Preparation

All you need to prepare is a PC and an internet connection. Alternatively, this exercise can also take place on a tablet or smartphone

Method / Process description

Passwords are still the most widely used method of user identification.

A password should be difficult for third parties to guess. Online services try to help us create a "good" password via so-called password policies. They force us to include numbers, capital letters and symbols in passwords. 

• Why do websites force us to include symbols, numbers and capital letters in our passwords?

Introduce the concept of 2-Authentication Factors and start a discussion:

• What methods do you know of for the 2-authenticator?
• Is it strong enough? What are its weaknesses?
• How secure is it to use the same password on all websites?
• Should you use a password management service? What are the advantages and disadvantages? 

Reference

• Deutsch
  • Sichere Passwörter - so gehts (Verbraucherzentrale, 01.02.2021)
  • Sicherer Passwort Generator 
• English
  • How secure is my password?
  • Have my password been stolen? 
  • Scattered secrets; it allows you to see the password that has been hacked