Learning objective
Passwords
Passwords & Authentication
1
2
3
4
5
6
Understanding how passwords, passphrases, biometric security, and multi-factor authentication protect personal accounts, identity, and digital devices across online systems.
Secret Keys
Recognize that a password is a secret code used to lock digital accounts and prove user identity.
Let's Go!
Learn
A password is like a digital key to your personal locker. When you type your secret password, the computer checks if it matches before opening your personal files and apps.
Oakridge Elementary
Student Cloud Portal • Step 1: Logins & Badges
Secure School Network
Select a student profile or type your credentials:
💡 Rule to remember: Never share your secret password with friends or classmates!
Hold your student badge in front of the classroom camera:
🦊
Sammy K.Year 4 • Oakridge
Camera awaiting badge...
💡 Quick Fact: QR Badges let younger students log in quickly without typing long passwords.
Scratch Lab
Project ReadyGoogle Docs
English EssayMathletics
3 ChallengesDigital Art Hub
Saved DraftTry it yourself
Practice Secret Login
🚀 Open a practice space
🌟 Student Project GuideSuccess Criteria & WAGOLL (What A Good One Looks Like)
🎯 Task Success Criteria (Rubric)
Foundation
Identifies that accounts need a secret lock.
Developing
Explains that a password proves identity to open an account.
Secure (Goal)
Creates a simple secret password and keeps it hidden during login.
Mastery
Explains why sharing passwords with peers compromises digital security.
👀 What A Good One Looks Like (WAGOLL)
Exemplar Standard
A top-tier student project for Secret Keys includes:
- Core Deliverable: Practice Secret Login
- Target Quality: Creates a simple secret password and keeps it hidden during login.
- Excellence & Polish: Explains why sharing passwords with peers compromises digital security.
📁
Save to Your Website Portfolio:
When you finish creating your project in your software, copy the share link or take a screenshot and publish it onto your student portfolio website!
⭐Self-Assessment: How confident do you feel with this skill?
Reflect
Learning check
Teacher setup, curriculum links and progress descriptors
Spark support
Routine: See-Think-Wonder
Achievement pathway
- Foundation: Identifies that accounts need a secret lock.
- Developing: Explains that a password proves identity to open an account.
- Secure: Creates a simple secret password and keeps it hidden during login.
- Mastering: Explains why sharing passwords with peers compromises digital security.
Curriculum links
Curriculum strand: Online Safety & Digital Citizenship
Outcome: OS.01.B.1.1 — Recognize that a password is a secret code used to lock digital accounts and prove user identity.
PYP: Form · Digital accounts require secret keys to ensure personal safety and privacy.
Learner profile: Inquirer
Competency tags
Gate support
Accessibility alternative:
Teacher override: allow
Locked level
Level 2: Strong Combinations
Complete the previous learning check to unlock this next level.
Strong Combinations
Construct strong passwords using combinations of uppercase letters, numbers, and symbols.
Learning objective
Students will design strong passwords by combining uppercase letters, lowercase letters, numbers, and special symbols rather than simple words.
Let's Go!
Learn
Weak passwords like "password123" or "abc" are easy for guessing algorithms to break. Strong passwords mix capital letters, small letters, numbers, and symbols (like ! or #) to create a complex secret.
Create a Super Strong Password! 🦸♂️🦸♀️
Strength: Weak
- ❌ At least 8 characters long
- ❌ Includes an uppercase letter (A-Z)
- ❌ Includes a number (0-9)
- ❌ Includes a special symbol (!, @, #, $, ?, *)
Try it yourself
Build a Strong Password
🚀 Open a practice space
🌟 Student Project GuideSuccess Criteria & WAGOLL (What A Good One Looks Like)
🎯 Task Success Criteria (Rubric)
Foundation
Recognizes that short passwords like "1234" are weak.
Developing
Combines letters and numbers to improve password strength.
Secure (Goal)
Creates strong passwords with uppercase, lowercase, numbers, and symbols.
Mastery
Evaluates password complexity and identifies common weak patterns.
👀 What A Good One Looks Like (WAGOLL)
Exemplar Standard
A top-tier student project for Strong Combinations includes:
- Core Deliverable: Build a Strong Password
- Target Quality: Creates strong passwords with uppercase, lowercase, numbers, and symbols.
- Excellence & Polish: Evaluates password complexity and identifies common weak patterns.
