Common patterns
Simple choices used by many people.
123456 · password · qwerty · asdfPART 1 · MAKE IT HARDER TO GUESS
Welcome01 / 9
PART 2 · PASSWORDS
We all use
passwords.
Games, email, school and devices—
one small password protects a lot.
••••✓
@
A
7
!
PASSWORDS ARE EVERYWHERE
One password can
protect a lot.
Messages. Photos. Schoolwork. Game progress. Personal information.
What do your passwords protect?
✉Emailmessages + resets
★Gamesprogress + items
▤Schoolwork + files
▣Devicesapps + photos
MY
ACCOUNT✓
ACCOUNT✓
LOOK · THINK · CHOOSE
Which password would
be guessed first?
Choose the simplest one, then explain the pattern.
REAL BREACH DATA
The most leaked passwords
were also the simplest.
How many accounts used each password.
NCSC analysisPublished 2019 · historical data, not a live ranking
1
12345623.2 million2
1234567897.7 million3
qwerty3.8 million4
password3.6 million5
11111113.1 millionWHAT GETS GUESSED FIRST?
Attackers begin with
predictable choices.
Leaked password data shows the same weak ideas again and again.
Dictionary words
Single, common words.
football · dragon · summer · monkeyCombinations with
personal information
personal information
Names, places, teams and favourite things joined together.
SamLovesSunshine · EaglesFan · ILoveManchesterWhat makes all of these choices predictable?
RANDOM IS HARDER TO GUESS
But can you
use it?
Random characters can be strong—but humans may forget or mistype them.
How can we make it strong and still make it usable?
COMPLEX RANDOM STRING
fG7!qP9@zL2#xVFOR A COMPUTERHarder to guess✓
→
FOR A PERSONHard to remember
and easy to mistype×
and easy to mistype×
THE BETTER GOALStrong enough for security. Usable for a person.
MEET THE KEYBOARD
More characters.
More choices.
Use character groups to add variety.
Length still comes first.
~`
!1
@2
#3
$4
%5
^6
&7
*8
(9
)0
_-
+=
qQ
wW
eE
rR
tT
yY
uU
iI
oO
pP
{[
}]
|\
aA
sS
dD
fF
gG
hH
jJ
kK
lL
:;
"'
Shift
zZ
xX
cC
vV
bB
nN
mM
<,
>.
?/
Numbers / digits 0–9Uppercase + lowercase A / aSpecial characters / punctuation @ # ! 'Hold Shift for uppercase letters and the top symbols.
BUILD IT STEP BY STEP
Start simple.
Add more.
Take a familiar phrase. Add letters, numbers, symbols and more length.
What changed at each step?
STARTING INFORMATIONKelmscott Senior High School
1
TAKE THE INITIALSKSHS
2
ADD MORE LETTERSKSHSWA
3
ADD NUMBERSKSHSWA2026
4
ADD SYMBOLS + LENGTHKSHS@WA2026!Digital
Classroom example only.School names and years are public, so never copy this as a real password.
PART 2 · KEEP IT PRIVATE
A strong password still
fails if it leaks.
Length and complexity cannot protect a password that other people can see.
▧Photo or screenshot
A password appears in the background.
●Group chat or message
A private secret can be copied or forwarded.
☺Personal information
Names, birthdays, pets and teams can be public clues.
↻The same password
One leaked account can put every account at risk.
LONG•HARD TO GUESS•PRIVATE•UNIQUE