An interactive demo website that teaches kids about password security and phishing attacks through a fun, Instagram-inspired experience.
- Search for Benny Bunny — the villain stealing passwords
- Explore his profile and find clues (favorite food, lucky number, pet name…)
- Click "Lock Account" and guess his password from the clues
- Learn why personal info makes terrible passwords!
- Send Benny a phishing message about "World's Coolest Hop Game"
- Watch him click the fake link and enter his password on a fake website
- See his password get captured in real time
- Learn how to spot phishing attacks!
| Item | Value |
|---|---|
| Password | carrot123 (stored as SHA-256 hash) |
| Clues | Favorite food, lucky number, pet's name |
| Phishing bait | Benny's interest in "Hop Game" |
Just open index.html in any browser — no server or dependencies needed!
open index.html
- Single HTML file — zero dependencies
- Vanilla CSS — dark mode, gradients, animations
- Vanilla JS — Web Crypto API for SHA-256 password hashing
- Google Fonts — Outfit typeface
- ❌ Don't use birthdays, pet names, or favorite things as passwords
- ❌ Don't use easy numbers like 123
- ✅ Use long, random passwords that are hard to guess
- ✅ Mix uppercase, lowercase, numbers, and symbols
- ✅ Never click suspicious links or enter passwords on unfamiliar sites
- 🔐 Ask a grown-up to help you use a password manager!
Free to use for educational purposes.