Strong accounts: passphrases, password managers and MFA
A password is the key to your bedroom door. A short, easy key can be copied fast. A long key made of four silly words is much harder to copy. And a second lock, like a code sent to your phone, keeps strangers out even if they steal the first key.
- Use a passphrase when you can: four or more random words and at least 15 characters (for example, a made-up one like "purple kettle jumps library").
- If a site won't take a passphrase, use a complex password of at least 12 characters, with upper- and lower-case letters, at least one number and at least one symbol.
- Use a different passphrase for every account. If one account is broken into and you reuse passwords, attackers can get into the others.
- A password manager stores your passphrases so you don't have to remember them all. Get Cyber Safe suggests choosing one with strong encryption.
- Turn on multi-factor authentication (MFA) in each account's security settings, using a text message code or an authenticator app. MFA can stop criminals even if they get your password.
- Never share your passphrase or MFA code with anyone, including someone claiming to be "support."
- Open your email account's security settings.
- Choose a new passphrase: four or more random words, at least 15 characters.
- Save the passphrase in a password manager.
- Turn on multi-factor authentication with an authenticator app or text message code.
- Do the same for your next most important account.
- Do not share your passphrase or code with anyone.
- Check: you can sign in with the new passphrase and the second step.
Videos by other creators on YouTube, for reference. They are not made by or affiliated with The Future Market.
Read the video script
[Host] "Short passwords are easy to crack. Long passphrases are not."
[Text on screen: 4+ random words, 15+ characters] "Get Cyber Safe recommends four or more random words and at least fifteen characters."
[Screen: password manager vault] "Different one for every account. Let a password manager remember them."
[Screen: phone showing a login code] "Then turn on multi-factor authentication. Even if someone steals your password, they still can't get in."
[Host] "And never, ever give anyone your code."
Change the password on your most important account (usually your email) to a new passphrase, and turn on MFA for it today.
ClaudeStuck? Copy a ready-made prompt for Claude
Copy this, open Claude, paste it, and Claude will walk you through the lesson step by step.
For a grown-up: Claude is for adults (18+). Copy this, paste it into Claude, and use the answer to explain the lesson to your child.
I'm learning "Online Safety & Digital Citizenship" on The Future Market. Lesson 1: "Strong accounts: passphrases, password managers and MFA". What the lesson teaches: - Use a passphrase when you can: four or more random words and at least 15 characters (for example, a made-up one like "purple kettle jumps library"). - If a site won't take a passphrase, use a complex password of at least 12 characters, with upper- and lower-case letters, at least one number and at least one symbol. - Use a different passphrase for every account. If one account is broken into and you reuse passwords, attackers can get into the others. - A password manager stores your passphrases so you don't have to remember them all. Get Cyber Safe suggests choosing one with strong encryption. - Turn on multi-factor authentication (MFA) in each account's security settings, using a text message code or an authenticator app. MFA can stop criminals even if they get your password. - Never share your passphrase or MFA code with anyone, including someone claiming to be "support." The exercise I'm working on: Change the password on your most important account (usually your email) to a new passphrase, and turn on MFA for it today. I'm stuck. Please: 1. Explain the main idea in plain, simple words with one everyday example. 2. Walk me through the exercise one small step at a time. Ask me what I've done so far before giving the next step. 3. Don't just give me the final answer. Help me do it myself, and check my work when I share it.
I'm a parent helping my child (about 8 years old) with a lesson called "Strong accounts: passphrases, password managers and MFA" from the course "Online Safety & Digital Citizenship". Here's what the lesson says: A password is the key to your bedroom door. A short, easy key can be copied fast. A long key made of four silly words is much harder to copy. And a second lock, like a code sent to your phone, keeps strangers out even if they steal the first key. The activity: Change the password on your most important account (usually your email) to a new passphrase, and turn on MFA for it today. Please explain this so an 8-year-old understands: short sentences, a fun everyday example, and no hard words. Then give me 3 simple questions I can ask my child to check they understood, and a way to do the activity together, one tiny step at a time.
Sources
- Get Cyber Safe (Government of Canada), Passphrases, passwords and PINs: www.getcybersafe.gc.ca/en/secure-your-accounts/passphrases-passwords-a
- Get Cyber Safe, Password managers: www.getcybersafe.gc.ca/en/secure-your-accounts/password-managers
- Get Cyber Safe, Simple steps to keep yourself (and future self) safe: www.getcybersafe.gc.ca/en/resources/simple-steps-keep-yourself-future-
Phishing and scams
This lesson is part of full access: every course and every level for one payment.
Updates and backups
This lesson is part of full access: every course and every level for one payment.
Is it true? Check before you share
This lesson is part of full access: every course and every level for one payment.
Your digital footprint and privacy
This lesson is part of full access: every course and every level for one payment.
Cyberbullying, upstanding and getting help
This lesson is part of full access: every course and every level for one payment.
Final project
This lesson is part of full access: every course and every level for one payment.
Quiz
What does Get Cyber Safe recommend for a passphrase?
Four or more random words and at least 15 characters.
What is the minimum length for a complex password if you can't use a passphrase?
At least 12 characters.
What does MFA do?
Adds a second check (like a code) so criminals can't get in with just your password.
Name two red flags of phishing.
Urgency or threats; requests for personal info; typos in the sender; suspicious links.
Where should you report or forward spam texts?
To your country's official scam-reporting service or phone company's spam line (in Canada, 7726).
Where should you report online fraud?
To your country's official fraud or consumer agency and local police (in Canada, the Canadian Anti-Fraud Centre, 1-888-495-8501).
What are MediaSmarts' four Break the Fake steps?
Use fact-checking tools, find the source, verify the source, check other sources.
If you're cyberbullied, what should you do before blocking?
Save evidence (screenshots).
Is sharing intimate images without consent against the law?
In many countries yes, so never share them (in Canada, Criminal Code section 162.1).
Where can a young person find help with bullying or distress?
A trusted adult or your country's youth helpline (in Canada, Kids Help Phone: 1-800-668-6868 or text CONNECT to 686868).
Final exam
This lesson is part of full access: every course and every level for one payment.
Certificate
This lesson is part of full access: every course and every level for one payment.