Password Managers and 2FA

A password is the front door to every account you own — your email, your learning portal, your games, your social apps. In Grade 6 you have more accounts than ever, and weak or reused passwords are the number one way kids your age get hacked. Two simple tools fix this: a password manager and two-factor authentication.

What Makes a Password Strong

1. Length — aim for 12 characters or more, longer is always stronger.
2. Mix — combine upper case, lower case, digits, and a symbol or two.
3. Unique — every account gets its own password, never reuse one.
4. Passphrase — four random words like river-otter-banana-clock are easy to remember and brutal to crack.

Why a Password Manager?

A password manager is an app that stores every password you have inside an encrypted vault. You only need to remember one strong master password — the manager generates and fills the rest. It also warns you if a site you use has been part of a breach so you can change that password right away.

• Generates long random passwords you never have to type or memorize.
• Fills logins automatically on the right site, blocking lookalike phishing pages.
• Syncs your vault across phone, tablet, and laptop with end-to-end encryption.
• Flags reused or breached passwords so you can replace them fast.

Two-Factor Authentication (2FA)

2FA means you need a second proof of who you are, on top of your password. Even if a hacker steals your password in a breach, they cannot get in without that second step. Most accounts let you turn 2FA on inside the security settings — do it for email first, then for any account with money, photos, or chats.

• SMS code — a one-time code texted to your phone (better than nothing, but not ideal).
• Authenticator app — a 6-digit code that refreshes every 30 seconds, generated on your device.
• Hardware key — a tiny USB or NFC device you tap to prove it is really you.
• Biometric — your face or fingerprint, stored on your phone, never sent to the website.