Cyber Defender Path — Youth Cocoon

Level 1 · Secure Your Digital Life · Prepare

Know what you protect

Lesson done when: you can explain five defender terms and create a private-free inventory.

About 45–90 min total · pause after any 10–20 min mission

You’ll need: the Cyber Lab; never enter real account names, passwords, or codes

1Learn
2Try
3Check

Learn

Threats, attack surfaces, and recovery

A defender starts by naming what matters without exposing it. Use categories such as school account, messaging, photos, and games—not usernames.

Flip the term cards, then sort synthetic examples into threat, protection, or recovery. Your goal is calm recognition, not fear.

Tap each card once — definitions stay teen-plain.

You’ll know it when: five terms cleared and a category-only security inventory.

If stuck: Use the sample inventory. Real account details never belong in this course.

Parent tip: Model category-only notes. Do not ask to see a password or recovery code.

Level 1 · Secure Your Digital Life · Practice

Strengthen the doors

Lesson done when: you complete the password-chain and MFA simulations and choose safe recovery storage.

About 45–90 min total · pause after any 10–20 min mission

You’ll need: synthetic examples only

1Learn
2Try
3Check

Learn

Password reuse, MFA, and recovery choices

One reused password can connect several accounts. Break the simulated reuse chain, compare authenticator, passkey, text, and recovery options, then explain the trade-off.

The lab never asks for a real password. Apply changes later in official settings with a trusted adult if needed.

You’ll know it when: a Shield Score in Lock and a recovery plan with no secret values.

If stuck: Choose what you would do; you do not have to change a live account today.

Parent tip: Praise the plan and let the learner control their own credentials.

Level 1 · Secure Your Digital Life · Produce

Investigate the inbox

Lesson done when: you classify synthetic messages and annotate sender, link, urgency, and request clues.

About 45–90 min total · pause after any 10–20 min mission

You’ll need: the built-in fictional inbox

1Learn
2Try
3Check

Learn

Inbox Detective

Real phishing often mixes one believable detail with pressure. Inspect the sender domain, destination, tone, request, and safer verification path.

Create a case file that explains your decision. Reporting or asking through a known channel is evidence of good judgment.

You’ll know it when: three investigated messages and one annotated case file.

If stuck: Use the clue buttons; never forward a real suspicious message into the lab.

Parent tip: Discuss the decision process, not whether the learner was ever fooled.

Level 1 · Secure Your Digital Life · Prove

Recover without panic

Lesson done when: you choose the safe order in a lost-access scenario and improve one weak step.

About 45–90 min total · pause after any 10–20 min mission

You’ll need: the synthetic recovery drill

1Learn
2Try
3Check

Learn

Account recovery drill

Recovery order matters: stop, use a trusted device or official address, protect the primary email, end unknown sessions, change credentials, and report harm.

A timer adds focus, not pressure. Accuracy earns more Shield points than speed.

You’ll know it when: a completed recovery drill and one written improvement.

If stuck: Pause the timer and use the hint. Calm is a security skill.

Parent tip: Never stage a real lockout. Use the simulation only.

Level 1 · Secure Your Digital Life · Present

Share your starter kit

Lesson done when: you export a private-safe starter kit and deliver a short briefing.

About 45–90 min total · pause after any 10–20 min mission

You’ll need: your lab evidence; remove names and private details

1Learn
2Try
3Check

Learn

Teach one safer habit

Teach one password, phishing, and recovery idea in under three minutes. Show a synthetic example and name the habit you will practise for 30 days.

Export the starter kit as portfolio evidence. It contains decisions and reflections, never secrets.

You’ll know it when: a briefing, exported kit, and chosen 30-day habit.

If stuck: Use the generated speaker notes.

Parent tip: Let the learner finish before adding one family example.

Level 2 · Protect Your People · Prepare

Map risks around people

Lesson done when: you build a category-only family threat map and collaboration rules.

About 45–90 min total · pause after any 10–20 min mission

You’ll need: fictional personas or broad roles only

1Learn
2Try
3Check

Learn

Social engineering and boundaries

Social engineering targets trust, urgency, authority, curiosity, and helpfulness. Map where a household could be pressured without naming real accounts or schedules.

