Before the Console Goes Under the Tree: A Privacy Pass for PS5, Xbox and Switch

A games console under the Christmas tree is, in every way that matters, a computer with a controller attached. It has an account, a store, a chat system, a camera-free way for strangers to reach your child, and a payment method that will happily remember your card for years. The box doesn't say any of that. It says '4K' and '120 frames per second'.

The good news: all three major consoles now have genuinely decent parental controls, and none of them take longer than about forty minutes to set up properly. What follows is the order I'd do it in — and, more usefully, what each setting actually changes.

Do the account bit first, before the wrapping paper

Set up the child's account yourself, on a device you control, before the console is opened. Two reasons: the first account created on a console usually becomes the 'home' account with the loosest permissions, and account recovery details are far harder to fix later.

Use a proper child account, not your own. On PlayStation that means a child account linked to a family manager. On Xbox it's a child account inside a Microsoft Family group. On Nintendo it's a child account linked to yours through the Nintendo Switch Parental Controls app. All three give you a dashboard to change things remotely, which matters more than you'd think once the console lives in a bedroom.

Use an email address you control. Not theirs.

PlayStation 5

In Settings → Users and Accounts → Family Management, you'll find the controls that matter.

Communication and User-Generated Content is the one to change first. Set messages, friend requests and party invites to 'No One' or 'Friends Only'. This single setting cuts off most of the unpleasantness, because it stops strangers being able to open a chat with your child at all.

Who can see your real name and profile picture — set to Friends. A PSN ID often contains a first name and a birth year, which is worth fixing before anything else.

Spending limits and wallet password — require the password at checkout. Every time. There's a reason 'my son spent £400 on in-game currency' is practically a genre of local news story.

Playtime and age restrictions — set a monthly play limit if you want one, and check the age rating on the account, which filters the store and some in-game content.

Xbox

Xbox hides its best controls in the Xbox Family Settings app on your phone, not on the console. Once your child's account sits in your Microsoft Family group, the app lets you set screen time, spending limits and content filters from anywhere — far easier than navigating console menus with a controller while someone sighs behind you.

Under Privacy & online safety, the useful defaults are: 'You can join multiplayer games' set to Friends Only or Block, 'Others can communicate with voice, text or invites' set to Friends, and 'You can see and upload community creations' set to Friends. That last one is easy to forget, and it's how a fair amount of inappropriate content reaches kids.

Turn on Ask a parent for purchases. Then set a spending limit on the Microsoft account so a saved card can't be drained.

Nintendo Switch

Nintendo's defaults are the friendliest of the three and the least commented on. The Nintendo Switch Parental Controls app pairs with the console and lets you set play-time limits, restrict games by age rating and — crucially — control Posting to Social Media and Playing with Others.

If your child doesn't need to play with strangers, set 'Playing with Others' to Restrict. That blocks online play and friend-related features across the board. If they do need it, cut friend requests down to 'Friends of Friends' or turn them off entirely; the friend request system is a known route for odd messages.

Also check the eShop purchase restrictions in the console's own settings and require a password.

Voice chat is where most of the trouble arrives

For all three consoles, the headset is the front door. Game chat with strangers is where grooming, abuse and the kind of 'banter' that isn't banter actually happen — and no filter catches all of it.

Family settings can shut down party chat with non-friends, but they can't referee a match of something competitive with twenty people in it. If your child is young, keep the headset for friends only. If they're older, sit in on a session and hear what the chat is actually like. The rule I'd suggest: they can talk to people they know in real life, and anyone else can wait.

The money question

Every console will happily store a card. None of them will remind you it's there.

Use a prepaid card or store credit for the child's account rather than your main debit card. Require a password for every purchase. Turn off one-click buying. And check the subscriptions list — a 'free trial' of an online service that quietly converts to £50 a year is a very standard way for a tight January to get tighter.

Scam messages aimed at younger players

Kids get targeted because they're helpful and they don't yet know what a normal business conversation looks like. The current crop looks like this: someone offering free in-game currency if your child 'just logs into this site'; a message claiming their account will be banned unless they verify it; a fake moderator asking for login details; and a 'friend' whose account has actually been taken over asking for a loan of digital items.

Worth saying out loud at the kitchen table: nobody legitimate will ever ask for your password, and free currency is always a trade for something.

If something has gone wrong, in the UK

• CEOP (ceop.police.uk) if there's any concern about sexual contact or grooming.
• Report Remove, run by Childline and the Internet Watch Foundation, for getting an intimate image taken down.
• Childline on 0800 1111, free and confidential, for the child themselves.
• NSPCC on 0808 800 5000 for advice for the adult.
• Action Fraud at actionfraud.police.uk if money has been taken.
• Internet Matters for step-by-step console guides that stay reasonably current.

The two-hour checklist

Accounts created by you, with your email. Friend requests and messages restricted to friends. Real name hidden. Purchases behind a password. Headset for known friends only. Age rating set. Remote control app installed on your phone. One honest conversation about passwords and free currency.

That's the whole job. Two hours now saves an awful lot of January.