📁
Save to Your Website Portfolio:
When you finish creating your project in your software, copy the share link or take a screenshot and publish it onto your student portfolio website!
⭐Self-Assessment: How confident do you feel with this skill?
Reflect
Learning check
Teacher setup, curriculum links and progress descriptors
Spark support
Routine: Think-Pair-Share
Achievement pathway
- Foundation: Recognizes that short passwords like "1234" are weak.
- Developing: Combines letters and numbers to improve password strength.
- Secure: Creates strong passwords with uppercase, lowercase, numbers, and symbols.
- Mastering: Evaluates password complexity and identifies common weak patterns.
Curriculum links
Curriculum strand: Online Safety & Digital Citizenship
Outcome: OS.01.B.1.2 — Construct strong passwords using combinations of uppercase letters, numbers, and symbols.
PYP: Function · Building strong security combinations protects digital spaces from unauthorized access.
Learner profile: Communicator
Competency tags
Gate support
Accessibility alternative:
Teacher override: allow
Locked level
Level 3: Keeping Secrets
Complete the previous learning check to unlock this next level.
Keeping Secrets
Understand why passwords must never be shared with peers or entered on untrusted devices.
Learning objective
Students will identify who can be trusted with passwords (parents/teachers only) and recognize the risks of sharing login credentials with friends.
Let's Go!
Learn
Your password is strictly private. Even best friends should never share passwords, because shared credentials can lead to accidental file deletion, impersonation, or compromised privacy. Only parents and teachers may help manage passwords.
Password Privacy & Shoulder-Surfing Lab
Step 2: Learn why computers hide your characters with dots (••••)
Peeking Eyes Nearby
"I'm standing behind you in line... what are you typing?"
👀🧑🤝🧑
Quick tests:
Masking Protected!
Your password is obscured as dots (••••••••). Anyone looking over your shoulder only sees blank circles.
Common Mistake: The Desk Sticky Note!
Do you write passwords on paper and stick them to your monitor or desk?
📌
Password: SchoolLover2026
🎉 Smart move! Never write secret passwords in plain sight where strangers or guests can see them.
Try it yourself
Privacy Audit Challenge
🚀 Open a practice space
🌟 Student Project GuideSuccess Criteria & WAGOLL (What A Good One Looks Like)
🎯 Task Success Criteria (Rubric)
Foundation
States that passwords should not be told to classmates.
Developing
Explains that sharing passwords allows others to impersonate you online.
Secure (Goal)
Demonstrates safe habits when logging in near others without exposing credentials.
Mastery
Analyzes scenario dilemmas involving peer pressure to share account logins.
👀 What A Good One Looks Like (WAGOLL)
Exemplar Standard
A top-tier student project for Keeping Secrets includes:
- Core Deliverable: Privacy Audit Challenge
- Target Quality: Demonstrates safe habits when logging in near others without exposing credentials.
- Excellence & Polish: Analyzes scenario dilemmas involving peer pressure to share account logins.
📁
Save to Your Website Portfolio:
When you finish creating your project in your software, copy the share link or take a screenshot and publish it onto your student portfolio website!
⭐Self-Assessment: How confident do you feel with this skill?
Reflect
Learning check
Teacher setup, curriculum links and progress descriptors
Spark support
Routine: Connect-Extend-Challenge
Achievement pathway
- Foundation: States that passwords should not be told to classmates.
- Developing: Explains that sharing passwords allows others to impersonate you online.
- Secure: Demonstrates safe habits when logging in near others without exposing credentials.
- Mastering: Analyzes scenario dilemmas involving peer pressure to share account logins.
Curriculum links
Curriculum strand: Online Safety & Digital Citizenship
Outcome: OS.02.B.1.1 — Understand why passwords must never be shared with peers or entered on untrusted devices.
PYP: Connection · Maintaining personal digital boundaries preserves trust and protects online identity.
Learner profile: Principled
Competency tags
Gate support
Accessibility alternative:
Teacher override: allow
Locked level
Level 4: Passphrases
Complete the previous learning check to unlock this next level.
Passphrases
Design memorable passphrases composed of multiple random words to improve security.
Learning objective
Students will create passphrases by linking 4 or more random, unrelated words together to maximize entropy and memorable security.
Let's Go!
Learn
A passphrase joins several random words into a long string (e.g., "coffee-robot-flying-banana"). Passphrases are easier for humans to remember but extremely difficult for automated computers to crack because of their long character length.
