# Session 2: Keeping Your Accounts Safe

Many things we do online depend on accounts and logins. If someone gets into your account, they can see your messages, use your name, or misuse your information. This session is about passwords, OTPs, privacy settings, and fake messages.

## Session Objective

By the end of this session, you will be able to:

- Understand what makes a strong password.
- Keep OTPs and login details private.
- Use basic privacy settings.
- Spot suspicious messages, links, and login requests.
- Know what to do when something feels fake or urgent.

## Account safety habits

<table id="bkmrk-habit-action%2Fdescrip" style="width: 95.2381%;"><thead><tr><th style="width: 27.8214%;">Habit</th><th style="width: 72.1471%;">Action/Description</th></tr></thead><tbody><tr><td style="width: 27.8214%;">**Use Strong Passwords**</td><td style="width: 72.1471%;">Create unique, complex passwords using letters, numbers, and symbols.</td></tr><tr><td style="width: 27.8214%;">**Keep Credentials Private**</td><td style="width: 72.1471%;">Never share OTPs, PINs, or login details with anyone.</td></tr><tr><td style="width: 27.8214%;">**Maintain Privacy**</td><td style="width: 72.1471%;">Regularly review and use privacy settings on all your apps.</td></tr><tr><td style="width: 27.8214%;">**Secure Sessions**</td><td style="width: 72.1471%;">Always log out of accounts when using public or shared devices.</td></tr><tr><td style="width: 27.8214%;">**Keep Software Updated**</td><td style="width: 72.1471%;">Ensure apps and operating systems are updated to the latest versions.</td></tr></tbody></table>

## What is a strong password?

A strong password is not your name, birthday, or phone number. It is not "1234" or "password". It uses a mix of letters, numbers, and symbols, and is different from the password you use for other accounts.

## What should stay private online?

<table id="bkmrk-private-information-" style="width: 93.6905%;"><thead><tr><th style="width: 27.4463%;">Private Information</th><th style="width: 72.5272%;">Reason for Privacy</th></tr></thead><tbody><tr><td style="width: 27.4463%;">Passwords</td><td style="width: 72.5272%;">Must remain confidential to prevent unauthorized access.</td></tr><tr><td style="width: 27.4463%;">OTPs</td><td style="width: 72.5272%;">Must remain confidential to prevent unauthorized access.</td></tr><tr><td style="width: 27.4463%;">PINs</td><td style="width: 72.5272%;">Must remain confidential to prevent unauthorized access.</td></tr><tr><td style="width: 27.4463%;">Security Answers</td><td style="width: 72.5272%;">Must remain confidential to prevent unauthorized access.</td></tr><tr><td style="width: 27.4463%;">Recovery Codes</td><td style="width: 72.5272%;">Must remain confidential to prevent unauthorized access.</td></tr><tr><td style="width: 27.4463%;">Net Banking Details</td><td style="width: 72.5272%;">Must remain confidential to prevent unauthorized access.</td></tr><tr><td style="width: 27.4463%;">ATM PINs</td><td style="width: 72.5272%;">Must remain confidential to prevent unauthorized access.</td></tr></tbody></table>

---

# Messages that should make you pause

<table id="bkmrk-suspicious-message-w" style="width: 93.6905%;"><thead><tr><th style="width: 53.5714%;">Suspicious Message</th><th style="width: 46.398%;">Why It's a Warning Sign</th></tr></thead><tbody><tr><td style="width: 53.5714%;">"Your account will be blocked if you do not click now."</td><td style="width: 46.398%;">Creates false urgency to panic you.</td></tr><tr><td style="width: 53.5714%;">"You have won a prize. Click to claim."</td><td style="width: 46.398%;">Too good to be true; often leads to scams.</td></tr><tr><td style="width: 53.5714%;">"Send your OTP to verify."</td><td style="width: 46.398%;">Legitimate services will never ask for your OTP.</td></tr><tr><td style="width: 53.5714%;">"Install this app urgently."</td><td style="width: 46.398%;">Often a trick to install malicious software.</td></tr></tbody></table>

## Story: Sneha and the urgent message

Sneha is 17. She receives a message that looks like it is from a popular app. It says her account will be suspended unless she clicks a link and confirms her OTP. Sneha feels nervous. The message looks urgent. She notices a small spelling mistake and a strange link. She decides not to click and shows it to a staff member. The staff member tells her it is fake and asks her to delete and block.

