Permission first
Testing is acceptable only on systems the learner owns, is assigned in a lab, or has explicit permission to use.
Safety promise
Powerful skills need clear boundaries.
Ethical Hacker for Kids is built around legal practice, respect for privacy, parent trust, and age-appropriate learning. The goal is defense, awareness, and career discovery — not unauthorized hacking.
Privacy matters
The program does not normalize snooping, impersonation, credential theft, doxxing, or “just trying things” on real people.
Safe labs only
Practice uses toy examples, diagrams, CTF-style puzzles, and deliberately controlled learning environments.
Parent note:
Children can learn cybersecurity safely when curiosity is separated from misuse. This site intentionally avoids operational attack instructions and frames sensitive topics through defense, ethics, and supervised lab learning.
Practical rules
- No testing accounts, websites, networks, devices, school systems, or games without authorization.
- No collecting, guessing, sharing, or storing other people’s passwords or private information.
- No real malware, phishing campaigns, persistence, evasion, or stealth techniques for minors.
- Every attack concept is paired with prevention, detection, and recovery.
- When in doubt, stop and ask an adult or instructor.
Sensitive topics
How advanced topics are handled.
Advanced words can be introduced responsibly when they are clearly bounded and age-aware.
Penetration testing
Presented as a professional, authorized workflow: scope, permission, observation, documentation, and reporting. No real targets. No bypassing third-party systems.
Malware literacy
Handled through concepts, diagrams, defensive behavior analysis, and toy examples. The goal is to understand infection paths and protection, not to run or build malware.
OSINT & privacy
Focused on personal footprint awareness, privacy settings, metadata, impersonation risks, and safe research boundaries.
AI deception
Kids and parents learn to recognize synthetic media, fake support messages, suspicious urgency, and social engineering boosted by AI tools.