Computer Science
Grade 9
20 min
Creating Strong Passwords: Keeping Your Accounts Safe
Learn how to create strong and memorable passwords to protect online accounts.
What you'll learn
- Identify at least three characteristics of a strong password from a list of examples with 80% accuracy.
- Explain why using personal information (like birthdays or pet names) in a password makes it weak in their own words.
- Apply the principles of strong password creation to generate two unique and strong password ideas, each at least 8 characters long, using a combination of uppercase letters, lowercase letters, numbers, and symbols.
- Evaluate two different password examples and determine which one is stronger, justifying their choice based on the principles learned in the lesson.
Tutorial Preview
1
Introduction & Learning Objectives
Learning Objectives
Define the characteristics of a strong password, including length, complexity, and uniqueness.
Explain how brute-force and dictionary attacks work at a conceptual level.
Evaluate the relative strength of different example passwords.
Apply the passphrase method to create a memorable and secure password.
Describe the function and importance of a password manager.
Explain the role of Two-Factor Authentication (2FA) as an additional security layer.
Have you ever used 'password' or '123456' as a password? 🤫 Let's explore why a computer can guess those in less than a second and how to build a digital fortress instead!
In this lesson, we'll dive into what makes a password strong and why it's your first line of defense in the...
2
Key Concepts & Vocabulary
TermDefinitionExample
Brute-Force AttackAn attack where a program tries every possible combination of characters, numbers, and symbols until it guesses the correct password. Longer and more complex passwords make this attack take much longer.A program trying 'a', 'b', 'c', ... 'aa', 'ab', 'ac', ... '1a', '1b', etc., to guess a 4-character password.
Dictionary AttackA more targeted attack where a program tries a pre-made list of common words, phrases, and simple passwords (like 'password123' or 'qwerty') to guess the password.A script running through a file containing millions of words from the English dictionary and common password variations to log into an account.
Password EntropyA measur...
3
Core Syntax & Patterns
The Password Strength Formula
Strength = Length + Complexity + Uniqueness
Use this mental formula to create and evaluate passwords. A strong password excels in all three areas: it's long (12+ characters), complex (uses uppercase, lowercase, numbers, symbols), and unique (not used for any other account).
The Passphrase Method
Combine 4-5 random, unrelated words to form a long, memorable password.
This is one of the best ways to create a password that is both easy for you to remember and very difficult for a computer to guess. The length makes brute-force attacks impractical.
4 more steps in this tutorial
Sign up free to access the complete tutorial with worked examples and practice.
Sign Up Free to ContinueSample Practice Questions
Challenging
A website requires '8+ characters, 1 number, 1 symbol.' A user creates 'Password!1'. Synthesizing concepts from the tutorial, why is this password fundamentally weak despite meeting the requirements?
A.It has low entropy because it's based on a common dictionary word, uses a predictable pattern, and is vulnerable to a dictionary attack.
B.It is too long for a brute-force attack to be effective.
C.It does not use the Passphrase Method, which is the only way to create a strong password.
D.It is not unique, as many other users have probably chosen the same password.
Challenging
Imagine a 'Hybrid Attack' that first runs a dictionary attack with common substitutions (e.g., 'o' -> '0'), then switches to a brute-force attack. Which password offers the most robust defense against this specific two-stage threat?
A.C0mput3rSc!ence
B.Vast-Aqua-Planet-Rhythm-5
C.P@ssw0rdP@ssw0rd
D.abc!123
Challenging
A company policy requires employees to use a password manager and enable 2FA. How do these tools address the 'Uniqueness' component of the Password Strength Formula and provide protection beyond what the formula measures?
A.The password manager creates long passwords, and 2FA adds complexity.
B.Both tools are just different ways of enforcing password length.
C.The manager ensures each password is unique (fulfilling the formula), while 2FA adds a separate authentication factor that protects the account even if a unique password is compromised.
D.The manager handles uniqueness, but 2FA is only for preventing brute-force attacks.
Want to practice and check your answers?
Sign up to access all questions with instant feedback, explanations, and progress tracking.
Start Practicing FreeMore from Digital Defenders: Privacy and Security Basics
Computer Science for other grades
Frequently asked questions
What grade level is "Creating Strong Passwords: Keeping Your Accounts Safe"?
Creating Strong Passwords: Keeping Your Accounts Safe is a Grade 9 Computer Science lesson on ExcelOS.
What will I learn in Creating Strong Passwords: Keeping Your Accounts Safe?
You'll be able to: Identify at least three characteristics of a strong password from a list of examples with 80% accuracy; Explain why using personal information (like birthdays or pet names) in a password makes it weak in their own words; Apply….
Is "Creating Strong Passwords: Keeping Your Accounts Safe" free to practice?
Yes. You can read the tutorial preview for free, and signing up for a free ExcelOS account unlocks the full tutorial and all practice questions with instant feedback.
How many practice questions are included with Creating Strong Passwords: Keeping Your Accounts Safe?
This lesson includes 27 practice questions across multiple difficulty levels, each with instant feedback and explanations.