School: Minister Destiny Testimony Schools Track: Youth Class: Topic Library — Year 1 (Foundations) Presented by: Minister Destiny Marie Morgan, Muslim Ordained Minister
This lesson is educational information, written in plain language, and is not legal advice. It teaches you how to protect your own accounts and devices. If you are in danger right now, call 911.
Before you start
- This space is private. Nobody sees what you read or how you answer. Your progress is saved only in your own browser on this device.
- We never ask your name. If you earn a certificate, you download it first and write your own name on it after.
- Pass the test at 80% or higher to earn this unit's certificate. You can retake the test as many times as you need — each retake presents the questions in a different order, with the answer choices in a different order too. Answers are not shown — go back, find what you missed in the lesson, and learn it for real.
- If you are in danger right now: call 911. If you cannot talk out loud, text HOME to 741741 (Crisis Text Line) or call or text 988 any time, day or night.
The lesson
Part 1. What Cyber Security Awareness Means for Everyday Life
Cyber security awareness means knowing how to keep your accounts, your device, and your information yours. Your accounts are worth more than you might think: your game account may hold things you earned or bought, and your email is the master key — with it, someone can reset the passwords on almost everything else.
Here's the honest picture of how accounts get taken. It is almost never a genius in a hoodie typing furiously at one kid. It's big, automatic operations: stolen password lists tried on thousands of accounts at once, and fake messages sent to huge numbers of people, hoping a few are tired, rushed, or scared enough to click.
Remember the rule that beats almost every trick: when a message creates panic or a countdown, slow down. Real companies can wait while you check. Fakes can't.
Part 2. Passwords and Passphrases That Hold
A password has one job: to be hard for everyone but you to guess — including computer programs that try millions of guesses.
- Long beats complicated. A passphrase — several ordinary words strung together — is much stronger than a short password full of symbols, and way easier to remember.
- Every account gets its own. If one game's password leaks in a data breach and you used that same password for your email, the leaked list gets tried on your email next — automatically. A different password for every account means one leak stays one small problem. And skip the guessable: your name, your pet, your team, your birthday.
- A password manager — an app that remembers a different strong password for every account.
- Your passwords are yours alone. Not for friends, not for anyone. Sharing a password is handing over a key that keeps working after the friendship changes. A real friend will never ask.
Part 3. Two-Factor Authentication and Account Recovery
Two-factor authentication means your account asks for a second proof it's you after your password — usually a code on your own device. Turn it on everywhere it's offered: email first, then games and socials. With it on, even a stolen password usually isn't enough to get in.
One rule protects the whole system: your code is for your eyes only. If someone messages or calls saying they're from a game company, a platform, or even "support," and asks you to read them a code that just arrived — that person is trying to break into your account, with you as their helper. The code really arriving proves nothing; they triggered it by trying to log in as you. Real companies never ask for your code. Block, and tell a trusted adult.
Set yourself up to recover accounts before anything goes wrong: keep a reachable email or phone number on your important accounts. And if you ever see an alert like "new sign-in to your account" that wasn't you — don't swipe it away. Tell a trusted adult and use Part 6.
Part 4. Phishing — Fake Messages and Fake Sites
Phishing is a fake message built to trick you into clicking, logging in, or handing something over. It wears costumes: "Your account will be deleted," "You won a prize," a "free" game-currency offer.
Spot the pattern:
- Pressure: act now, last chance, account closing, a countdown.
- Something to click that takes you to a fake website — a copy of a real login page. It can look perfect; looks prove nothing.
- Asks for things real companies don't ask for in messages: your password, your code, payment for a "verification."
- Small wrongness: a sender address that's almost the real one, weird spelling.
Your defense is a habit, not a talent: stop, don't click, check the real way. Open the app yourself, or type the address you know. If the "problem" is real, it will be waiting inside the real app. And never log in from a link a message sent you — that one habit blocks most fake sites.
Part 5. Updates, Public Wi-Fi, and Backups
Updates fix holes. When your phone, apps, or games update, they repair security flaws attackers use. Turning on automatic updates is one of the easiest protections there is.
Public Wi-Fi is not private. The free network at a café, mall, or airport is shared with strangers, and fake networks exist. Rules that keep you safe: use your phone's data for anything sensitive when you can; don't log into important accounts on public Wi-Fi; never install something a Wi-Fi sign-in page suddenly demands.
Backups save your stuff. A backup is a copy of your photos, schoolwork, and files kept in a second place. If your device breaks or gets lost, a backup means your memories and work still exist. Set it up with a trusted adult and let it run automatically.
Part 6. If Something Goes Wrong — Contain, Report, Recover
If you think an account was taken or someone is pressuring you for codes or passwords — act fast, and tell a trusted adult right away. Nobody in this school will blame you.
- Stop contact. Don't reply to the fake messages, don't send codes, money, or anything else.
- Save the evidence, then block and report in the app — screenshots of the messages first.
