Passwords & Identity
Here's a scary fact: most people's passwords can be cracked in under a minute. And it's not because hackers are geniuses — it's because most passwords are terrible. Let's fix that.
1. Key Concepts
Brute Force Attacks
A computer tries every possible password combination automatically. "abc" can be cracked in milliseconds. A 12-character random password would take billions of years. Length is your best weapon.
Dictionary Attacks
Attackers use lists of the most common passwords. "password", "123456", "qwerty", "letmein" — these are tried immediately. Never use a real word as your only password.
What Makes a Strong Password
Length (12+ chars) + Randomness + Variety (uppercase, lowercase, numbers, symbols). The best passwords are passphrases: "CorrectHorseBatteryStaple!" is both memorable and extremely strong.
Password Managers
You should have a different password for every site — but nobody can remember hundreds of passwords. A password manager (like 1Password or Bitwarden) generates and stores them all securely. You only need to remember one master password.
2. Watch & Learn
Watch this breakdown of how hackers actually crack passwords — and what you can do to stop them.
3. Exercise: Password Strength Tester
Type a password below to see how strong it is and how long it would take a computer to crack it. Don't type your real password! Use a test variation instead.
4. Your Project: Security Checkup
🛡️ Mission: Audit 3 Passwords
Pick 3 accounts you use regularly. Without writing the actual passwords, rate each one:
- Is it 12+ characters long?
- Does it have uppercase, lowercase, numbers, AND symbols?
- Is it unique (not used on any other site)?
- Is it a real word or something personal (birthday, pet name)?
If you answered "no" to any of these, change that password! Use a free password manager like Bitwarden →
You're More Secure! ⭐
You now know more about password security than most adults.
Test a password to unlock this!