Skip to content

Activity Handout: Strong Passwords & MFA

Name: _____ Date: _____

This handout supports Cybersecurity Merit Badge requirement 5(c) items about passwords, MFA, and system security.

Part 1 – Strong Passwords

  1. Write down three weak passwords someone might use (do not use your real passwords).

  2. Weak password 1: _______

  3. Weak password 2: _______

  4. Weak password 3: _______

  5. For each weak password above, rewrite it as a stronger password or passphrase (do not use a real password you plan to use; these are examples only).

  6. Stronger version 1: __________

  7. Stronger version 2: __________

  8. Stronger version 3: __________

  9. Checklist – What makes a strong password? Mark the ones you used:

  10. [ ] Long (at least 12–16 characters)

  11. [ ] Mix of letters, numbers, and symbols
  12. [ ] Not based on your name, birthday, or username
  13. [ ] Not reused on multiple sites
  14. [ ] Easy for you to remember, hard for others to guess (passphrase)

Part 2 – Multi-Factor Authentication (MFA)

With a parent/guardian and your counselor’s guidance, turn on MFA for at least one account (email, gaming, school, etc.).

Account (type only, not full address): _____
MFA method used (app, text, hardware key, etc.): ____

Questions

  1. Why does MFA improve security?
  1. What would an attacker need besides your password to get in?

Part 3 – Password Manager (Optional Extension)

If allowed, install or explore a password manager (with a parent/guardian).

  • Name of password manager: _________
  • One benefit of using a password manager:

Counselor Sign-Off Notes

Use this area to record what the Scout demonstrated (changing a password, enabling MFA, explaining how it works, etc.).