- Fix the real account the real way: open the actual app yourself, change the password to a new passphrase, turn on two-factor authentication, and change any other account that used that same password, email first. If your account sent weird messages, warn friends not to trust requests coming from it.
- If money or game items were taken, a trusted adult can help report it — including at ic3.gov, the FBI's internet crime reporting site.
- Breathe. Then keep the habits. Almost everyone gets fooled once; what matters is that you told quickly.
Words to know — Cyber Security Awareness
- Passphrase — a password made of several ordinary words together — long, strong, and easier to remember.
- Password manager — an app that safely remembers a different strong password for every account.
- Two-factor authentication — a second proof it's you, like a code on your own device, after your password.
- Phishing — a fake message pretending to be a real company or person, trying to trick you into clicking.
- Fake website — a copied page that looks like a real login page but records what you type.
- Software update — a fix from the maker of your device or app; updates repair security holes.
- Public Wi-Fi — shared wireless internet in a public place; convenient, but not private.
- Backup — a copy of your important files kept in a second place.
- Trusted adult — a grown-up you know and trust — the person you tell fast when something goes wrong.
Myths vs facts — Cyber Security Awareness
- Myth: Hackers only go after famous people and rich people. Fact: Attacks are mostly automatic and aimed at everyone at once. Your accounts are worth taking.
- Myth: A short password with lots of symbols is the strongest kind. Fact: Length wins. A passphrase of several words is stronger and easier to remember.
- Myth: If the code really came to my phone, the person asking must be legit. Fact: The person asking probably triggered that code by trying to log in as you. Real companies never ask for your code.
- Myth: If I clicked a bad link, I'm in huge trouble and should hide it. Fact: Clicking happens to almost everyone. Telling a trusted adult fast is how a click stays small.
Think it through — Cyber Security Awareness
Jayden gets a message in his favorite game from an account that looks official: "SECURITY ALERT — your account was reported. Verify within 24 hours or it will be banned." The link opens a login page that looks perfect, and Jayden's hands are shaking as he starts typing his password. His friend Desmond says, "It looks real, just do it." What should Jayden do?
Walk it through: (1) Name every warning sign from Part 4: a threat ("will be banned"), a countdown (24 hours), a link in a message leading to a login page, and fear doing the pushing. Perfect looks are proof of nothing — copied pages are cheap. (2) Apply Part 1's rule: the message needs Jayden rushed; real companies can wait. So Jayden stops and closes the page. (3) Check the real way, per Part 4: open the game app himself. If there were a real problem, it would appear there. (4) Protect others: report the fake account and tell a trusted adult. (5) Notice what didn't happen: Jayden lost nothing by waiting five minutes. Checking is always free; rushing is what costs.
Try this — Cyber Security Awareness
- ☐ My email has its own passphrase, different from every other account, and two-factor authentication is on.
- ☐ I can say the code rule out loud: my codes are for my eyes only.
- ☐ I never log in from a link in a message — I open the real app myself.
- ☐ Automatic updates are turned on for my device and apps, and my photos are backed up somewhere besides my device.
- ☐ I know my trusted adult, and I would tell them the same day if an account problem happened.
Resources to keep — Cyber Security Awareness
- 911 — call if you are in danger right now.
- Crisis Text Line — text HOME to 741741 — if you'd rather type than talk.
- FBI Internet Crime Complaint Center — ic3.gov — a trusted adult can help you report internet crime.
- Childhelp — 1-800-422-4453 — if an adult is hurting you.
What you earned / what's next — Cyber Security Awareness
✅ Topic Library — Cyber Security Awareness complete (test score 80% or higher): You can build a passphrase that holds, explain why every account needs a different one, use two-factor authentication and the code rule, spot phishing and fake sites, keep your device updated and backed up, and follow the steps if something goes wrong.
Your certificate
Minister Destiny Testimony Schools Certificate of Completion — Topic Library: Cyber Security Awareness
This certificate is presented by Muslim Ordained Minister Destiny Marie Morgan
Awarded to: ______________________________ (write your name here after you download — your name is never collected or stored by this school)
Date completed: ______________
Congratulations. You now know the secrets that aren't secrets: long passphrases, a different one for every account, codes you never share, and the calm habit of checking before you click. — Minister Destiny Marie Morgan
This is a certificate of educational completion from Minister Destiny Testimony Schools. It is not a state license, a government certification, or legal training for representing anyone.
What's next: Keep building your safety map.
Sources
- staysafeonline.org — National Cybersecurity Alliance, family guidance on passwords
- cisa.gov — Cybersecurity & Infrastructure Security Agency, "Secure Our World" program
Minister Destiny Testimony Schools — Youth. Educational information only, not legal advice. Help lines: 911 in an emergency · 988 Suicide & Crisis Lifeline (call/text 988) · Crisis Text Line (text HOME to 741741) · Childhelp 1-800-422-4453.