What to do if your passphrase is shared or leaked

Tip: Choose Save as PDF in the print dialog to download. Use A4 paper size.

What to do if your passphrase is shared or leaked

Name:
Date:
Class:
A

Quick Questions

Shade in the A or B circle for each question.

1. Your friend saw you type your passphrase. What should you do?
A Keep it the same and hope your friend forgets it
B Change your passphrase straight away and tell a trusted adult
2. Which is the best first step if you think your passphrase has leaked?
A Change it right now
B Wait a week to see if anything happens
3. Who should you tell if your passphrase has been shared?
A A trusted adult, like a parent or teacher
B Nobody, because it is too embarrassing
4. You used the same passphrase on a game and a school account. The game says it was leaked. What should you do?
A Change it only on the game
B Change it on the game AND the school account
5. After changing a leaked passphrase, what is a smart thing to check?
A Look for odd activity, like posts or messages you did not send
B Nothing. Once it is changed, you never need to look again
B

Match the Pairs

Draw a line connecting each item on the left to its match on the right.

Left columnRight column
1IF shared THEN change_passphrase() ATell a trusted adult so they can help you stay safe.
2tell_adult() BIf you reused the passphrase, changing only one account leaves the others open. Change it on every account that used it.
3If you used the same passphrase on other accounts, change it on those accounts too. CIf someone might know your passphrase, change it straight away.
4After a leak, check for odd activity such as logins or messages you do not recognise. DFOR each account with same passphrase: change_passphrase()
5IF leaked THEN wait_a_week() EWaiting gives someone time to use your account. You should change the passphrase straight away.
6IF reused THEN change_one_account() Fcheck_activity("odd logins")
C

Definitions

change it and tell an adult
D

Fill in the Blanks

Complete each line of code by filling in the missing parts.

1.
IF passphraseLeaked = true THEN ________________() tellAdult()
2.
IF passphraseLeaked = true THEN changePassphrase() _________()
3.
__ passphraseLeaked = true THEN changePassphrase() END IF
4.
IF reused = ____ THEN changeOnOtherAccounts() END IF
5.
changePassphrase() tellAdult() _____________()
E

Spot the Error

Shade in the letter of the line that contains an error.

Question 1
A IF passphrase_leaked THEN
B change_passphrase()
C ignore_it()
D END IF
Question 2
A IF friend_saw_passphrase THEN
B change_passphrase()
C tell_adult()
D wait_a_month()
E END IF
Question 3
A IF passphrase_is_safe THEN
B change_passphrase()
C tell_adult()
D END IF
Question 4
A leaked ← true
B reused ← true
C IF NOT reused THEN
D change_on_other_accounts()
E END IF
Question 5
A leaked ← true
B change_passphrase()
C tell_adult()
D send_passphrase_to_friend()

Answer Key

What to do if your passphrase is shared or leaked
Section A: Quick Questions
Q1
B — Change your passphrase straight away and tell a trusted adult
Q2
A — Change it right now
Q3
A — A trusted adult, like a parent or teacher
Q4
B — Change it on the game AND the school account
Q5
A — Look for odd activity, like posts or messages you did not send
Section B: Match the Pairs
Q1
IF shared THEN change_passphrase() → If someone might know your passphrase, change it straight away.
Q2
tell_adult() → Tell a trusted adult so they can help you stay safe.
Q3
If you used the same passphrase on other accounts, change it on those accounts too. → FOR each account with same passphrase: change_passphrase()
Q4
After a leak, check for odd activity such as logins or messages you do not recognise. → check_activity("odd logins")
Q5
IF leaked THEN wait_a_week() → Waiting gives someone time to use your account. You should change the passphrase straight away.
Q6
IF reused THEN change_one_account() → If you reused the passphrase, changing only one account leaves the others open. Change it on every account that used it.
Section C: Definitions
Q1
change it and tell an adult — If someone else might know your passphrase, change it straight away and tell a trusted adult. If you used it on other accounts, change it there too and check for odd activity.
Section D: Fill in the Blanks
Q1
IF passphraseLeaked = true THEN changePassphrase() tellAdult()
Q2
IF passphraseLeaked = true THEN changePassphrase() tellAdult()
Q3
IF passphraseLeaked = true THEN changePassphrase() END IF
Q4
IF reused = true THEN changeOnOtherAccounts() END IF
Q5
changePassphrase() tellAdult() checkActivity()
Section E: Spot the Error
Q1
C — If your passphrase has leaked, you must tell a trusted adult. Ignoring it does not keep you safe. Line 3 should be tell_adult().
Q2
D — After a passphrase is shared you should check the account for odd activity straight away, not wait. Line 4 should be check_for_odd_activity().
Q3
A — The steps should run when other people know your passphrase. A safe passphrase needs no action. Line 1 should be IF others_know_passphrase THEN.
Q4
C — You must change the passphrase on other accounts when it WAS reused. NOT reused would skip those accounts. Line 3 should be IF reused THEN.
Q5
D — Sending your passphrase to anyone makes the problem worse. The last step should be check_for_odd_activity().