English:Passwords, Privacy, and Personal Data
Passwords, Privacy, and Personal Data
Introduction
You use digital tools to learn, play, create, message, and share. Each time you sign in, search, post, take a photo, or use an app, information can be created or stored. Learning how to protect that information is part of being a responsible digital citizen.
In this course for Grades 5–6, you will learn how to protect personal data, make safer password choices, use privacy settings, spot phishing, and think before you share. You do not need to be afraid of the internet. You do need good habits, careful thinking, and help from trusted adults when something feels wrong.
Important classroom rule: Never type, show, test, or share a real password during a lesson. Use invented examples only.
As you watch the video, notice how pausing before you act can help you make safer and kinder choices online.
What Is Personal Data?
Personal data is information connected to a person who can be identified. Some pieces of data can identify you by themselves. Other pieces become identifying when they are combined.
Examples include your name, home address, phone number, email address, birthday, school, photos, voice recordings, usernames, device information, and location. Some information is especially sensitive, such as passwords, health information, financial information, or exact live location.
Personal, Private, and Public Information
Personal information is information about you. Not all personal information has to be secret, but you should think before sharing it.
Private information is information that should be protected because sharing it could cause harm or make it easier for someone to access an account, find you, or pretend to be you. Passwords, one-time login codes, home addresses, and private messages are examples that usually need strong protection.
Public information is information that is meant to be seen by many people. Even public information still deserves care. A public post can be copied, saved, or shared with a different audience.
A useful question is: Who needs this information, and why? If you are unsure, ask a parent, guardian, teacher, or another trusted adult before sharing.
Watch for the difference between information that is simply about you and information that should stay private.
Small Clues Can Add Up
A single fact may seem harmless. Several facts together can reveal much more. A photo of a team shirt, a school name in your profile, a regular meeting time, and a location tag could together show where you are likely to be.
This is why privacy is not only about keeping one big secret. It is also about noticing how small clues connect.
How Digital Data Travels
When you use a website or app, information can move between your device and a service. The service may need some information to work, such as a username to identify your account or a setting that remembers your language.
Other data can be created by your activity. Search terms, clicks, watch history, game progress, device type, or approximate location can become part of a record. Different services collect different data, so you should not assume every app works the same way.
A privacy policy explains how a service says it handles information, but these documents can be long. For younger users, a trusted adult can help review important settings and rules.
Your Digital Footprint
A digital footprint is the trail of information connected to what you do online. It can include things you choose to post and things systems record about activity.
Your digital footprint can be positive. A helpful tutorial, kind comment, school project, or creative artwork can show your skills and interests. But some posts can last longer than you expect because people can save screenshots, copy files, or repost them.
Before posting, ask: Would I be comfortable if a teacher, family member, or future teammate saw this later?
While watching, think of one part of a digital footprint that you control directly and one part that may be harder to control.
Passwords and Passphrases
A password is secret information used to help prove that you are allowed to enter an account. A passphrase is usually a longer password made from several words or a longer piece of text.
A password works only if it is difficult for other people to guess and if you keep it secret from people who should not have access.
Make It Long, Unique, and Secret
Three useful password habits are:
- Long: A longer password or passphrase is generally harder to guess than a short one. Current NIST guidance for people who must create passwords recommends at least 15 characters.
- Unique: Use a different password for each important account. If one password is stolen, the same password cannot unlock all your other accounts.
- Secret: Do not share passwords with friends or strangers. Follow your family or school rules about whether a parent, guardian, or authorized school adult helps manage an account.
A passphrase can be easier to remember because it can use several unrelated words. Do not copy examples from lessons into a real account. Create your real passwords privately, following the rules of the service and the guidance of a trusted adult.
Avoid Easy-to-Guess Choices
Names, birthdays, pet names, sports teams, school names, and simple patterns can be easy to guess, especially if the same clues appear on a public profile.
Changing a simple word into a predictable pattern does not automatically make it strong. Length, uniqueness, and secrecy matter more than making a short password look complicated.
If your family uses a password manager, it can create and store different passwords for different accounts. A trusted adult should help you choose and set up a password manager safely.
Add Another Layer with MFA
Multi-factor authentication, often called MFA, asks for more than one kind of proof before letting someone into an account. For example, an account may ask for a password and then a code from another device, an authenticator app, or another approved method.
MFA helps because a stolen password by itself may not be enough to enter the account. Never give a one-time login code to someone who unexpectedly asks for it.
Privacy Settings and App Permissions
Privacy settings help you control who can see information and what an app can access. Settings can change, so it is useful to review them with a trusted adult from time to time.
Common choices include who can see a profile, who can contact you, whether posts are public or limited, whether an app can use your camera or microphone, and whether location access is always on or only used when needed.
A good rule is give an app only the access it needs for the job you want it to do. A drawing app may need access to saved pictures if you choose to import one, but it may not need your exact location.
Location Can Be Useful and Sensitive
Location features can help with maps, weather, finding a lost device, or meeting family members. They can also reveal where you are.
