What your child will learn
Explain why a password vault beats a paper notebook kept in a drawer — the vault generates a unique strong password per site, so a stolen notebook only loses the master, not a copy of every reused site
Pick a strong master password as a long passphrase the family can type from memory — ≥4 random words + 1 number + 1 symbol, ≥16 chars total — and remember that one master password unlocks the entire vault
Recognize that autofill protects against phishing, not just saves typing — the manager checks the real site address before typing, so a fake login page on the wrong domain gets nothing
If the master password is forgotten, use the paper recovery code (kept by a parent) once to set a new master password — never email the recovery code, never store it in a notes app on the same phone
Decide which credentials belong in the family shared vault (Wi-Fi, streaming, household email) vs. the personal vault (school login, gaming account, socials the kid considers private), and never put a gaming handle that can spend money in shared
How this mission works
You are a 4th or 5th grader sitting at the kitchen table with a parent, setting up the family password manager for the first time. Across five scenarios, you make every vault-owner decision a kid in grades 3–5 can be proud of: why a password vault beats a paper notebook kept in a drawer (the vault generates a unique strong password per site, so a peeked-at drawer only ever holds the one master password — not a copy of every reused site), what a master password actually is and how to phrase it (one strong passphrase the family can type from memory, ≥4 random words + 1 number + 1 symbol, ≥16 chars total), how autofill protects against phishing (the manager checks the real site address before typing, so a fake login page on the wrong domain gets nothing), what to do if the master password is forgotten (use the paper recovery code ONCE to set a new master password — recovery code lives on paper with a parent, never email, never notes app), and which credentials belong in the family shared vault vs. the kid's personal vault (shared = Wi-Fi + streaming + household email; personal = school + gaming + private socials; never in shared = a gaming handle that can spend money with a saved card). Pass 4 of 5 to earn the 🔐 Password Vault Pro Jr badge and 150 XP. Designed for Grades 3 through 5 — plain-language vocabulary, anime-inspired scenario framing, server-graded 5-question quiz with no client-side scene rendering.
What students actually encounter
Your family keeps your logins in a paper notebook in the kitchen drawer. Why is a password manager a safer upgrade for a kid in grades 3–5? — A peeked-at notebook exposes every reused password across every site; the vault generates a unique password per site so only the master is ever at risk.
Your family just installed a password manager. What is the master password? — One strong passphrase the family can type from memory: ≥4 random words + 1 number + 1 symbol, ≥16 chars total.
A pop-up asks if your password manager should autofill your school password. How does autofill protect you from a phishing page that LOOKS like the real login? — The manager checks the REAL site address before typing — if the address bar shows the wrong domain, autofill does nothing.
You forgot the family master password. What is the safe move? — Use the PAPER recovery code ONCE to set a new master password. Never email it, never notes-app it — only paper with a parent.
Shared vault vs. personal vault: where does each credential go? — Shared: Wi-Fi + streaming + household email. Personal: school + gaming + private socials. Never in shared: a gaming handle that can spend money with a saved card.
Cipher is with them the whole way
When a student gets stuck on Password Manager Pro Jr: Vaults, Master Passwords & Family Sharing, Cipher appears with a mission-specific nudge — no spoilers, just a hint toward the right thinking. Make a wrong choice, and Cipher explains the real-world consequence. Finish the mission, and Cipher generates a personalized performance debrief based on exactly how the student played it.
ISTE alignment
Students in grades 3–5 learn to advocate for safe, ethical password hygiene by making the five vault-owner decisions a kid can drive alongside a parent: (1) why a password vault beats a paper notebook (vaults generate unique per-site credentials, so a stolen notebook only exposes the master, not every reused site), (2) what a master password is (one strong passphrase the family can type from memory: ≥4 random words + 1 number + 1 symbol, ≥16 chars total), (3) how autofill protects against phishing (the manager checks the real site address before typing, so a fake login page on the wrong domain gets nothing), (4) what to do if the master password is forgotten (use the paper recovery code ONCE to set a new master password — recovery code lives on paper with a parent, never email, never notes app), and (5) which credentials belong in the family shared vault vs. the personal vault (shared = Wi-Fi + streaming + household email; personal = school + gaming + private socials; never in shared = a gaming handle that can spend money with a saved card). Aligned to NIST NICE Cybersecurity Awareness (personal security hygiene practices: password management), CISA K-12 Digital Identity (strong MFA posture: unique per-site credentials and a single master passphrase), and ISTE Digital Citizen 2a (positive, safe, legal, and ethical digital behaviors).