Passwords & MFA: Lock the Door Properly
Included with TrainMeUK — no separate course purchase required.
Explain how stolen and reused passwords are used against you; and use passkeys where you can, and strong, unique passwords where you can’t.

- Assign to
- All staff
- Duration
- 30 minutes
- Evidence
- 11-question quiz
- Your version
- Editable
What they will be able to do
- Explain how stolen and reused passwords are used against you.
- Use passkeys where you can, and strong, unique passwords where you can’t.
- Handle sign-in prompts and codes safely.
- Know what to do the moment an account might be compromised.
The course
- 01How they get in
- 02Strong by design
- 03MFA done right
- 04Act fast
The decision they practise
In “A message from the ‘service desk’”, a chat, learners practise what to say and do when the other person pushes back. The wrong options are things a well-meaning person might genuinely say, and the feedback explains why each one is tempting. Short animations show “One password, many doors”; and “How strong is it?”.
How you know they finished
The 11-question quiz mixes multiple choice, matching and sequencing questions and returns to the opening story.
Relevant legislation and guidance
The course draws on these. Which ones apply depends on the organisation and the role. Finishing the course is a training record.
- UK GDPR and the Data Protection Act 2018
- Network and Information Systems Regulations 2018 (NIS)
- Computer Misuse Act 1990
How this course is built
Interactive activity
Learners practise the decision in the course, including what to say when someone pushes back.
Edit it in the builder
On Growth and above, adapt the scenarios and wording to your own workplace, policies and reporting procedures.
A record they finished
The 11-question quiz closes the course, so you can show who completed it.
Related courses
TrainMeUK course library
Ready to make Passwords & MFA easier?
Give your team access to practical, interactive training, with automated assignments, reminders and completion records managed in one place.