## Activity 1: True or False

1. It is okay to share your OTP with a friend.  
    ☐ True ☐ False
2. A strong password should be easy to guess.  
    ☐ True ☐ False
3. You should use the same simple password everywhere.  
    ☐ True ☐ False
4. Privacy settings can help control who sees your posts.  
    ☐ True ☐ False
5. A message asking for your OTP should be checked carefully.  
    ☐ True ☐ False

## Activity 2: Safe or unsafe

6. Using a password like your name and birth year.  
    ☐ Safe ☐ Unsafe
7. Turning on privacy settings in an app.  
    ☐ Safe ☐ Unsafe
8. Sharing your login with a friend.  
    ☐ Safe ☐ Unsafe
9. Clicking on a message that says "claim now".  
    ☐ Safe ☐ Unsafe
10. Logging out after using a shared device.  
    ☐ Safe ☐ Unsafe
11. Keeping your software updated.  
    ☐ Safe ☐ Unsafe

---

# Activity 3: Spot the fake message

1. "Click this link to get a free prize."  
    ☐ Safe ☐ Suspicious
2. "Please send your OTP to verify your account."  
    ☐ Safe ☐ Suspicious
3. "Your friend tagged you in a photo."  
    ☐ Safe ☐ Suspicious
4. "Install this app now or your account will be blocked."  
    ☐ Safe ☐ Suspicious
5. "Check the sender and ask before replying."  
    ☐ Safe ☐ Suspicious

---

# Activity 4: Build a better password

<table id="bkmrk-weak-password-%28avoid" style="width: 58.8095%;"><thead><tr><th style="width: 47.1159%;">Weak Password (Avoid)</th><th style="width: 52.827%;">Better Password (Example)</th></tr></thead><tbody><tr><td style="width: 47.1159%;">1234</td><td style="width: 52.827%;">Riya@4821</td></tr><tr><td style="width: 47.1159%;">password</td><td style="width: 52.827%;">Sun#2026</td></tr><tr><td style="width: 47.1159%;">anjali</td><td style="width: 52.827%;">M@ngo57!</td></tr><tr><td style="width: 47.1159%;">111111</td><td style="width: 52.827%;">Blue@19Star</td></tr></tbody></table>

My own password pattern could be: \_\_\_\_\_\_\_\_\_\_\_

One thing I should avoid in my password is: \_\_\_\_\_\_\_\_\_\_\_

---

# Activity 5: Fill in the blanks

1. Never share your \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_ with anyone.
2. A strong password should be hard to \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_.
3. OTP means one-time \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_.
4. Privacy settings help control who can see your \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_.
5. If a message feels urgent and strange, first \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_ before acting.

---

# Activity 6: What would you do?

1. What would you do if someone asked for your OTP?\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_
2. What would you do if a link looks suspicious? \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_
3. Why is it useful to keep your account private?\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_
4. Who can you ask if you are not sure about a message?

---

---

# Quick Recap

<table id="bkmrk-topic-key-takeaway-p"><thead><tr><th>Topic</th><th>Key Takeaway</th></tr></thead><tbody><tr><td>**Password Safety**</td><td>Passwords should be strong and private.</td></tr><tr><td>**OTP Security**</td><td>OTPs should never be shared.</td></tr><tr><td>**Account Protection**</td><td>Use privacy settings and keep software updated.</td></tr><tr><td>**Threat Awareness**</td><td>Fake messages often create urgency.</td></tr><tr><td>**Seeking Support**</td><td>If something feels wrong, stop and check with a trusted adult.</td></tr></tbody></table>

## One line to remember

**Private means private. Passwords, OTPs, and login details stay with me.**