Hands-on practice · no signup
Practice: the call that asks for your password
The phone rings. The person sounds calm, professional, and genuinely helpful, and they need your password to fix something. This is the most human version of an attack there is.
Free, and nothing here is real. No account, no download, and no message, payment, or account is ever actually touched.
Part of Passwords and Password Managers. Free, plain-English practice for everyday work technology.
What you'll do
- Take a call from someone who says they are from IT and needs your password.
- Notice the pressure: they are friendly, they are busy, and they have a reason.
- Look the department up in the staff directory instead of trusting the caller.
- Dial the real extension yourself on a working keypad.
- Confirm what a genuine IT team would and would not ask you for.
What it teaches
No real IT or helpdesk ever needs your actual password, not even part of it. Hang up and call back on a number you already have.
password reuse and credential stuffingwhat a password manager doesunique long passphrasessafe credential storagewhy passwords are never shared
Want the full lesson?
The simulation is the practice. The lesson explains the why, in plain English, in about five minutes.