Why kidz couldn't care less about your password advice.
Where
PasswordsCon
BSides Las Vegas
Duration
52 min
Explains why children ignore standard password advice and how streaks, gaming and sharing habits shape their security choices.
Summary
Mia Landsem, an ethical hacker who also helps victims of image abuse, argues that password advice written for adults does not reach children. She opens with Norwegian survey figures on how many young people have social media profiles and gaming accounts, and how often those accounts require logins.
The central finding is that many children share passwords, mostly to keep Snapchat streaks alive or to get help from a friend or parent. She describes weak school practices, such as passwords built from names and birth years, and confusing terminology around two-step verification that children do not understand. She also argues that password managers packed with features overwhelm young users, and that gaming account takeovers and reward-driven habits are a major driver of risky behaviour. Her suggestions include simpler tools, two-step security built into streak features, small low-cost options for keeping streaks, and parents explaining consequences instead of taking phones away.
The talk closes with the stakes when shared credentials expose intimate material. She describes sextortion and non-consensual image sharing she sees in her casework. Her takeaway for practitioners is that security guidance should be standardized, easier to use, and matched to what children care about, with platforms, schools and adults sharing responsibility rather than leaving it to children.
Related talks
Talks·5 min
April C. Wright
Follows a pre-recorded keynote with a live Q&A on security questions, old online accounts and lasting personal data.
Crypto Privacy Village·28 min
Yael Grauer
Examines where common security advice such as password managers, MFA, credit freezes and VPNs falls short, and what still helps when it does.
PasswordsCon·35 min
Cecilie Wian
Explores how shared accounts and weak access controls in personal banking enable financial abuse, and what would fix them.


