Staying Safe Online · Passwords & Sign-ins · Lesson 5 of 5

Challenge: Dad's One Password

Help a parent move from one password everywhere to safe, simple sign-ins.

The same password everywhere

Your dad asks for help with his tablet. While you're there, he tells you something.

"I keep it simple," he says. "I use one password for everything. It's my dog's name and the year I got him, Rocky1998. That way I never forget."

He uses it for his email, his bank, his pharmacy and a few shopping sites.

Dad isn't careless. Lots of people do exactly this, and it worked fine for years. But you know two problems now. The password is easy to guess, and one leak would open every account.

You want to help without making him feel bad. Start by explaining the biggest risk in a way he'll understand.

Check for leaks

Dad wants to know if his password has already leaked. You open the browser together and go to the free site that checks email addresses against known breaches.

You type in his email address. The result shows his email was in two breaches, at an old shopping site and a game app.

Dad looks worried. You tell him this is very common, and you can fix it today.

A new main password

Now you'll change his passwords, starting with his email. Dad worries he'll never remember a new password for every site.

You show him the password manager built into his browser. It can make and remember a strong password for each site. He only needs to remember one main password.

Dad asks for help picking that one.

The last lock, and a warning

Dad's email now has a new, strong password. You turn on two-step verification, so a code goes to his phone when someone signs in from a new device.

He writes his main password on a card and puts it in his desk drawer at home. That's fine.

Before you leave, you give him one more rule. Someday a caller might say he's from the bank and ask for a code.