Passphrases and password managers
A password is the key to your house. A short key is easy to copy. A passphrase is like a giant, wiggly key made of four random words, very hard to copy, but easy for you to remember.
- Get Cyber Safe recommends a passphrase of at least 4 random words and at least 15 characters, for example four unrelated words strung together. (Make your own; never use an example from a course.)
- If a site won't accept a passphrase, use a password of at least 12 characters with upper- and lower-case letters, at least one number and at least one symbol.
- Use a different passphrase or password for every account. If one site is breached, criminals try the same password on other sites.
- A password manager stores your passwords in an encrypted vault so you only remember one strong master passphrase. Get Cyber Safe suggests one if you have trouble remembering many unique passwords.
- Avoid personal details (birthdays, pet names, team names) that people can find on social media.
- List your 5 most important accounts: email, bank, phone carrier, main social account, work.
- Pick a password manager from a reputable source and install it (names and menus differ by product).
- Create one strong master passphrase of at least 4 random words and 15 characters. Do not use an example from a course.
- Start with your email account: open its security settings and change the password to a new unique passphrase.
- Let the password manager generate and save a unique password for each of the other four accounts.
- Check: no two of the five accounts share a password and none uses personal details.
Videos by other creators on YouTube, for reference. They are not made by or affiliated with The Future Market.
Read the video script
[Host] "Most hacked accounts don't get cracked by geniuses. They get opened with reused or weak passwords."
[Text on screen: 4+ random words, 15+ characters] "The Government of Canada's advice: a passphrase of at least four random words and at least 15 characters."
[Screen: password manager generating a unique password] "One different password per account. A password manager remembers them for you."
List your 5 most important accounts (email, bank, phone carrier, main social account, work). Change any reused or weak password to a unique passphrase, starting with your email.
ClaudeStuck? Copy a ready-made prompt for Claude
Copy this, open Claude, paste it, and Claude will walk you through the lesson step by step.
For a grown-up: Claude is for adults (18+). Copy this, paste it into Claude, and use the answer to explain the lesson to your child.
I'm learning "Cybersecurity Basics: Protect Yourself and Your Business" on The Future Market. Lesson 1: "Passphrases and password managers". What the lesson teaches: - Get Cyber Safe recommends a passphrase of at least 4 random words and at least 15 characters, for example four unrelated words strung together. (Make your own; never use an example from a course.) - If a site won't accept a passphrase, use a password of at least 12 characters with upper- and lower-case letters, at least one number and at least one symbol. - Use a different passphrase or password for every account. If one site is breached, criminals try the same password on other sites. - A password manager stores your passwords in an encrypted vault so you only remember one strong master passphrase. Get Cyber Safe suggests one if you have trouble remembering many unique passwords. - Avoid personal details (birthdays, pet names, team names) that people can find on social media. The exercise I'm working on: List your 5 most important accounts (email, bank, phone carrier, main social account, work). Change any reused or weak password to a unique passphrase, starting with your email. I'm stuck. Please: 1. Explain the main idea in plain, simple words with one everyday example. 2. Walk me through the exercise one small step at a time. Ask me what I've done so far before giving the next step. 3. Don't just give me the final answer. Help me do it myself, and check my work when I share it.
I'm a parent helping my child (about 8 years old) with a lesson called "Passphrases and password managers" from the course "Cybersecurity Basics: Protect Yourself and Your Business". Here's what the lesson says: A password is the key to your house. A short key is easy to copy. A passphrase is like a giant, wiggly key made of four random words, very hard to copy, but easy for you to remember. The activity: List your 5 most important accounts (email, bank, phone carrier, main social account, work). Change any reused or weak password to a unique passphrase, starting with your email. Please explain this so an 8-year-old understands: short sentences, a fun everyday example, and no hard words. Then give me 3 simple questions I can ask my child to check they understood, and a way to do the activity together, one tiny step at a time.
Sources
- Get Cyber Safe, passphrases, passwords and PINs: www.getcybersafe.gc.ca/en/secure-your-accounts/passphrases-passwords-a
- Canadian Centre for Cyber Security, best practices for passphrases and passwords (ITSAP.30.032): cyber.gc.ca/en/guidance/best-practices-passphrases-and-passwords-itsap
Multi-factor authentication (MFA)
This lesson is part of full access: every course and every level for one payment.
Phishing and scam texts
This lesson is part of full access: every course and every level for one payment.
Updates, security software and backups
This lesson is part of full access: every course and every level for one payment.
Security for a small business
This lesson is part of full access: every course and every level for one payment.
When something goes wrong
This lesson is part of full access: every course and every level for one payment.
Final project
This lesson is part of full access: every course and every level for one payment.
Quiz
What passphrase does Get Cyber Safe recommend?
At least 4 random words and at least 15 characters.
Why use a different password for each account?
So one breach doesn't unlock your other accounts.
Name the three groups of authentication factors.
Something you know, something you have, something you are.
Which account should get MFA first, and why?
Email, because it can reset most other accounts.
What should you do with a scam text message?
Report it to your phone company or national scam-reporting service, then delete it (in Canada, forward it to 7726).
Where should you report fraud in your country?
To the national fraud-reporting agency or the police (in Canada, the Canadian Anti-Fraud Centre, 1-888-495-8501).
When did Windows 10 support end?
October 14, 2025.
What makes a backup trustworthy?
It's kept separate from the main device and you've tested restoring from it.
Why should small organizations follow a recognized cybersecurity checklist?
A national cyber agency usually publishes a short list of top measures to follow.
When should a business report a privacy breach, under many countries' rules?
When it is reasonable to believe it creates a real risk of serious harm.
Final exam
This lesson is part of full access: every course and every level for one payment.
Certificate
This lesson is part of full access: every course and every level for one payment.