Strong Passwords & 2FA
Lesson preview: the Mini Lesson and Vocabulary are open to everyone. Guided practice, exercises, the parent checklist and the printable PDF worksheet come with full access (free 7-day trial or membership).
Learning Objectives
- 1Tell strong passwords apart from weak ones
- 2Build a long, unique passphrase that is easy to remember
- 3Explain how two-factor authentication adds a second lock
- 4Match common 2FA methods to how each one works
Mini Lesson
Your password is the first lock on every account you own. A strong password keeps strangers out, even if they guess your name, your birthday, or your favorite team. Two-factor authentication (2FA) adds a second lock — so even a stolen password is not enough to break in.
What Makes a Password Strong?
- Long — at least 12 characters. Length beats everything else.
- Unique — a different password for every important account.
- Hard to guess — never your name, birthday, pet, or "password123".
- Mixing in numbers or symbols can help — but a long passphrase is already strong. Some sites still ask for them.
The Passphrase Trick
A passphrase is three or four random words joined together. Because it is long, it is easy to remember and very hard for a computer to crack — even without numbers or symbols. If a site asks for one, you can add it, like "Mango-Tiger-Banjo7!". Either way it beats "MyDog2010". And when you have lots of accounts, a password manager can remember strong passwords for you, so you only memorize one — you will learn about those next year.
What Is 2FA?
Two-factor authentication asks for a second proof after your password. Think of it as needing both a key AND a fingerprint to open a door. Even if a thief copies your key (your password), they still cannot get in without the second factor.
- Authenticator app — a 6-digit code that rotates every 30 seconds.
- SMS code — a one-time code sent as a text message to your phone.
- Security key — a small USB or wireless device you tap to log in.
- Biometric — your fingerprint or face used to confirm it is you.
Tip: turn on 2FA for your most important accounts first — email, learning apps, and any account that stores money or photos. If a thief grabs your email, they can reset everything else.
Unlock the full HSEA system for 7 days.
Add your first kid profile and your 7 days start: every lesson in every grade, saved progress for each child. Nothing to set up, no card required, nothing to cancel.
- ✓ All 1,680 lessons, Grades 1–6, every subject
- ✓ Profiles + saved progress for every kid
- ✓ Printable lessons with answer key