Create a Super Strong Password! 🦸♂️🦸♀️
Strength: Weak
- ❌ At least 8 characters long
- ❌ Includes an uppercase letter (A-Z)
- ❌ Includes a number (0-9)
- ❌ Includes a special symbol (!, @, #, $, ?, *)
Try it yourself
Craft a Passphrase
🚀 Open a practice space
🌟 Student Project GuideSuccess Criteria & WAGOLL (What A Good One Looks Like)
🎯 Task Success Criteria (Rubric)
Foundation
Recognizes that longer passphrases are harder to guess than short passwords.
Developing
Combines 3 random words to form a simple passphrase.
Secure (Goal)
Constructs a 4-word random passphrase with spaces, numbers, or symbols.
Mastery
Explains why passphrase length provides high resistance against brute-force attacks.
👀 What A Good One Looks Like (WAGOLL)
Exemplar Standard
A top-tier student project for Passphrases includes:
- Core Deliverable: Craft a Passphrase
- Target Quality: Constructs a 4-word random passphrase with spaces, numbers, or symbols.
- Excellence & Polish: Explains why passphrase length provides high resistance against brute-force attacks.
📁
Save to Your Website Portfolio:
When you finish creating your project in your software, copy the share link or take a screenshot and publish it onto your student portfolio website!
⭐Self-Assessment: How confident do you feel with this skill?
Reflect
Learning check
Teacher setup, curriculum links and progress descriptors
Spark support
Routine: Chalk Talk
Achievement pathway
- Foundation: Recognizes that longer passphrases are harder to guess than short passwords.
- Developing: Combines 3 random words to form a simple passphrase.
- Secure: Constructs a 4-word random passphrase with spaces, numbers, or symbols.
- Mastering: Explains why passphrase length provides high resistance against brute-force attacks.
Curriculum links
Curriculum strand: Online Safety & Digital Citizenship
Outcome: OS.02.B.1.2 — Design memorable passphrases composed of multiple random words to improve security.
PYP: Responsibility · Combining length and randomness creates memorable yet secure security phrases.
Learner profile: Thinker
Competency tags
Gate support
Accessibility alternative:
Teacher override: allow
Locked level
Level 5: MFA & Security
Complete the previous learning check to unlock this next level.
MFA & Security
Explain how multi-factor authentication (MFA) and biometrics add essential extra security layers.
Learning objective
Students will understand multi-factor authentication (something you know + something you have/are) and explain how 2FA blocks unauthorized logins.
Let's Go!
Learn
Multi-Factor Authentication (MFA) requires two or more proofs of identity before logging in. Factors include: 1) Something you know (password), 2) Something you have (authenticator code/phone), 3) Something you are (fingerprint or face scan).
2FA
Two-Factor Authentication (MFA) & Digital Vault
Step 5: Two locks on one door — Something You Know + Something You Have
Double Armor Active
Factor 1: Something You Know
Enter Master Password
Factor 2: Something You Have
Enter 6-Digit Phone Code
A temporary code was sent to your trusted device.
-
Vault Access Granted!
Identity confirmed with 2 independent security factors.
10:42 AM
Authenticator AppJust now
Your one-time school sign-in code:
482 195
⏱️ Expires in 30 seconds📱
Trusted Device Standby
Awaiting security prompts...Test the "Hacker Scenario":
What happens if a bad actor steals your password from a website breach?
🛑 HACKER BLOCKED BY MFA!
The hacker entered your correct password (Factor 1), but they do not have your physical phone in their hands to read the 6-digit code (Factor 2). Your account remains 100% safe!
Try it yourself
Simulate 2FA Security Step
🚀 Open a practice space
🌟 Student Project GuideSuccess Criteria & WAGOLL (What A Good One Looks Like)
🎯 Task Success Criteria (Rubric)
Foundation
Identifies secondary login checks like phone codes or fingerprints.
Developing
Explains that 2FA requires two separate proofs of identity before unlocking.
Secure (Goal)
Categorizes authentication factors: something you know, have, or are.
Mastery
Evaluates how 2FA protects accounts even if a password is stolen.
👀 What A Good One Looks Like (WAGOLL)
Exemplar Standard
A top-tier student project for MFA & Security includes:
- Core Deliverable: Simulate 2FA Security Step
- Target Quality: Categorizes authentication factors: something you know, have, or are.
- Excellence & Polish: Evaluates how 2FA protects accounts even if a password is stolen.
