Computing · JC 2 · Computer Networks and Communication · Semester 2

Protecting Information Online: Passwords and Privacy Settings

Students will learn practical strategies for protecting their online accounts and personal information, including creating strong passwords and using privacy settings.

• MOE Syllabus Outcomes
• MOE: Computer Networks and Cybersecurity - Middle School

About This Topic

Protecting Information Online: Passwords and Privacy Settings teaches JC 2 students practical methods to secure their digital accounts. They identify strong passwords as those with 12 or more characters, mixing uppercase letters, lowercase letters, numbers, and symbols, while excluding dictionary words, birthdays, or names. Students practice adjusting privacy settings on platforms like Instagram, Facebook, or Google accounts to limit visibility of posts, profiles, and friend lists. These skills directly counter threats like brute-force attacks and oversharing in Singapore's connected networks.

This topic fits within the MOE Computing curriculum's Computer Networks and Communication unit, linking personal security to broader cybersecurity principles such as data encryption and access controls. Students grasp how weak passwords enable unauthorized network entry and how public settings expose information to strangers. Regular practice cultivates habits for safe online behavior, essential for future careers in Singapore's tech-driven economy.

Active learning excels for this content because students engage directly with tools and scenarios. Pair challenges to create unbreakable passwords or group audits of mock profiles make risks tangible. Collaborative feedback sessions reinforce best practices, boosting retention and confidence over passive instruction.

Key Questions

1. What makes a password strong and hard to guess?
2. How can privacy settings help control who sees your information?
3. Demonstrate how to adjust privacy settings on a common online platform.

Learning Objectives

• Analyze the characteristics of strong passwords, including length, character variety, and avoidance of predictable patterns.
• Evaluate the effectiveness of different privacy setting configurations on social media platforms to control information visibility.
• Compare the security risks associated with weak passwords versus strong passwords in the context of online account access.
• Demonstrate how to adjust privacy settings on a specified online platform to limit the audience for personal information.
• Synthesize best practices for password creation and privacy management into a personal online security plan.

Before You Start

Introduction to Internet Safety

Why: Students need a foundational understanding of online risks and basic safe browsing habits before learning specific protection strategies.

Digital Citizenship

Why: Understanding responsible online behavior, including respecting privacy and data, is crucial before learning to manage personal privacy settings.

Key Vocabulary

Brute-force attack	A cyberattack method that involves systematically trying all possible password combinations to gain unauthorized access to an account.
Multi-factor authentication (MFA)	A security process that requires users to provide two or more verification factors to gain access to a resource, such as an online account.
Privacy settings	Configuration options within online platforms that allow users to control who can view their profile information, posts, and connections.
Password complexity	The measure of a password's strength, determined by its length, use of uppercase and lowercase letters, numbers, and symbols.

Watch Out for These Misconceptions

Common Misconception

Longer passwords are always strong, regardless of content.

What to Teach Instead

Predictable long words like 'password123' crack easily via dictionary attacks. Pair guessing games show how personal details weaken them. Active revision activities help students prioritize complexity and randomness.

Common Misconception

Default privacy settings on social platforms are secure.

What to Teach Instead

Defaults often set profiles to public, exposing data widely. Group audits of demo accounts reveal this gap. Discussions during audits correct assumptions and emphasize custom checks.

Common Misconception

Using the same strong password across sites is safe.

What to Teach Instead

One breach compromises all accounts. Simulations of chain reactions from reuse drive this home. Peer teaching in challenges reinforces unique passwords per site.

Active Learning Ideas

Password Strength Challenge: Checker Race

Pairs brainstorm five passwords meeting criteria, then test them on an online strength checker like Have I Been Pwned. They note scores and revise weak ones based on feedback. Groups share top passwords and explain choices.

30 min·Pairs

Privacy Settings Audit: Demo Accounts

Small groups access teacher-provided demo accounts on Instagram or similar. They follow checklists to change visibility for posts, profiles, and tags, screenshot before-and-after. Teams present one key change and its benefit.

40 min·Small Groups

Phishing Role-Play: Guess and Defend

Whole class divides into attackers and defenders. Attackers guess weak passwords from clues; defenders adjust privacy on sample profiles. Debrief reveals patterns in failures and successes.

25 min·Whole Class

Secure Profile Build: Peer Review

Individuals set up a mock social profile with strong password and private settings. They swap with a partner for review using a rubric, then revise based on feedback.

35 min·Pairs

Real-World Connections

• Cybersecurity analysts at DBS Bank in Singapore use advanced techniques to monitor for suspicious login attempts and protect customer accounts from phishing and brute-force attacks.
• Social media managers for companies like Grab use platform privacy settings to ensure that only authorized personnel can access and manage company pages and user data.
• Individuals managing personal finances through online banking platforms like OCBC must employ strong passwords and understand privacy controls to prevent identity theft and financial fraud.

Assessment Ideas

Quick Check

Present students with a list of 5-7 example passwords. Ask them to identify which passwords are strong and which are weak, providing a one-sentence justification for each choice based on complexity criteria.

Discussion Prompt

Pose the question: 'Imagine a friend is sharing too much personal information online. What specific advice would you give them about adjusting their privacy settings on a platform like Instagram, and why is this important?' Facilitate a brief class discussion.

Exit Ticket

On an index card, ask students to write down two characteristics of a strong password and one example of a privacy setting they can adjust on a common social media app. Collect these as students leave.

Frequently Asked Questions

What makes a password strong for JC 2 students?

A strong password needs 12+ characters with uppercase, lowercase, numbers, symbols, and no predictable patterns like names or words. Avoid sequences like '1234'. Tools like password managers generate them securely. Practice with checkers builds judgment; students test their own to see scores improve with complexity, linking to real hacking resistance.

How do privacy settings control online information?

Privacy settings let users choose audiences for posts, profiles, photos, and lists, such as friends-only or custom groups. On Instagram, toggle account to private and limit story views. Demos show step-by-step changes. Regular audits prevent accidental public shares, vital in networks where data travels fast.

How can active learning help teach passwords and privacy?

Active methods like pair challenges and group audits engage students hands-on with checkers and demo accounts. They create, test, and revise in real time, seeing weak choices fail dramatically. Collaborative reviews build peer accountability. This approach makes abstract risks concrete, improving retention by 30-50% over lectures per studies.

What are common risks of weak passwords and open privacy?

Weak passwords fall to brute-force or phishing, leading to account takeovers and identity theft. Open privacy exposes locations, contacts, and habits to strangers or scammers. Singapore sees rising cases yearly. Hands-on simulations quantify risks, like guessing times, motivating secure habits for lifelong protection.