Before sharing live location, check who can see it, how long sharing will last, and whether sharing is really needed. Avoid posting your exact current location publicly.
Photos may also contain metadata, which is information stored about a file. Depending on the device and settings, metadata can include the date, device details, or location information. You do not need to memorize technical details; you do need to know that a photo can contain more information than what you see in the picture.
Photos, Consent, and Other People
Privacy is not only about your own data. Other people deserve choices too. Before posting a photo, video, voice recording, or private message that includes someone else, ask for permission when appropriate and follow school or family rules.
Consent means giving permission freely and with enough information to understand the choice. Someone who agreed to be in a class photo did not automatically agree to have that photo posted publicly.
If someone asks you to remove a picture of them, take the request seriously and involve a trusted adult if needed.
Phishing and Trick Messages
Phishing is a trick that tries to make you reveal information, click a harmful link, open a risky file, or give access to an account. Phishing can arrive by email, text message, game chat, social media, or another messaging service.
A phishing message may pretend to come from a company, teacher, friend, game, or famous person. It may try to make you act fast by saying your account will close, you won a prize, or there is an emergency.
Clues That Should Make You Check
Be careful when a message is unexpected and asks you to do something sensitive. Warning signs can include:
- Pressure to act immediately.
- Requests for passwords, login codes, money, or personal information.
- A link that does not match the place you expected to visit.
- A message from an unfamiliar account or a slightly changed username.
- An attachment you were not expecting.
- A story that feels too good, too scary, or too urgent to check.
One clue alone does not prove a message is fake. Instead of guessing, verify in a safer way. Open the official app yourself, type the known website address yourself, or ask a trusted adult.
As you watch, look for clues that help students tell a normal message from a phishing attempt.
Stop, Check, Ask
Use this simple routine:
- Stop: Do not click, reply, download, or enter information right away.
- Check: Look at the sender, the request, and where the link would go.
- Ask: Show the message to a trusted adult if you are unsure.
Reporting a scam helps protect other people too. Use the report or block tools of the service when appropriate and with adult guidance.
Safer Sharing Habits
Before you post, message, upload, or turn on sharing, try the PAUSE check:
- Purpose: Why am I sharing this?
- Audience: Who can see it now, and could they share it again?
- Useful: Does the app really need this information?
- Safe: Does this reveal a password, code, address, routine, or live location?
- Everyone: Does this respect other people's privacy and permission?
The goal is not to stop sharing. The goal is to share on purpose.
Watch how other students explain safe and responsible internet habits, then compare their ideas with the PAUSE check.
What If Something Goes Wrong?
Everyone can make a mistake online. What matters is getting help and acting quickly.
If you think a password was exposed, tell a trusted adult, change the password using the real service, and change it anywhere else it was reused. Turn on MFA if the account supports it and check whether the service offers a way to sign out other sessions.
If you clicked a suspicious link, stop entering information and tell a trusted adult. Do not keep clicking to investigate. An adult can help check the device and account safely.
If you posted personal information by mistake, remove it if you can, change the privacy setting, and ask a trusted adult or the service for help. If someone is threatening, pressuring, or blackmailing you, save evidence if it is safe to do so and get help from a trusted adult immediately.
If a device is lost, tell a trusted adult. Families may use device-finding or remote-lock features if they were set up beforehand.
Think Like a Digital Safety Expert
Good digital safety is a set of decisions, not one magic button. A strong password cannot protect you if you give it to a fake login page. A private account cannot protect a photo that a friend reposts publicly. MFA adds protection, but you still need to guard login codes and check unexpected requests.
The strongest habit is to combine tools with judgment: use strong account protection, limit unnecessary data sharing, check messages before acting, respect consent, and ask for help when you are unsure.
Interactive Tasks
Quiz: Test Your Knowledge
What is personal data? (Information connected to an identifiable person) (!Only information printed on paper) (!Only secret passwords) (!Only school grades)
Which item should normally stay secret? (Your account password) (!Your favorite color) (!A public book title) (!The name of a planet)
Which is a strong password habit? (Use a long unique passphrase) (!Reuse one password everywhere) (!Use your birthday for every account) (!Share passwords with friends)
Why should important accounts use different passwords? (One stolen password cannot unlock every account) (!Different passwords make screens brighter) (!Different passwords increase internet speed) (!Different passwords remove all advertisements)
What does multi factor authentication add? (Another proof of identity) (!A public profile) (!A shorter username) (!A faster internet connection)
Which message is most suspicious? (An unexpected message asks you to click and log in) (!A teacher returns your paper in class) (!A friend says hello at school) (!A library book shows its title)
What is a digital footprint? (The trail of information connected to online activity) (!A shoe print made on a keyboard) (!A list of computer brands) (!A map of every road in a city)
What should you do before sharing live location? (Check who can see it and whether it is needed) (!Make it public for everyone) (!Post it with your password) (!Send it to unknown accounts)
What is a respectful step before posting a classmate photo? (Ask for permission) (!Add their home address) (!Post it secretly) (!Share it with strangers)
What should you do with a suspicious login message? (Do not click and show a trusted adult) (!Enter your password immediately) (!Send the message your login code) (!Forward it to many strangers)
Memory Game
| Passphrase | A long secret made from several words or text |
| Privacy | Control over access to information about you |
| Metadata | Information stored about a digital file |
| Phishing | A trick that tries to steal information or access |
| Consent | Freely given permission for a specific choice |
| Footprint | The trail connected to your online activity |
| MFA | More than one kind of proof used to enter an account |
Drag and Drop
| Match the correct terms. | Topic |
|---|---|
| Long passphrase | Several unrelated words used as a memorable secret |
| Private profile | A setting that limits who can see account content |
| Trusted adult | A person you can ask for help with a worrying online situation |
| Suspicious link | A web address that should be checked before opening |
| Location permission | A choice that controls whether an app can use where you are |
...
