One Key for Every Door?

We are learning to explain why using the same password for many accounts is risky, using a model of doors and keys.

Before you startAbout 55 minutes · what success looks like · notes for the helper

About 55 minutes. It's fine to stop after the Quick Check and come back another day: the lesson opens where you left it, at the Quick Check.

You'll know you've got it when

I can say what an account, a password and a leak are, in my own words
I can draw a doors-and-keys diagram and show which accounts one leaked key would open
I can explain why even a very strong password is risky if it is used on more than one account

For the helperhow to sit beside this lesson, and what this step is for

This step: Spark

Start with the question at the top and chat about it. There is no wrong answer here: it gets your learner thinking about what they already know.

Getting ready: A few real keys on a key ring if you have them, plain paper and coloured pencils for drawing doors, and a minute beforehand to think of the kinds of account your family uses, like a library account, a game or a photo album. The lesson only ever needs the kinds of account, so you might keep every real password out of the conversation. All of it takes about 55 minutes; many families stop after the quick check and do the chosen task the next day.
What understanding sounds like: Listen for your child saying how many doors one leak opens and why: 'the game lost the key, so anything with the same key is open too.' Counting the doors out loud, and saying that the leak was not the user's fault, are both good signs.
A likely mix-up, and something that helps: A common belief is that a very strong password is safe to use everywhere, or that only the leaked website is at risk. You might ask, 'If one website lost this key, which other doors would it open?' and 'Could the thieves open those doors without guessing anything?'
If it comes easily: For a child who is ahead, one challenge is to plan for a household with six accounts where one leak opens at most one door, and to say what they would do first if a website announced it had lost its list.
If it's a struggle: If it feels like a lot, one way is to use real keys on a ring and three paper doors, and to act out the leak by trying one key on every door before moving to the diagram. Starting with just three accounts keeps the counting small. Saying 'account', 'password', 'leak' and 'unique' together first, in your home language if that is easier, can help. If the child refuses or shuts down, acting out the leak with real keys and no writing is still the lesson.

Step 1 of 6 · Spark

Lesson 1 of 4 · Keys, Footprints and Who Gets to See

The key that opens everything

For the helper

Start with the question at the top and chat about it. There is no wrong answer here: it gets your learner thinking about what they already know.

Picture a key ring with just one key on it. That one key opens the front door, the shed, the bike lock and the letterbox. It's handy: you only ever carry one. Now picture someone finding a copy of that key. How many things could they open? Is it a good idea, and why do you think people still do it? Tell your helper what you think before you read on. Keep your answer, because you'll come back to it at the end.

One key, many doors. Easy to carry, easy to lose, and very easy to copy.