Considering purchasing a Chromebook? Or are you looking for instructions on setting it up to be cyber-safe?
Written by Tech Expert:
Chromebooks are an affordable computing device geared towards schools and learning however they are also becoming increasingly popular in business and with parents.
When they were launched, Chromebooks essentially just ran Google’s Chrome browser. This meant all you could do on them was connect to the internet and access websites.
Things have moved on a lot since then. Now you can run Microsoft Office apps, access app stores inside Chrome browsers, and Google is also making Android apps available on Chromebooks, making them an incredibly flexible (albeit increasingly complex to understand) platform.
From a cyber safety perspective the key difference you should remember is this:
On computers apps are installed on the device.
On Chromebooks apps are installed for the user.
This is why Google requires Google Accounts for all Chromebook users. With computers, apps are installed on the device, and are therefore typically available to all users of the device.
If considering a Chromebook you will need to take steps to make your child’s Google account and their Chromebook safe.
This depends on the reasons you’re buying the device, however, if cyber safety is your key concern, here are our thoughts:
Chromebooks are a very good platform in terms of cyber safety for school device programs. Google allows these devices to be cloud-managed, allowing easy deployment of cyber safety features and robust management of the device and their users.
Chromebooks create some challenges for parents when their child is under 14. Google requires users of their devices to be registered with Google (email) accounts. If a user is under 14, then Google imposes their parental control suite called Family Link. This works for some families, but it is complex and has some limitations.
On balance, provided you set it up properly, Chromebooks are a cyber-safe choice for users under 14.
Once your child turns 14 Google lets them take control of their own Google account and therefore what they can access and do on the internet and on a Chromebook.
From this age you can install Family Zone onto your child’s Google account (via the Chrome Web Store), however, they have the right to remove it. You can also disable guest account access on your Chromebooks; however, Google permits factory resets (Powerwash) which can undo it.
On balance, in our view Chromebooks are too difficult to make safe for children aged over 14 and you should consider another platform.
Chromebooks are very popular with schools because they’re affordable, offer great features to collaborate and allow school IT departments to “manage” them.
In this context “management” means the school can remotely configure safety settings such as enforcing the use of Family Zone in the child’s school Google account and restricting who can use the device.
When you sign in to a managed Chromebook, some features are already set up such as apps, printers and who can use the device.
To check if your Chromebook is managed by a school:
Go to the status area where your account picture appears.
Look for the managed device icon .
If you see this icon , the device is managed.
When schools create Google/email accounts for students they can choose to enable admin rights to them. This is called ‘management’. A managed Google account will have policies applied such as pre-loaded apps (e.g. filters like Family Zone).
If your Google account is managed, you'll see a list of policies when you type "about:policy" in the Chrome browser address bar.
If your Google account isn't being managed, and you go to about:policy, you'll see "No policies set."
Typically schools will restrict who can use their Chromebooks to students or staff at the school. If this is the case, neither you or your child will be able to sign into the Chromebook with personal Google accounts.
If the school device you are using does permit you to sign in using a personal Google account or a guest account then there is a risk that your child may create their own personal Google account and use this to bypass the filters.
In these circumstances we suggest you speak to your child’s school (or ask them to speak to us) about the settings they apply on their Chromebooks.
If your child’s Chromebook was purchased by you or as part of a school BYO program then it’s likely unmanaged.
Here’s how you go about setting it up to be cyber-safe.
To check if your Chromebook is not managed by a school:
If you DO NOT see this icon , then the device is not managed.
Your next job is to ensure you’re the owner of the device. Owners have the admin rights to control the device.
The first person who signs in to a Chromebook is set as the device owner.
If someone (such as your child) has already signed into the Chromebook then you need to start again. Here’s how:
Sign out of the Chromebook.
Press and hold Ctrl + Alt + Shift + R.
In the box that appears, select Powerwash > Continue.
Follow the steps that appear and, once the Powerwash is complete, sign in with your Google account. You will now be set up as the owner.
Once you've reset your Chromebook follow the on-screen instructions to set up your Chromebook.
