What makes a password strong?

Length is the biggest factor — aim for at least 12 to 16 characters. A strong password also mixes upper and lower case letters, numbers and symbols, avoids real names or dictionary words on their own, and is used on one account only.

Is a passphrase like 'purple-turtle-noodle7!' really safer than 'P@ssw0rd1'?

Yes. 'P@ssw0rd1' is short and follows a substitution pattern that guessing software checks first, so it falls quickly. Four unrelated words give far more possible combinations and are easier for a child to recall without writing them down.

Why can't my child use the same password for every account?

If any one website is hacked and its passwords leak, attackers try that same email-and-password pair on other services — a technique called credential stuffing. One password per account keeps a single leak contained.

Should a child use their name, birthday or favourite football team in a password?

No. Details that a classmate, relative or anyone browsing social media could find out are among the first things a guesser tries. Choose words with no connection to the child's real life.

Someone messaged my child asking for their game password — what should we do?

Do not reply, and never share the password. Real games, schools and shops never ask for passwords through chat, email or SMS; that is phishing. Block the sender, tell a trusted adult, and change the password if it was already given out.

Making Strong Passwords

Life Skills Interactive lesson Free to play

Making strong passwords is the practice of choosing login secrets that are long, unpredictable and unique to each account. A password is what proves an account belongs to you, so anything short, common or guessable — 'password123', a pet's name, a birthday — can be broken by software that tries millions of combinations every second. Length matters far more than adding a stray capital letter: each extra character multiplies the guessing work.

In Singapore, primary-school children already sign in to Student Learning Space, school Google accounts, games and messaging apps, so the habit is worth building early. The most practical method is a passphrase: three or four unrelated words joined together with a number and a symbol, which is long enough to resist guessing but easy for a child to picture and remember.

The other half of password safety is behaviour. Personal facts a classmate could look up make weak passwords; reusing one password across sites means a single leak opens every account; and no legitimate school, game or shop will ever ask for a password by message — that request is phishing.

▶ Play the lesson — free, no signup

What this Spark covers

Your password is a key

Making Strong Passwords 🔐 A password is like the key to your front door. It keeps your games, photos and messages safe inside. A weak password is like a key made of paper — anyone can tear through it. A strong password is like a thick metal key that nobody can copy. In this lesson you will meet a guessing robot, build your own super password, and learn the golden rules for keeping it secret. ⏱️ About 8 minutes 🎮 4 mini games
Meet the Guess-o-Tron

How fast can a robot guess? Bad guys use computers that try millions of passwords every second. Let's watch one work! The Guess-o-Tron is ready. Pick a password for it to attack: 1234 password JellyMoonHops7! 🤖 waiting… Tap a password above to start the attack. The big idea Short and common = cracked instantly. Long and surprising = safe for years.
The 4-word recipe

Build a passphrase 🍜 The easiest strong password is a silly sentence: 3–4 random words stuck together, plus a number and a symbol. Silly pictures are easy for you to remember and impossible for a robot to guess. Tap words to build one tap words… Strength: keep going! Add 7 Add ! Check my passphrase Aim for 3 or more words, plus a number and a symbol. Purple Otter Sings 4! A picture in your head = easy to remember, hard to crack
Don't use your own facts

Safe or Risky? 🕵️ Anything a classmate could find out about you makes a risky password — your name, birthday, pet, school or favourite team. Tap each password. Is it Safe or Risky? Risky someone could guess it Safe long & surprising Tap a password to sort it.
One key per door

Never reuse the same key 🚪 If you use the same password everywhere and one place leaks it, a stranger can open all your doors. Tap each door to see what happens when the game website leaks your password. Tap the doors to find out. The rule Give every important account its own password. A grown-up can help you keep them in a password manager or a locked notebook at home.
Spot the trick message

Nobody should ever ask 🎣 Real games, schools and shops never ask for your password in a message. Tricksters do — this is called phishing. Tap the 3 warning signs hidden in this message. From: FreeR0bux_Support 🕵️ Hi! Send me your password right now and you will get 1000 FREE gems! You must reply in 5 minutes or your account closes. Your friend, Support Team Found 0 of 3 warning signs. If a message asks for your password 🛑 Stop · 🙅 Do not reply · 🗣️ Tell a parent or teacher.
Password health check

Test a password 🔬 Type any password idea below (not a real one you use!) and the checker will show what it is missing. Check it Try to tick all 4 boxes.
You are a password hero

Well done! 🎉 You now know how to make and protect a strong password. Your 5 golden rules 1. Make it long. 3–4 silly words joined together beat any short word. 2. Mix it up. Big letters, small letters, a number and a symbol. 3. Keep your facts out. No name, birthday, pet or school. 4. One key per door. A different password for each important account. 5. Never share it. Real companies never ask. If a message does — stop and tell an adult. Try this tonight: think of a silly picture like TurboMangoNaps8! — then ask a parent to help you update one old password. You are officially a Password Hero 🦸

Frequently asked questions

What makes a password strong?: Length is the biggest factor — aim for at least 12 to 16 characters. A strong password also mixes upper and lower case letters, numbers and symbols, avoids real names or dictionary words on their own, and is used on one account only.
Is a passphrase like 'purple-turtle-noodle7!' really safer than 'P@ssw0rd1'?: Yes. 'P@ssw0rd1' is short and follows a substitution pattern that guessing software checks first, so it falls quickly. Four unrelated words give far more possible combinations and are easier for a child to recall without writing them down.
Why can't my child use the same password for every account?: If any one website is hacked and its passwords leak, attackers try that same email-and-password pair on other services — a technique called credential stuffing. One password per account keeps a single leak contained.
Should a child use their name, birthday or favourite football team in a password?: No. Details that a classmate, relative or anyone browsing social media could find out are among the first things a guesser tries. Choose words with no connection to the child's real life.
Someone messaged my child asking for their game password — what should we do?: Do not reply, and never share the password. Real games, schools and shops never ask for passwords through chat, email or SMS; that is phishing. Block the sender, tell a trusted adult, and change the password if it was already given out.

Making Strong Passwords

What this Spark covers

Frequently asked questions

More Sparks like this