Does a kid need email?

For the first school-issued Chromebook, an Apple ID, a Roblox account, or almost any online service at age 8+, yes — a kid needs an email address. The question is which one, and how to supervise it.

Gmail for kids (supervised Google account)

  1. On your parent phone, open Family Link and add a child.
  2. Google walks you through creating a supervised Gmail address.
  3. The address is real Gmail — they can send and receive email.
  4. Parent controls: you approve Play Store apps, set content filters, review activity.
  5. You can read their inbox only on their device; Google does not expose the inbox to parent dashboards.

Apple Mail (with child Apple ID)

  1. Child Apple ID gives @icloud.com email access (via Mail app).
  2. Under Screen Time › Communication Limits, set who can email your kid (contacts only).
  3. Apple Mail supports Hide My Email for iCloud+ subscribers — useful for signing up for non-essential services without exposing the real email.

Microsoft Outlook (family)

  1. Microsoft Family Safety › add child › they get an @outlook.com address.
  2. Microsoft Family Safety email reports summarize what came in.

Kid-specific email services

A few services (Tocomail, Zilladog) offer fully supervised inboxes where the parent approves every sender. These are useful for under-10s who need email only for a few specific purposes (school, Roblox). Limited ongoing value once the kid is 11+.

What to set up on any kid email

  • Two-step verification (see our 2FA guide).
  • Parent email as the recovery address.
  • Spam filter at max.
  • Contacts-only rule if the service supports it.
  • Teach the kid: don’t click email links; go to the app directly.

Common scams on kid email

  • Fake “Roblox / Epic / Minecraft account locked” emails — phishing. Don’t click.
  • “Your package is held” — smishing’s email cousin.
  • Fake “teacher / school” emails from unfamiliar domains.

Rule of thumb: if an email asks the kid to click a link and type a password, it’s almost always a scam. Type the site’s URL into the browser instead.