Skip to main content

Go phish

Learn how to be scam-savvy online and put your pretend passwords to the test.
Plan a session with this activity

You will need

  • Device with access to the internet

Activity summary

This activity explores what it means to stay safe online. While we can’t fall over and hurt ourselves on the internet, it’s important to know how to stay away from scams (and people trying to scam or hurt others) so that you can protect yourself and others. This activity is designed to be started before you get stuck into your main session or activity, then finished at the end.

Safety checklist

Use the Safety checklist to help you plan and risk assess your activity. Additional coronavirus-related controls to think about may include: 

  • Set up a hand washing station that you can use throughout the session. 
  • Stay socially distanced when moving around the space and when talking to other people. 

Step 1: Staying safe online

  1. Everyone should chat about the devices they use to access the internet. What do they use and where do they use it? Who owns the devices?
  1. The person leading the activity should introduce the ten top tips for staying safe online.
  1. Everyone should chat about the tips and help each other to understand them all. Does anyone already follow some of them? Has anyone learned something they should start to do (or stop doing)?

Step 2: Keep it secret, keep it safe

  1. Everyone should split into pairs.
  2. The person leading the activity should ask half of the groups to make a strong password. They should ask the rest of the groups to make a simple password. 
  1. Each pair should work together to come up with a brand-new password to an imaginary account. They should make it as strong or as simple as possible, depending on the instruction the person leading the activity gave them.
  2. Everyone should try to remember their new passwords until the end of the session without writing them down.

Step 3: Codebreakers

  1. At the end of the session, everyone should try to remember their passwords.
  1. Someone should visit My1login.com and check some of the passwords. Which ones were strongest, and which were the weakest? Who had the strongest password?
  1. Everyone should chat about how to find a balance between having a password that’s easy to remember and having a password that’s strong.
  1. Everyone should chat about how they might feel if someone got hold of one of their real passwords.

Reflection

Our passwords can be like a key that unlocks our lives and lots of personal information. If someone gets hold of a password, they have access to things that are private. It’s important to understand how much we have locked away behind our passwords and how important it is to keep them safe. This activity has looked at what makes a good password – take some time to think about how we might feel if someone got access to our passwords or accounts.

Safety

All activities must be safely managed. Use the safety checklist to help you plan and risk assess your activity. Do a risk assessment and take appropriate steps to reduce risk. Always get approval for the activity and have suitable supervision and an InTouch process.