ages 8–12 · Little Islander
Pause first.
Then click.
Stories and games that help kids recognise strange messages — and know who to tell.
- Passwords are like toothbrushes
- The two endings of “free” coins
- What's okay to post
Cyber safety for ages 8 to 88
The internet is fun.
Scams are clever
Seven short lessons on a tiny island where cybersecurity becomes a game: spot attacks, resist pressure, read URLs, build passwords, turn on 2FA, protect privacy and survive public Wi-Fi. Kids get it. Adults need it.
- No sign-up
- Nothing uploaded
- Switch modes anytime
7Short lessons
30Minutes to play
3Age modes
0Data collected
01 / Your explorer
A path that fits your age.
Pick an age mode. Examples, hints and difficulty adapt. Your progress and coins never reset when you switch.
Pause first.
ages 13–17 · Explorer
Start owning
your accounts
Scams slide into the apps you use every day: social, gaming, side hustles. Build a nose for the tells.
- Phishing and fake accounts
- Turning on two-step verification
- Boundaries around money
ages 18+ · Island Keeper
You think you won't fall.
Scams keep evolving.
Fake support, fake investments, AI deepfakes — all pull the same levers: urgency, fear, greed. Practise once.
- Refund and fake-support calls
- Password managers and backups
- Deepfakes and the “safe account” lie
Your explorer
Curious Explorer
Kids · Primary school
02 / Learning path
Seven lessons. One calm click at a time
Lessons complete
0 / 7
Little Islander
Hints use simpler comparisons, and there's no timer. Stuck? Grab a grown-up.
Finish a lesson to unlock the next. Every lesson ends with a quick test — not a trick.
Explorer passport
New Islander
Your first stamp is one lesson away. Everything stays in this browser.
0coins
03 / Your crew
Dress your explorer. Spend your coins.
Coins come from finishing lessons. Buy colours, gear and pets — no real money, no ads, no loot boxes.
🐣
Pip
Explorer profile
New Islander
Age group
We never ask for your school's name. This only tailors your explorer tips.
The trading post
Coins, not cash
0coins
Earn 100–160 coins per lesson. Replays are free practice and don't add coins.
04 / Safety toolkit
Don't memorise. Remember these.
Cyber safety isn't “never go online”. It's knowing which moment deserves a three-second pause. Open a card for the how.
Password managerOne vault. A different password everywhere.
Hand your passwords to a dedicated vault and remember one strong master phrase. Your browser's built-in manager is enough to start; 1Password or Bitwarden are solid next steps.
Tonight: pick your most important account and replace the reused password with a long, generated one.
Two-step verification2FA · one more lock if your password leaks
After your password, you need a second key. Authenticator apps or passkeys (fingerprint, face) are safer than SMS.
Order: email → banking → social. Your email can reset almost everything else, so lock it first.
Updates patch holesNot nagging. Patching.
System, browser and app updates fix known flaws. Scammers love a device that hasn't been updated.
Habit: turn on automatic updates and install them while charging. Restart once so they finish.
The 3-2-1 backupDon't keep all your eggs in one basket.
3 copies, on 2 different kinds of media, with 1 off-site. Ransomware fears a good backup.
Careful: syncing isn't backing up. Delete a file and the cloud deletes it too. Use a service with version history.
Verify before you actUrgency, fear and greed are the accelerators.
Hang up. Close the message. Call back on the official number you find, or open the official app. Never use the link or number they gave you.
Remember: there is no “safe account”, no regulator asks you to transfer money, and no support agent needs your SMS code.
AI deepfakesFaces and voices can be faked.
The person on the video may not be who they appear to be. Ask them to turn their head, make a gesture, or say something only you two know. Or hang up and call back on another channel.
Family code: agree on a passphrase. Any request involving money, investments or urgent transfers gets the code first.
05 / For parents & teachers
Questions aren't the problem. Going it alone is.
This island doesn't test memory — it trains judgement. Adults don't need to be technical. They just need to play one round.
10 minute family challenge
- Let them beat you first. Play Phishing Detective together. Don't correct immediately — let them point out the tells.
- Ask a perspective flip. “If you were the scammer, how would you do it? Who's the easiest target?”
- Turn on 2FA together. Pick email or social, scan the QR code, save the backup codes.
- Agree on a family code. For example, “I feel like mango shaved ice” means “I'm in trouble, help me” — and only family knows it.
Don't do it all at once. One small action beats a one-hour lecture.
Say it differently
Don't
“How could you believe that? I already told you.”
“No phone for you.”
Try
“Scams are engineered. It isn't about being stupid. Let's look at what's weird together.”
“Hang up. Let's call 165 together and check.”
People who get scammed aren't less smart. In that moment, their emotions were hijacked. What we practise is the pause.
For teachers
Project this and you have a 30-minute lesson
- No sign-up, no install required. Students can use their own devices or share one per group.
- Progress stays in the browser. No names, accounts or answer data are collected.
- Pick a level, not a lecture. Spot it, Protect it, Live it — one discussion each.
06 / Take it with you
Put the island in your pocket.
Install SusorSafe on your phone or laptop. It opens like an app, keeps your progress offline, and never asks for an account.
Free · No account · Works offline after the first visit.
How to install on your device
iPhone / iPad: open this page in Safari, tap Share, then “Add to Home Screen”.
Android: open in Chrome, tap the three-dot menu, then “Install app” or “Add to Home screen”.
Laptop: look for the install icon in Chrome or Edge's address bar, or use the browser menu.
If you opened this file directly from your computer, installation is unavailable. Host it on a web server or open the hosted link on your phone.
07 / Completion
Seven lessons later, it's yours.
The certificate isn't the finish line. It's a reminder that you've practised “pause, verify, then act” seven times.
SUSORSAFE
NO. 0000
CERTIFICATE OF CYBER SAVVY
SAFE EXPLORER
This certifies that
A Curious Human
has completed all seven SusorSafe lessons — Cyber attacks, Social engineering, Fake websites, Passwords, Two-factor authentication, Privacy and Public Wi-Fi — and can recognise online traps, protect personal data and verify suspicious messages.
VERIFIED
SusoISLAND KEEPER17 OCT 2026
Finish all 7 lessons to unlock
Progress 0 / 7. The certificate is printed. It just needs your name.
Back to the lessons