Internet & Identity · lesson 7 of 17 · 15 min
What is a password?
Imagine you have a special locker at school. You use a combination lock to keep your things safe inside. Only you know the combination, so only you can open it. A password works exactly the same way — it is a secret code that lets you into your digital accounts and keeps everyone else out.
Every time you log in to a game, an app, or a school website, you type your password to prove that you are really you. The website checks your password against the one it has stored, and if they match, it lets you in. If someone else tries to get into your account without knowing your password, they cannot get in — as long as your password stays secret.
Passwords protect everything important about your digital life: your saved games, your school assignments, your messages, and your personal information. That is why learning how to create and protect good passwords is one of the most important cybersecurity skills you can have.
Did you know? The most common password in the world is “123456” — and it takes a computer less than one second to guess it. A good password is much harder to crack than that!
What makes a password work?
A password works because it is something only you know. When you create an account on a website, you choose a password and the website stores a scrambled version of it (called a hash). When you log in, the website scrambles what you type and checks if it matches the stored scramble. If it does, you are in!
This is why it is so important to keep your password secret. If someone else learns your password, they can log in as you — and the website has no way of knowing it is not really you. They could read your messages, change your settings, or even pretend to be you when talking to others.
The login process — step by step:
- 1
- You type your password
- 2
- Website scrambles it
- 3
- Compares to stored version
- 4
Match? You are in!
Keeping your password safe
Creating a password is only half the job — you also need to keep it safe. Here are the most important rules for protecting your passwords:
- Never share your password — not with friends, classmates, or anyone online. Even your best friend could accidentally tell someone else, or their account could get hacked.
- Do not write it on paper near your device — if someone finds the paper, they have your password.
- Do not use the same password everywhere — if one account gets hacked, all your other accounts stay safe.
- Log out when you are done — especially on shared computers at school or the library.
- Tell a trusted adult if you think someone has learned your password — they can help you change it quickly. The one exception: You can share your password with a parent or guardian — they are responsible for your safety and may need to help you if you get locked out of an account. But that is the only exception!
Key words to remember
- Password
- Account
- Login
- Hash
- Log out
Match each password term to its meaning
What is a password — quiz
What is a password?
- Your username
- A secret code that protects your account
- Your email address
- The name of a website
Answer: A secret code that protects your account
A password is a secret code — like a combination lock — that protects your account from others.
Who should you share your password with?
- Your best friend
- Your classmates
- Nobody — except a parent or guardian if needed
- Anyone who asks nicely
Answer: Nobody — except a parent or guardian if needed
Passwords should be kept secret. The only exception is sharing with a parent or guardian who is helping you.
Using the same password for every account is a good idea because it is easy to remember.
- True
- False
Answer: False
Using the same password everywhere is dangerous. If one account is hacked, all your accounts become vulnerable.
What does “log out” mean?
- Turning off your computer
- Signing out of your account so no one else can use it
- Deleting your account
- Changing your password
Answer: Signing out of your account so no one else can use it
Logging out signs you out of your account, which is especially important on shared computers.
Why do websites store a “hash” of your password instead of the real password?
- To make it easier to remember
- So that even if the website is hacked, your real password stays safe
- To make logging in faster
- Because passwords are too long to store
Answer: So that even if the website is hacked, your real password stays safe
Hashing scrambles your password so websites never store the real thing — protecting you even if they get hacked.
It is safe to write your password on a sticky note next to your computer.
- True
- False
Answer: False
Writing your password near your device means anyone who sees it can access your account.
What should you do if you think someone has learned your password?
- Do nothing — they probably will not use it
- Tell a trusted adult so they can help you change it
- Create a new account
- Tell all your friends
Answer: Tell a trusted adult so they can help you change it
If someone knows your password, tell a trusted adult immediately so you can change it before any damage is done.
Why is “123456” a bad password?
- It is too long
- It is one of the most common passwords and can be guessed in under a second
- It has too many numbers
- Passwords cannot contain numbers
Answer: It is one of the most common passwords and can be guessed in under a second
“123456” is the most common password in the world — attackers try it first because so many people use it.
When is it especially important to log out of your account?
- When you are at home on your own computer
- When using a shared computer at school or the library
- When your battery is low
- When you are playing a game
Answer: When using a shared computer at school or the library
On shared computers, always log out so the next person cannot access your account.
A password protects your account by proving you are who you say you are.
- True
- False
Answer: True
Passwords work by verifying your identity — only someone who knows the secret code can get in.
Previous lesson: Asking a trusted adult
Back to Internet & Identity
Next lesson: Strong vs. weak passwords