Skip to main content

Go phish

Learn how to be scam-savvy online and put your pretend passwords to the test.

You will need

  • Device with access to the internet

Activity summary

This activity explores what it means to stay safe online. While we can’t fall over and hurt ourselves on the internet, it’s important to know how to stay away from scams (and people trying to scam or hurt others) so that you can protect yourself and others. This activity is designed to be started before you get stuck into your main session or activity, then finished at the end.

Safety checklist

Use the Safety checklist to help you plan and risk assess your activity. Additional coronavirus-related controls to think about may include: 

  • Set up a hand washing station that you can use throughout the session. 
  • Stay socially distanced when moving around the space and when talking to other people. 

Step 1: Staying safe online

  1. Everyone should chat about the devices they use to access the internet. What do they use and where do they use it? Who owns the devices?
  1. The person leading the activity should introduce the ten top tips for staying safe online.
  1. Everyone should chat about the tips and help each other to understand them all. Does anyone already follow some of them? Has anyone learned something they should start to do (or stop doing)?

Step 2: Keep it secret, keep it safe

  1. Split the group in half.
  2. The person leading the activity should ask one half of the group to think of a strong password. They should ask the other half of the group to make a simple password. 
  1. Everyone should come up with a brand-new password to an imaginary account. They should make it as strong or as simple as possible, depending on the instruction the person leading the activity gave them.
  2. Everyone should try to remember their new passwords until the end of the session without writing them down.

Step 3: Codebreakers

  1. At the end of the session, everyone should try to remember their passwords.
  1. Someone should visit and help the group members to check their passwords. Which ones were strongest, and which were the weakest? Who had the strongest password? Make sure not to share any of the passwords with anyone else, just think about what makes it stronger or weaker.
  1. Everyone should chat about how to find a balance between having a password that’s easy to remember and having a password that’s strong.
  1. Everyone should chat about how they might feel if someone got hold of one of their real passwords.


Our passwords can be like a key that unlocks our lives and lots of personal information. If someone gets hold of a password, they have access to things that are private. It’s important to understand how much we have locked away behind our passwords and how important it is to keep them safe. This activity has looked at what makes a good password – take some time to think about how we might feel if someone got access to our passwords or accounts.


All activities must be safely managed. Use the safety checklist to help you plan and risk assess your activity. Do a risk assessment and take appropriate steps to reduce risk. Always get approval for the activity and have suitable supervision and an InTouch process.