📁
Save to Your Website Portfolio:
When you finish creating your project in your software, copy the share link or take a screenshot and publish it onto your student portfolio website!
⭐Self-Assessment: How confident do you feel with this skill?
Reflect
Learning check
Teacher setup, curriculum links and progress descriptors
Spark support
Routine: 4 Cs (Connections, Concepts, Changes, Challenges)
Achievement pathway
- Foundation: Identifies secondary login checks like phone codes or fingerprints.
- Developing: Explains that 2FA requires two separate proofs of identity before unlocking.
- Secure: Categorizes authentication factors: something you know, have, or are.
- Mastering: Evaluates how 2FA protects accounts even if a password is stolen.
Curriculum links
Curriculum strand: Online Safety & Digital Citizenship
Outcome: OS.03.B.1.1 — Explain how multi-factor authentication (MFA) and biometrics add essential extra security layers.
PYP: Perspective · Multi-layered authentication systems defend identity across global digital networks.
Learner profile: Knowledgeable
Competency tags
Gate support
Accessibility alternative:
Teacher override: allow
Locked level
Level 6: Password Managers
Complete the previous learning check to unlock this next level.
Password Managers
Evaluate credential management strategies and password manager tools for long-term security.
Learning objective
Students will analyze the danger of password reuse across accounts and explain how encrypted password managers securely store unique credentials.
Let's Go!
Learn
Reusing the same password across multiple websites creates a domino effect: if one site gets breached, all your accounts become vulnerable. A Password Manager acts as a secure digital vault locked by one strong Master Passphrase, automatically generating unique, uncrackable passwords for every account.
AUDIT
Identity Security & Breach Defense
Step 6: Stop Credential Stuffing — Why one leaked password shouldn't unlock everything!
Identity Armor25%
⚠️ Critical Vulnerability: 3 accounts share the same password!
GamerZone Forum
sammy_gamerPassword:
DragonFire99!School Google Account
sammy.k@oakridge.eduPassword:
DragonFire99!City Online Library
lib_sammy44Password:
DragonFire99!Digital Art Studio
sammy_artistPassword:
✓ Independent passphrasePurpleFalcon#88Test: Credential Stuffing Attack Simulation
Watch an automated hacker script test the leaked password against all your accounts!
Hacker Bot Attack Log
100% Identity Fortified!
Every account now has a distinct, strong passphrase! Even if a hacker breaches one website, they can NEVER break into your school or library accounts.
Try it yourself
Credential Audit & Vault Exercise
🚀 Open a practice space
🌟 Student Project GuideSuccess Criteria & WAGOLL (What A Good One Looks Like)
🎯 Task Success Criteria (Rubric)
Foundation
Recognizes that using one password everywhere is risky.
Developing
Explains that password managers store unique passwords in an encrypted vault.
Secure (Goal)
Audits account credential lists to eliminate reused passwords.
Mastery
Designs a credential management policy incorporating master passphrases, encrypted vaults, and zero-trust principles.
👀 What A Good One Looks Like (WAGOLL)
Exemplar Standard
A top-tier student project for Password Managers includes:
- Core Deliverable: Credential Audit & Vault Exercise
- Target Quality: Audits account credential lists to eliminate reused passwords.
- Excellence & Polish: Designs a credential management policy incorporating master passphrases, encrypted vaults, and zero-trust principles.
📁
Save to Your Website Portfolio:
When you finish creating your project in your software, copy the share link or take a screenshot and publish it onto your student portfolio website!
⭐Self-Assessment: How confident do you feel with this skill?
Reflect
Learning check
Teacher setup, curriculum links and progress descriptors
Spark support
Routine: I Used to Think... Now I Think...
Achievement pathway
- Foundation: Recognizes that using one password everywhere is risky.
- Developing: Explains that password managers store unique passwords in an encrypted vault.
- Secure: Audits account credential lists to eliminate reused passwords.
- Mastering: Designs a credential management policy incorporating master passphrases, encrypted vaults, and zero-trust principles.
Curriculum links
Curriculum strand: Online Safety & Digital Citizenship
Outcome: OS.03.B.1.2 — Evaluate credential management strategies and password manager tools for long-term security.
PYP: Reflection · Systematic credential management safeguards digital identity across complex digital environments.
Learner profile: Reflective
Competency tags
Gate support
Accessibility alternative:
Teacher override: allow