Set boundaries: nobody asks for passwords, private screenshots, or secret monitoring.

Tap each card once — definitions stay teen-plain.

You’ll know it when: a threat map and three privacy-first boundaries.

If stuck: Use the fictional household in the lab.

Parent tip: Co-create boundaries; this is protection, not surveillance.

Level 2 · Protect Your People · Practice

Run a privacy pass

Lesson done when: you complete the privacy simulator and record one improvement.

About 45–90 min total · pause after any 10–20 min mission

You’ll need: simulated settings; real changes are optional

1Learn
2Try
3Check

Learn

Location, permissions, and least access

Decide whether a game, map, camera, or school app needs location, contacts, photos, or background access. Choose while using, ask next time, limited photos, or deny.

Record the reason, not a screenshot containing private information.

You’ll know it when: five permission decisions and one privacy improvement log.

If stuck: There may be more than one safe answer; explain your context.

Parent tip: Do a parallel check on your own device rather than inspecting theirs.

Level 2 · Protect Your People · Produce

Build the if-hacked playbook

Lesson done when: your playbook covers email, social, device loss, and payment scams.

About 45–90 min total · pause after any 10–20 min mission

You’ll need: category names and official help paths only

1Learn
2Try
3Check

Learn

Roles, order, and official help

Build a one-page response playbook: notice, contain, recover, report, learn. Assign broad roles such as account owner and trusted adult without contact details.

Add official help routes and a reminder to preserve evidence without reposting it.

You’ll know it when: a four-scenario playbook with roles and safe help paths.

If stuck: Start with the email-compromised template.

Parent tip: Confirm that no secrets or private contacts appear in the export.

Level 2 · Protect Your People · Prove

Lead a tabletop response

Lesson done when: you finish the tabletop, explain the recovery order, and fix one playbook gap.

About 45–90 min total · pause after any 10–20 min mission

You’ll need: the fictional scenario deck

1Learn
2Try
3Check

Learn

Branching breach scenario

The lab changes the situation after each choice. Protect the primary communication channel, avoid scammer-provided links, preserve evidence, and contact official support.

Use the result to revise the playbook. A discovered gap is a successful test.

You’ll know it when: a completed tabletop and one playbook revision.

If stuck: Use the response-order hint; guessing quickly earns nothing.

Parent tip: Keep the exercise calm and fictional.

Level 2 · Protect Your People · Present

Teach the defender workshop

Lesson done when: you run a short workshop and export the complete Cyber Safety Playbook.

About 45–90 min total · pause after any 10–20 min mission

You’ll need: synthetic examples and your private-safe portfolio

1Learn
2Try
3Check

Learn

From private practice to community skill

Run a five-minute workshop: one social-engineering clue, one privacy choice, one incident-response order, and one question for the audience.

Export your playbook and Shield Score. Never include participant names, private stories, or account details.

You’ll know it when: a workshop reflection and exported Cyber Safety Playbook.

If stuck: Use the lab’s workshop cards and practise once privately.

Parent tip: Celebrate clear teaching, not scary stories.

Cyber Defender · build your shield

Know what you protect

Threats, attack surfaces, and recovery

Strengthen the doors

Password reuse, MFA, and recovery choices

Investigate the inbox

Inbox Detective

Recover without panic

Account recovery drill

Share your starter kit

Teach one safer habit

Map risks around people

Social engineering and boundaries

Run a privacy pass

Location, permissions, and least access

Build the if-hacked playbook

Roles, order, and official help

Lead a tabletop response

Branching breach scenario

Teach the defender workshop

From private practice to community skill

Your Cyber Safety Playbook

Cyber Defender · build your shield

Threats, attack surfaces, and recovery

Password reuse, MFA, and recovery choices

Inbox Detective

Account recovery drill

Teach one safer habit

Social engineering and boundaries

Location, permissions, and least access

Roles, order, and official help

Branching breach scenario

From private practice to community skill

Your Cyber Safety Playbook

Liked this course?