We recommend you don’t do this because:
If your child is under 14, you will need to create a Family Link account with Google and these accounts don’t work well with school accounts.
If your child is over 14, then their Google account gives them full rights to the internet and you have little ability to control them.
If you want to set up personal Google accounts for your children, see the instructions below.
Once children turn 13, Google lets them take control of their own Google account and therefore what they can access and do on a Chromebook. While you can install Family Zone on your child’s Google account (via the Chrome Web Store), they will have the ability to remove it.
We suggest you speak to your teenager and agree on ground rules before setting up Family Zone on their device.
1: Turn on your Chromebook
If the battery is detached, install the battery.
Press the power button.
2: Follow the on-screen instructions
To choose your language and keyboard settings, select the language that appears on the screen.
Choose your WiFi network.
Accept the Terms of Service.
3: Sign in with your Parent Google account
The first person to sign into the device becomes the Owner (Administrator).
Remember to sign is as a Parent, not your child’s school or personal Google account.
If you do not have a Google account, follow the on-screen prompts to create one.
1: Add all of your family users to the Chromebook (including school Google accounts)
If you're signed in to your Chromebook, sign out.
On the bottom, click Add person.
Enter the Google account email address and password, then click Next.
Follow the steps that appear.
2: Restrict sign-in to only your family members
Sign in to the Chromebook with the Owner account.
At the bottom-right corner, select the time/date to display the hidden menu.
Select Settings (cog icon).
In the People section, select Manage other people.
Turn on Restrict sign-in to the following users.
You'll see a list of all the Google accounts on your Chromebook. You can add or remove accounts from this list.
3: Turn off ‘Guest Mode’
This is a very important step. It means your child cannot browse as a guest and avoid Family Zone.
If you're signed in as a guest, sign out.
Sign in to your Chromebook using the owner account.
Turn off Enable Guest browsing.
Watch this video on installing Mobile Zone.
Browse to www.familyzone.com/laptops
Scroll down and select Download for Chromebook
This will open Google Chrome Web Store. Select Add to Chrome.
Select Add extension.
Enable Mobile Zone (Education Edition) extension in incognito mode.
This is important because by default, Google Chrome disables extensions in Incognito mode. Your child may exploit this to bypass filtering.
Open Google Chrome
Browse to chrome://extensions into your Chrome browser
On the Mobile Zone (Education Edition) extension and select Details
Enable Allow in Incognito
Click on the recently added Mobile Zone extension.
Sign in with your Family Zone email address and password.
Update the device name, select the device owner and click sign in.
Mobile Zone for Chromebook (Education Edition) is now protecting your device
If you’ve given your teenager a Chromebook and a personal Google account then please be aware they will be able to remove Family Zone’s extension from the Chrome browser.
If that happens, then we will keep scanning and if we don’t see traffic from their device in the following 14 days, we will let you know.
We recommend you check their Chromebook and Google account from time to time to ensure your safety measures have not been tampered with.
Unfortunately this is not possible. Our Chrome app (extension) is not currently suitable for users of Google Family Link i.e. users under 13.
Google’s in-built parental control feature is called Google Family Link. This service operates on Android devices, Chromebooks and in Chrome browsers.
3: Sign in with your Parent Google Account
1: Add all of your family users to the Chromebook
To find out more about Google Family Link we suggest you visit Google Families. However, here are some quick tips which may assist:
You need to download the Google Family Link App. It is available on iOS and Android.
Yes. Family Link is required for Google accounts registered to users under 14. If you find this difficult to use, you can register your children as 14+. However, unless you install Family Zone on their devices, they will be able to access the internet without restrictions.
Not yet. Family Link can not operate alongside Family Zone on Chromebooks because Google doesn’t provide access to the Google Web Store, where Family Zone can be downloaded.
Yes. Family Link can operate alongside Family Zone on Android devices and it works well, offering you the ability to control apps & screen-time using the Family Link app, and control internet access using Family Zone.
This should be possible. However, we’ve not been able to do it which has resulted in wiped data and upset children. We suggest you speak to your child and warn them of this before you remove Google restrictions from their account.