About Password Fortress
A free password strength game for students. Forge passwords for each character and watch a live crack-time meter. Unlock passphrases and MFA.
Skills you practise
- Password strength
- Passphrases
- Password managers
- MFA
How to play
- Create a password that satisfies the character's story.
- Watch the crack-time meter.
- Defend the fortress through every level.
Why this skill matters
Weak or reused passwords are a leading cause of account break-ins. The good news is that a few habits close most of the gap: long passphrases, a password manager and multi-factor authentication. The live crack-time meter in this game makes the difference between a weak and a strong password visible. It also works as a classroom password security activity: the live crack-time meter shows why a long passphrase beats a short password with clever substitutions, and why multi-factor authentication still matters.
Key terms you will meet
- Length vs complexity
- Adding length helps more than adding one symbol. A long passphrase of random words is hard to crack and easier to remember.
- Brute force
- Trying every possible combination until one works. Longer passwords make this impractical.
- Credential stuffing
- Attackers reuse passwords leaked from one site to try to enter others, which is why reuse is dangerous.
- Password manager
- A tool that creates and stores a unique strong password for every account behind one master password.
- MFA
- Multi-factor authentication adds a second proof, such as a code from an app, so a stolen password alone is not enough.
- Hashing
- Storing a one-way scrambled form of a password instead of the password itself.
A worked example
You compare two choices. 'Sharma@2005' looks complex but is short and based on a name and a year, which are guessable. 'tiger-lamp-orbit-market' is four unrelated words, long and easy to recall. The meter shows the second would take vastly longer to crack. You then add MFA, so even a leaked password is not enough.
Common mistakes to avoid
- Using personal details such as names, birthdays or phone numbers.
- Reusing one password across email, banking and social media.
- Keeping passwords in a notes file or on a sticky note by the monitor.
Questions people ask
Is a long passphrase better than a short complex password?
Usually yes. Length makes guessing much harder, and a phrase of unrelated words is easier to remember.
Do I still need MFA if my password is strong?
Yes. MFA protects you if a password is leaked, phished or reused somewhere else.
How long does it take to crack a password?
It depends on the length and how random the characters are. Each extra random character or word multiplies the guesses an attacker needs, so a long passphrase can take far longer to crack than a short password with symbols. The crack-time meter in Password Fortress lets you see that difference as you type.
Level: All · Best for: All students · Part of the Cybersecurity path. Pass it to earn the “Password Fortress Master” badge and a game certificate.
Related: Phishing Detective, Cyber Safety Escape Room, Cyber Ethics Choices · Next: Cloud Storage Challenge · All 18 games · About · IT glossary
Quick answers: What makes a strong password?
Content reviewed by Hritik · 2026-11-11.