{"id":166323,"date":"2020-09-21T23:14:18","date_gmt":"2020-09-21T21:14:18","guid":{"rendered":"https:\/\/www.myza.co.za\/password-education-should-be-age-appropriate-heres-how\/"},"modified":"2020-09-21T23:14:18","modified_gmt":"2020-09-21T21:14:18","slug":"password-education-should-be-age-appropriate-heres-how","status":"publish","type":"post","link":"https:\/\/www.myza.co.za\/press\/password-education-should-be-age-appropriate-heres-how\/","title":{"rendered":"Password education should be age-appropriate: here’s how"},"content":{"rendered":"

Children are increasingly being exposed to, and using, technology from a very young age. This has never been more true than in 2020 when the vast majority of children worldwide have used online resources to access educational resources and communicate with family and friends during the COVID-19 pandemic<\/a>. <\/p>\n

Many of the resources and websites used, along with the devices they are accessed on, require the use of a password to authenticate the user. However, young children don\u2019t necessarily have the skills and knowledge required to use and maintain these passwords appropriately. They are likely to use weak, predictable passwords and tell other children their passwords. <\/p>\n

Children come from a variety of different backgrounds and their parents will have a wide range of cyber-related skills. They might pick up some password related knowledge but there is no guarantee that they will learn the correct principles.<\/p>\n

This situation led us to wonder what principles children should learn, and when they should learn them. To answer this question, we carried out research<\/a> to:<\/p>\n

    \n
  1. \n

    Determine what current best practice is with respect to password management, gathering the information from international standards bodies. We wanted to gather a set of password \u201cbest practice\u201d principles.<\/p>\n<\/li>\n

  2. \n

    Gauge the best age at which to introduce each \u201cbest practice\u201d principle by consulting the child development literature. <\/p>\n<\/li>\n

  3. \n

    Develop three sets of age-appropriate password \u201cbest practice\u201d principles, to ensure that children learn the correct principles as and when they are ready for them.<\/p>\n<\/li>\n<\/ol>\n

    [embedded content]
    Teaching children about cyber security.<\/span><\/figcaption><\/figure>\n

    Organisations have tended to advise<\/a> that passwords should be at least eight alphanumeric characters long, contain digits or punctuation characters as well as letters, and both upper and lower case characters.<\/p>\n

    This essentially imposes complexity<\/em> requirements on passwords. But in 2017, the National Institute for Standards and Technology<\/a>, the UK\u2019s National Cyber Security Centre<\/a> and the Centre for Protection of National Infrastructure<\/a> published revised password guidelines. One important change is that length, not complexity, characterises strong passwords. Other widespread practices have also been replaced. For example, they advise against automatically replacing passwords at regular intervals. <\/p>\n

    \n

    Read more: A computer can guess more than 100,000,000,000 passwords per second. Still think yours is secure?<\/a> <\/strong> <\/em>\n<\/p>\n

    \n

    So, we worked through these reports and derived a set of password \u201cbest practice\u201d principles.<\/p>\n

    The next step was to investigate the child development literature, to provide a baseline for creating three sets of appropriate \u201cbest practice\u201d principles. A number of relevant developmental aspects emerged: emerging literacy<\/a>, ability to focus<\/a>, and
    \n    the ability to discriminate between people they can tell secrets to, and those they shouldn\u2019t<\/a>. <\/p>\n

    There are also issues for children with dyslexia<\/a>. These children experience difficulties in learning to read and to parse words into individual characters. This makes password usage challenging. <\/p>\n

    Best practice<\/h2>\n

    Based on these insights, we allocated the principles to three different sets, for children aged 4-5, 6-7 and 8-9. These ensure that the principles will be taught when children are ready to learn and apply them.<\/p>\n

    We then ran focus groups with parents of children of these ages, to ensure that we had assigned appropriate principles to each age group. We also rephrased the principles to make them child friendly. For example instead of naming \u201cimpersonation\u201d as being a consequence of password leakage, we rephrased that to: \u201csomeone telling the computer that they are you\u201d.<\/p>\n

    Our next project aims to test these initial sets of principles by giving them to teachers and parents to help them to educate the children in their care. We hope to refine them based on their feedback.<\/p>\n

    Below are the principles we can teach to children when they are starting to use passwords.<\/p>\n

    Password best practice for 4-5 year olds.<\/span> <\/figcaption><\/figure>\n

    This small set of principles is augmented as the children develop and mature, with the full set, as shown below, being taught by the time they get to 9 years of age. <\/p>\n

    The full set of principles for 8-9 year olds.<\/span> <\/figcaption><\/figure>\n

    We also carried out a review of children\u2019s books<\/a> that teach password principles. We discovered that the majority of the books didn\u2019t teach the correct principles. Many advised children to choose complex passwords instead of correctly advising them to use passphrases (three or more words). Nor was coverage of the principles particularly comprehensive. <\/p>\n

    Hence, children\u2019s books are probably not the best tool for parents to use to teach the latest password \u201cbest practice\u201d principles. The sets of \u201cbest practice\u201d principles we have derived should help adults to teach the principles to the children in their care in an age-appropriate way. <\/p>\n

    To make it easier for teachers and parents, we have developed some videos, together with accompanying child-friendly materials to reinforce lessons learned. Our Cyber Squad<\/a> will teach password \u201cbest practice principles\u201d in a fun and engaging way. <\/p>\n

    A final titbit for bilingual adults and children \u2013 use multiple languages in your passwords. Recent research<\/a> by Pardon Maoneke<\/a> and Stephen Flowerday<\/a> has discovered that this makes passwords much stronger. Here\u2019s an example using English and isiXhosa, two of South Africa\u2019s 11 official languages: instead of the password \u201cI love pink elephants\u201d, you could use \u201cMna love pinki elephants\u201d.<\/p>\n

    Source: The Conversation<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

    Children are increasingly being exposed to, and using, technology from a very young age. This has never been more true than in 2020 when the vast majority of children worldwide have used online resources to access educational resources and communicate with family and friends during the COVID-19 pandemic. Many of the resources and websites used, […]<\/p>\n","protected":false},"author":1,"featured_media":166324,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","ngg_post_thumbnail":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[4584],"tags":[3257],"class_list":{"0":"post-166323","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-africa-news-2","8":"tag-mypr","9":"entry"},"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/www.myza.co.za\/press\/wp-content\/uploads\/2020\/09\/password-education-should-be-age-appropriate-heres-how.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.myza.co.za\/press\/wp-json\/wp\/v2\/posts\/166323","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.myza.co.za\/press\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.myza.co.za\/press\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.myza.co.za\/press\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.myza.co.za\/press\/wp-json\/wp\/v2\/comments?post=166323"}],"version-history":[{"count":0,"href":"https:\/\/www.myza.co.za\/press\/wp-json\/wp\/v2\/posts\/166323\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.myza.co.za\/press\/wp-json\/wp\/v2\/media\/166324"}],"wp:attachment":[{"href":"https:\/\/www.myza.co.za\/press\/wp-json\/wp\/v2\/media?parent=166323"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.myza.co.za\/press\/wp-json\/wp\/v2\/categories?post=166323"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.myza.co.za\/press\/wp-json\/wp\/v2\/tags?post=166323"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}