consider whether it needs a SIM at all. For a younger child, a Wi-Fi-only setup with messaging through the home network covers most of what they actually want to do, and it removes mobile data and premium-rate risk entirely. You can always add a SIM later.

Step 2: The account, and why the birth year matters

This is the step people get wrong most often. When you create the Google Account, enter the child’s real date of birth.

Google treats accounts differently depending on declared age. Under-13 accounts (the threshold varies by country. It’s higher in some EU states) must be supervised by a parent, get restricted ad personalisation, and have several features switched off by default. If you inflate the birth year to skip the hassle, you’re opting your child out of every one of those protections, and you’ll have a headache later when the account’s stated age doesn’t match reality.

Create the account from your own device, as a parent, so the supervision link is established at creation. You’ll be asked to verify you’re an adult, usually with a small card charge that’s refunded, or via an existing verified payment method.

What happens at 13: when the child reaches the age threshold for your country, they get the option to take full control of their account, and supervision ends unless they choose to keep it. That’s not a bug. It’s the deal. Plan for it. A 12-year-old who’s never had a conversation about why the restrictions exist will switch them all off on their birthday. A 12-year-old who understands them often doesn’t.

Step 3: Link it up with Family Link

Family Link is the supervision layer: it’s how you approve app installs, see screen time, set daily limits, and locate the device. Install it on your phone, add the child’s account to your family group, and follow the pairing flow on their device.

We’ve covered Family Link’s setup flow and its blind spots in a separate guide, so here I’ll keep it to the essentials: turn on app approval, set a bedtime schedule, and leave the daily limit generous at first. Over-restricting on day one is the fastest route to a kid who spends their energy finding workarounds instead of using the phone sensibly.

One thing worth knowing up front: Family Link controls Google’s ecosystem well and third-party apps unevenly. It can block an app from being installed. It cannot see inside a chat in a messaging app. Treat it as a gate, not a surveillance system, and don’t let it replace conversation.

Step 4: Lock down the Play Store

Two separate settings here, and both matter.

Content restrictions. In the Play Store, open the profile menu, go into Settings, then Family, then Parental controls. Turn them on, set a PIN that the child doesn’t know, and set maximum content ratings separately for apps and games, films, TV, and books. Set them to match the child’s actual age, then adjust when something reasonable gets blocked.

Purchase authentication. In the same Settings menu, under Authentication, set “Require authentication for purchases” to “For all purchases on this device.” This is the setting that prevents the classic four-hundred-pound gem pack incident. The default on many devices only asks every 30 minutes, which is plenty of time for damage.

Then go a step further: remove saved payment methods from the child’s account entirely. If they need to buy something, they ask, and with app approval on you’ll get the request anyway. If you want to give them spending freedom, load a Play gift card balance instead of attaching a card. A fixed pot that can’t be overdrawn teaches budgeting and caps your exposure.

Also turn off “Install unknown apps” permissions for every app, especially the browser and any file manager. Sideloading is how filters get bypassed, and there’s no legitimate reason a kid’s phone needs it enabled.

Step 5: Filter the web and YouTube

Web filtering on a phone is imperfect. Aim for “reduces accidental exposure,” not “impenetrable.”

SafeSearch. On supervised accounts you can lock SafeSearch to Filter from the parent side so it can’t be turned off in the browser. Do it, then check it stuck by searching from the child’s phone.

Chrome site restrictions. Family Link lets you choose between allowing all sites with filtering, or a strict allow-list of sites you approve individually. Allow-list mode is genuinely usable for under-10s and unbearable for teens. Pick according to age.

YouTube. This is the big one, and it deserves a deliberate choice. YouTube Kids is a separate app with a curated, age-banded catalogue and no comments: good for younger children, and you can restrict it to hand-picked channels only. Supervised YouTube on the main app gives you three content settings tied to age bands, and it keeps them out of comments and uploads. Whichever you pick, turn autoplay off. Autoplay is the mechanism that turns ten minutes into ninety.

Router-level filtering. A family-safe DNS service configured on your home router catches things on the home Wi-Fi regardless of device or browser. It’s a useful backstop, and it stops being useful the moment they’re on mobile data or a friend’s Wi-Fi, which is exactly why filtering alone isn’t a strategy.

Step 6: Location, contacts, and finding a lost phone

Turn on location sharing in both directions. Practically, you want to be able to see where the phone is when they’re late home. Emotionally, sharing your location back makes it a family norm rather than a surveillance measure, and kids notice the difference.

Set up Find My Device before the phone leaves the house, and check that it actually reports a location. A kid’s phone gets lost. Also make sure they know the phone’s screen lock, and that you know it too: agree on that openly rather than discovering it during an argument.

