Password Power & Secret Keepers

Overview

By third grade, many students have school logins, game accounts, or a family tablet code. This lesson gives them three habits to protect those accounts. First, teams line up password cards from weakest to strongest and discover that long, random passphrases beat short passwords full of personal details. Next, they build silly practice passphrases from word cards (never their real ones). Then they become Secret Keepers, sorting tricky moments, including a message that asks for a password and a phone call from a voice that sounds just like a relative, into keep it secret, share only with a trusted grown-up, or tell a grown-up now. They leave with a plan for what to do when an account acts weird.

Objectives

• Students will explain what makes a password strong (long, random words, not personal information, different for each account) and rank examples.
• Students will build a practice passphrase and explain why it is hard to guess but easy to remember.
• Students will decide who, if anyone, can know a password in a set of scenarios, and explain why friends are not on the list.
• Students will name the steps to take when an account acts weird, including telling a trusted grown-up, and one way to check a surprising call or message.

Step by step

1. 10–4 min

   Hook

   The locked diary

   Hold up a notebook and say: "This is my secret diary. It has a lock. The combination is… my birthday!" Ask: "Is that a good lock?" Students will say no: lots of people know your birthday. Say: "Accounts online have locks too. They're called passwords. Today you'll learn to make powerful ones, and to be a Secret Keeper who knows who is allowed to know them."

   Facilitator noteMake the one firm rule clear right away: "We will never say or write our real passwords today. Everything we make is practice."

2. 24–12 min

   Explore

   Password Line-Up

   Teams get the ten Handout A cards and line them up (on the table or on a clothesline) from weakest to strongest. They must agree on a reason for their top and bottom card. Then reveal the key: read the backs for a few cards and have teams adjust. Build a class list of Password Power rules on the board: long beats short; random words beat real words about you; no names, birthdays, pets, or teams; a different password for every account; never share it with friends.

   Facilitator noteTeams often rank a short password with symbols (like the "B@ddy!" card) above a long passphrase. That's the key misconception. Ask: "Which one would be harder for someone to guess if they knew a lot about you? Which one could you remember?"

3. 312–18 min

   Create

   Build a practice passphrase

   Each student draws four word slips from the bag without looking, and writes them in the practice box on Handout C as a silly passphrase (for example, pickle-trumpet-cloud-giraffe). Then they draw a quick picture that helps them remember it. Say: "This is how you make a real one at home with a grown-up: random words, a funny picture in your head. But this one is only for practice. Real passwords don't go on paper at school."

   Facilitator notePoint out why drawing without looking matters: words you choose yourself tend to be things you like, and people who know you might guess those. Random picks are harder to guess.

4. 418–28 min

   Practice

   Secret Keeper Sort

   Teams sort the twelve Handout B scenarios into Keep it secret, Share only with a trusted grown-up, and Tell a grown-up now. Circulate and ask, "Why?" Then discuss the tricky ones as a class. For the two-step check card, explain: "Some accounts send a second check, like a code to a grown-up's phone, when someone signs in. It's like a second lock. If a code shows up and you didn't try to sign in, that's a signal to tell a grown-up." For the voice card, say: "Computer tools can now copy a person's voice. A family can pick a secret safe word to check that a caller is really who they say they are."

   Facilitator noteKeep the voice-copying piece calm and brief. The takeaway isn't fear; it's a family habit: hang up and check another way, or ask the safe word. Name your school's real rule for who helps with school passwords.

5. 528–35 min

   Apply

   When an account acts weird

   Read this aloud: "Jada logs into her game account and her avatar has new clothes she didn't buy, and her friends say she sent them strange messages." Ask teams: "What should Jada do first? Next?" Build the steps together: 1. Stop and don't click anything new. 2. Tell a trusted grown-up right away. 3. With the grown-up, change the password to a new, strong one. 4. Turn on a two-step check if the account has one. 5. Tell friends not to open the strange messages. Students copy the steps they'd use into Handout C.

   Facilitator noteEmphasize that Jada is not in trouble. Kids hide account problems when they fear punishment. Say: "Telling a grown-up fast is the smart move, every time."

6. 635–40 min

   Reflect

   Secret Keeper pledge

   Students finish Handout C on their own: who their trusted grown-ups are for passwords, and one Password Power rule they will use this week. Collect or check it as evidence. Close by reading the family section aloud: "Tonight, talk with your family about making a safe word. Decide it together, and don't write it down on this paper."

   Facilitator noteStudents without a family phone or accounts can still do the plan: school accounts count, and a safe word works for any family.

Adaptations

Grade 3

Use six line-up cards (1, 2, 4, 6, 8, 10) and the sort with two categories: Keep it secret and Tell a grown-up. Draw three word slips instead of four.

Grade 5

Add a discussion of why using the same password everywhere is risky: if one account is broken into, the others are open too. Students explain it to a partner with the diary-and-house-key comparison.

Emergent bilinguals

Allow word slips in home languages (a mix of languages makes a strong passphrase). Pre-teach password, secret, trusted, and code with gestures and pictures.

Students with reading needs

Read sort cards aloud in teams and let students sort by pointing or placing. Provide a picture icon for each category (a lock, a grown-up, a megaphone).

Pairs well with

• Digital Citizenship Breakouts (K–8)Elementary breakouts on privacy and online safety.
• Family App Privacy AuditA family-friendly tool to review app settings together at home.