Crossword Puzzle
| Passphrase | What is a long password made from several words often called |
| Privacy | What word means control over access to information about you |
| Phishing | What is the name for a trick message that tries to steal information |
| Consent | What word means freely given permission |
| Metadata | What is information stored about a digital file called |
| Footprint | What word completes the term digital blank for your online trail |
LearningApps
Cloze Text
Open-Ended Tasks
Easy
- Personal Data Sort: Make two groups using invented examples: information that is usually safer to share in class and information that should usually stay private. Explain one choice from each group.
- Passphrase Poster: Create a poster showing the ideas long, unique, secret, and MFA. Use only a made-up passphrase that will never be used for a real account.
- Phishing Detective: Study a teacher-made fake message, circle at least three warning signs, and explain what you would do before clicking anything.
- Privacy Conversation: Interview a trusted adult about one family or school rule for protecting personal data. Do not ask for or record any real password.
Standard
- Digital Footprint Comic: Draw a six-panel comic in which a character decides whether to post something and considers audience, future sharing, and other people's privacy.
- App Permission Map: Using a demo device, teacher screenshots, or an invented app, map which permissions are needed for its main job and which permissions seem unnecessary.
- Photo Consent Guide: Create a one-page guide for a class club explaining how to ask before posting photos, how to respect a no, and how to remove a post if needed.
- Digital Safety Video: Produce a short video role-play showing the Stop, Check, Ask routine when a character receives a suspicious message. Use fictional names and accounts only.
Advanced
- Data Journey Diagram: Draw how fictional data might move when a student signs into a game, changes a setting, and shares a score. Mark places where a privacy choice can be made.
- Password Length Experiment: Compare several invented passphrases of different lengths and patterns, then explain why length and uniqueness improve security. Never test real passwords or real accounts.
- School Privacy Walkthrough: With teacher permission, visit the school library or computer area and observe how sign-ins, screens, printouts, and shared devices are protected. Suggest two improvements without collecting anyone's personal data.
- Cyber Safety Workshop: Design a ten-minute mini-lesson for younger students that teaches one password habit, one privacy habit, and one phishing habit, followed by a simple practice scenario.
Learning Assessment
- Scenario Reasoning: A game chat asks for your login code to unlock a prize. Explain the warning signs, the safest next action, and why your choice protects the account.
- Privacy Tradeoff: Compare an app that needs location only while giving directions with an app that asks for location all the time. Explain which permission choice fits each purpose and why.
- Account Protection Plan: Design a protection plan for a fictional student with three important accounts using unique passwords, MFA where available, and a safe recovery plan with a trusted adult.
- Phishing Analysis: Analyze a fictional message with urgency, a strange sender name, and a login link. Rank the clues from most to least worrying and justify your order.
- Digital Footprint Transfer: Imagine a class project is moved from a private classroom space to a public website. Identify what information should be reviewed before publishing and explain why.
- Consent Decision: A friend agreed to be photographed but did not discuss posting. Explain what you should do before uploading the photo and how your answer would change if the friend says no.
Evidence of Learning
You can show strong learning when your work demonstrates all four areas below.
Knowledge: You can explain personal data, privacy, passwords, passphrases, MFA, phishing, metadata, consent, and digital footprints in your own words.
Skills: You can spot warning signs in a suspicious message, choose safer privacy settings in a fictional or supervised example, create strong invented passphrases, and decide when to ask a trusted adult for help.
Products: Your posters, comics, diagrams, videos, guides, and workshop plans use invented information instead of exposing real private data.
Transfer: You can apply the same safety ideas to a new game, app, school platform, shared device, group chat, or photo-sharing situation that was not used as the original class example.
Responsible behavior: You protect other people's privacy as well as your own, respect consent, avoid sharing real passwords in class, and report problems rather than spreading them.
OERs on the Topic
For a deeper reference, you can explore the English Wikipedia article on personal data. Younger learners should use it with teacher or family guidance because some sections use legal and technical language.
Linked Learning Areas
This topic connects digital safety with Computer science, Media literacy, Digital citizenship, communication, ethics, and everyday decision-making. The central idea is simple: protect account access, share personal data on purpose, check suspicious requests, and respect other people's privacy.