Add emergency contacts and medical info to the lock screen so a stranger who finds the phone (or a paramedic) can reach you without unlocking it. On most Android phones this lives under Safety & emergency in Settings. On Samsung’s One UI it’s the same place, with an extra Emergency SOS option that can send your location to chosen contacts when the side key is pressed several times. Pixels bundle Safety Check and car crash detection in the Personal Safety app. Xiaomi’s HyperOS has the emergency SOS settings under Safety & emergency too.

Turn on call and message spam filtering while you’re in there. Kids are prime targets for the “your parcel is held” and “hi mum, new number” scams, and the built-in filters catch a lot of it.

Step 7: The settings people forget

• Turn off ad personalisation in Settings, Privacy, Ads. Supervised accounts get less targeting anyway, but reset the advertising ID and opt out.
• Review app permissions after they’ve installed a few things. Check what has microphone, camera, and location. A drawing app doesn’t need contacts.
• Set a data limit and warning in Settings, Network & internet, so a video binge doesn’t eat the family allowance.
• Enable automatic updates for apps and system, over Wi-Fi only.
• Turn on Google Play Protect. It’s on by default, but confirm it.
• Set up Digital Wellbeing with a bedtime mode that greys the screen and silences notifications. Greyscale is oddly effective at making a phone boring.
• Trim the bloat that ships on budget phones. Disabling the promo apps and duplicate assistants a manufacturer preloads makes the device faster and quieter: several of the toggles in our roundup of hidden Android settings that speed up a phone apply here.
• Disable purchases inside the browser by not saving card details in Chrome autofill.

Step 8: The conversation, which matters more than the settings

Every control above is bypassable by a determined teenager with a friend’s phone and an afternoon. What isn’t bypassable is a kid who actually understands the risks. Have these conversations before the handover, not after an incident.

Strangers. “If someone you don’t know messages you, in any app or any game, tell me. You’re not in trouble.” Say that last part explicitly and mean it. The single biggest predictor of a child hiding a problem is fear of losing the phone.

Photos. Once a picture leaves your phone, you don’t control it. That covers sharing photos of themselves and photos of friends. Screenshots exist. Disappearing messages don’t really disappear.

Money. Nothing in a game is free if it asks for a card. Anyone offering free currency, skins, or codes wants something. If they’re asked to pay for anything, they ask you first.

Group chats. Being in a chat where someone’s being piled on isn’t neutral. Leaving is allowed. Telling an adult is allowed.

The rules of the house. Where does the phone charge overnight. Their room or the kitchen? Kitchen is the answer that improves sleep, and it’s much easier to establish on day one than to introduce in month six. Are phones out at meals? What happens if homework doesn’t get done? Write it down if that helps. A short agreement everyone signed beats a rule you invented mid-argument.

What you’ll check and what you won’t. Be honest. “I’ll see which apps you install and how long you’re on the phone. I’m not going to read your messages unless I’m worried about your safety.” Kids respect a stated boundary far more than a secret one they later discover.

Step 9: Plan the loosening

The setup that suits a nine-year-old will insult a thirteen-year-old. Decide in advance what earns more freedom: a term without incidents, showing you they handled something awkward well, hitting an age. Then actually loosen it. Controls that only ever tighten teach kids that honesty costs them, and they’ll route around you rather than come to you.

Diary a check-in every few months. Look at what they’ve actually installed, ask what they’re enjoying, adjust a limit that’s clearly too tight. Ten minutes of maintenance beats a confrontation.

FAQ

Should I lie about my child’s age when creating their Google Account?

No. The declared age is what triggers supervision, restricted ad targeting, and default-off features on the child’s account. Inflating it removes those protections and makes the account harder to manage properly later. Enter the real date of birth and let the platform apply the right defaults.

What happens to parental controls when my child turns 13?

At the age of consent in your country (13 in many places, higher in some) your child is given the option to take full control of their account. Supervision ends unless they choose to continue it. You can still set device-level or network-level rules, but the account-based supervision becomes their decision, which is why the groundwork conversations matter.

Can I stop my child installing apps entirely?

You can require your approval for every install and purchase through supervision, and you can restrict what’s even visible in the Play Store by content rating. What you can’t fully block is a determined workaround like using someone else’s device or a web version of a service. Turn off “install unknown apps” permissions to close the sideloading route, and treat the rest as a conversation.

Is a smartwatch a better first device than a phone?

For younger children, often yes. A kids’ smartwatch with calling and location covers the two things parents actually need, reachability and knowing where they are, without a browser, an app store, or social media. It also delays the whole screen-time negotiation by a year or two. The trade-off is that it won’t satisfy a child whose friends are all messaging each other.