Password Scavenger Hunt
Split each table into two teams of players: Team A and Team B. If you have a small group, split the entire group into those two teams.
Explain the rules for your sacavenger hunt. Teams will use clues to try to figure out different passwords. Give each team its clues and explain how much time they have to find all the passwords they can. Try to make your teams and explain the rules in five minutes so that teams can use the rest of the time (ten minutes) to guess as many passwords as possible.
All ten of Team A's clues should have the same answer. They will be using several different password-generation processes to find a single weak password that is connected to each clue. In the debrief, point out how this is like using the same username/password combination across multiple websites and services.
All of Team B's ten clues should lead to different answers. Team B should have a more difficult time interpreting their clues and finding their password answers. Be ready to assure Team B that they are on the right track and that failure is okay - sometimes we want people to fail at guessing our passwords! In the debrief, explain that by using different combinations of logins and passwords, we make it much harder for others to get our information online.
Example clues & answers:
- List all the whole numbers greater than 0, but less than 7 | 123456
- 32 x 3858 | 123456
- 192 x 643 | 123456
- 96 x 1286 | 123456
- 123449 + 7 | 123456
- Google the most common password of 2014 | 123456
- Synonym for "cipher" | password
- Left-hand letters above the home row | qwerty
- America's pasttime | baseball
- Smaug | dragon
- Not to be confused with soccer | football
- Not an ape, but a... | monkey
Facilitate a brief discussion about the scavenger hunt. Ask what made it easy or difficult to figure out each password. Then congratulate all of your players and teams at the end of the hunt and give each player a little prize (like a sticker) for completing the activity.