Password & 2FA Strength
A two-part exercise that starts with typing a password for a bank account and watching a live strength analyzer explain, in plain terms, exactly why "Fluffy2015" or "password123" would be cracked in seconds. It then moves into a second scene where a text arrives with a real verification code, followed by a message asking to have that code read back, proving that even the strongest password is worthless the moment a 2FA code gets shared