PASSWORDS & LOGIN
PHISH OR REAL?
DATA & PRIVACY
SYSTEMS & MISTAKES
WHY IT MATTERS
200

This is something you should never share with anyone, even a friend.

Your password

200

A message saying “You won a free prize” that asks for login information.

Phish


200

Information about you that should be kept private.

Personal data

200

Something all people do sometimes, even when they are careful.

Make mistakes

200

Who is affected by computing systems.

Individuals and groups

400

Why using the same password on multiple sites is risky.

If one account is hacked, others can be accessed too

400

A message that tries to rush you by saying “Act now or your account will be locked.”

Phish

400

Why health or DNA data is more sensitive than a username.

It can affect your future and can’t be changed

400

Why systems should not assume users will always do the right thing.

Because people are human and make errors

400

Why security problems matter beyond just one account.

They can impact many people

600

One reason long passwords are usually stronger than short ones.

They are harder to guess or crack

600

A teacher emailing you from a real school email asking you to resend work.

Likely real

600

Why a data breach can affect people who never signed up for an account.

Their information may be connected or shared

600

What can happen when one person makes a mistake in a connected system.

It can affect many others

600

How repeated data breaches affect trust.

People trust technology less

800

Why a stolen password alone should not be enough to access an account.

Because it does not prove it’s really you

800

Why phishing messages often sound urgent or emotional.

To make people act without thinking

800

Once personal data is leaked online, why it’s hard to fully fix.

It can be copied and spread

800

Why blaming users alone does not fix security problems.

The system design still has weaknesses

800

Why companies should think about safety, not just speed or convenience.

Because poor choices can harm users

1000

One way systems can protect users even if a password is stolen.

Multi-factor authentication or extra verification

1000

One thing you should do instead of clicking a suspicious link.

Go directly to the official website or ask a trusted adult

1000

One responsibility companies have when collecting personal data.

Protect it and limit how it’s used

1000

One way systems can reduce damage when mistakes happen.

Limits, alerts, or extra security checks

1000

The main idea behind Big Idea 5.

Technology choices affect people and society