Best Cybersecurity Lessons and Activities for K-12 Education

Cybersecurity lessons and activities
(Image credit: iStock/maxkabakov)
Recent updates

This article was updated October 2026.

Computer literacy and security are not merely elective topics for today’s students. Instead, these have become an essential part of elementary education, starting at the earliest levels— because even preschoolers have access to internet-enabled devices.

Launched in 2004 as a collaboration between the National Cyber Security Alliance and the U.S. Department of Homeland Security, Cybersecurity Awareness Month aims to promote not only awareness of cybersecurity hazards, but also the knowledge and tools users need to protect themselves, their devices, and their networks while accessing the vast information highway that makes modern life possible.

The following cybersecurity lessons, games, and activities cover a wide range of topics and grade levels, and can be implemented in general instruction classes as well as dedicated computer science courses. Nearly all are free, with some requiring a free educator registration.

Best Cybersecurity Lessons and Activities for K-12 Education

Common Sense Media K-8 Digital Privacy and Safety Lessons
Twenty-four standards-aligned cybersecurity lessons cover essential topics such as internet safety, passwords, phishing, and identity theft. Each lesson plan is shareable via Google Drive and includes step-by-step guidance for teachers, video or slides, and handouts downloadable as Word, PDF, or text files.

Hacker 101
Ever hear of ethical hacking? The thriving ethical hacker community invites interested persons to grow their hacking skills for good. A wealth of hacking how-to resources is free for users, from novice to advanced levels. Extensive video guidance is provided for those new to hacking. Free account required- and be prepared to create a secure password!

COSN Cybersecurity Rubric for Education
The Cybersecurity Rubric for Education is a free and easy-to-use assessment tool designed to help schools self-assess their cybersecurity environment and plan for continuous improvement. Informed by NIST and other relevant cybersecurity and privacy frameworks, the rubric provides a comprehensive set of education-focused standards to help schools assess and improve their cybersecurity practices. No account required to download materials.

TryHackMe
With its stylish and user-friendly website, TryHackMe provides a remarkable range of cybersecurity education and practice. Whether a complete novice or an experienced hacker, any user can find the perfect resources for learning or improving their skills. Users sign up for a free account, then answer questions to determine their learning path. Don’t know the first thing about the internet? No problem! TryHackMe will teach you—then challenge you. The free basic account includes: educational materials; personal hackable instances and challenges; and limited web-based AttackBox and Kali. TryHackMe Classrooms offer many premium features for schools interested in incorporating TryHackMe into their cybersecurity syllabus.

U.S. Cyber Challenge: Cyber Quests Fall 2026
With a theme of insider threats and tools of the trade, this fall’s Cyber Quest is a free online competition for those students ready to test their cybersecurity skills. Users simply create an account, download the materials, and try the quiz between October 1st and 31st. Registered users will have three attempts to take the quiz; the highest score among three attempts will be counted as the final score. A great option for advanced students.

Code.org Cybersecurity - Simple Encryption
This standards-aligned classroom or elearning lesson aims to teach students the basics of encryption -- why it matters, how to encrypt, and how to break encryption. As with all code.org lessons, included are a detailed teacher’s guide, activity, vocabulary, warmup, and wrap up.

Code.org Rapid Research - Cybercrime
What are the most common cybercrimes and how can students (and teachers) identify and prevent such attacks? Learn the basics in this standards-aligned lesson from the Code.org curriculum team.

CyberPatriot Elementary School Cyber Education Initiative (ESCEI)
Complete a brief request form, download the digital ESCEI 2.0 kit, and you’re ready to plan your cybersecurity instruction. Included in the free digital kit are three interactive learning modules, supplementary slides, instructor’s guide, introductory letter describing ESCEI, certificate templates, and more. An excellent start to your K-6 cybersecurity curriculum.

Faux Paw the Techno Cat
Questionable puns and animated animal characters such as Faux Paw the Techno Cat are a great way to engage young learners in an important topic. Follow the adventures of this technology-loving polydactyl puss via PDF books and animated videos as she learns with difficulty how to navigate digital ethics, cyberbullying, safe downloading, and other tricky cyber topics.

Hacker Highschool
A comprehensive self-guided curriculum for teens aged 12-20, Hacker Highschool consists of 14 free lessons in 10 languages, covering everything from what it means to be a hacker to digital forensics to web security and privacy. Teachers’ guide books are available for purchase, but not required for the lessons.

International Computer Science Institute: Teaching Security
Built on the AP Computer Science Principles, and standards-aligned, these three lessons cover threat modeling, authentication, and social engineering attacks. Ideal for high school students. No account required.

NOVA Cybersecurity Lab Lesson Plan
Designed to teach students how to detect and thwart cyber attacks, PBS’s Cybersecurity Lab posits a newly launched company website with insufficient built-in security. What strategies will you, the CTO, employ to protect your startup? Play as a guest or create an account to save your progress. Cybersecurity Lab Guide for educators included. Be sure to check out the Nova Labs Cybersecurity Videos too!

Science Buddies Cybersecurity Projects
One of the best sites around for complete, free cybersecurity lessons. Each lesson includes background information, materials needed, step-by-step instructions, and guidance on customization. Ranging from intermediate to advanced, these eight lessons examine hacking the air gap (i.e., computers not connected to the internet -- yes these can be hacked!), the actual security of security questions, sql injection attacks, the true status of “deleted” files (hint: these are not really deleted), and other fascinating cybersecurity issues. Free account required.

SonicWall Phishing IQ test
This simply 7-question quiz tests students’ ability to spot phishing attempts. Have the entire class take the quiz, tally the results, then examine each example closely to distinguish the salient features of a genuine vs. “phishy” email. No account required.

Best Cybersecurity Games for K-12

Education Arcade Cyber Security Games
Five arcade-style cybersecurity games offer an adventurous look at digital security issues such as password breach, phishing, sensitive data, ransomware, and email attacks. Fun for middle to high school students. No account required.

Internet Safety Hangman
The traditional Hangman game, updated for the internet, provides an easy exercise for kids to test their knowledge of basic internet terms and ideas. Despite its Web 2.0 appearance, the site functions perfectly and provides a great way to teach younger kids basic internet safety principles. No account required.

KnowBe4 Children’s Interactive Cybersecurity Activity Kit
An easy–to-access set of interactive videos and games that teach topics ranging from artificial intelligence safety to phishing scams to password security. Free, no account required.

University of Texas at San Antonio Cybersecurity Games
Join the kid-friendly character “CyBear” in a series of free games for students in grades three and higher. Users simply download the CIAS launcher, then install the desired games on their Windows or Linux platform. Each game introduces students to cyber concepts such as network defense, firewalls, cryptography, phishing and malware in a fun, interactive manner.

Science Buddies Cybersecurity: Denial-of-Service Attack
What happens to a website during a denial of service attack? How can computers be conscripted into such attacks without the owner’s consent? Most of all, how can these attacks be prevented? Explore critical cybersecurity concepts in this NGSS-aligned paper-and-pencil game for middle school students.

Tech & Learning editor and contributor since 2010, Diana is dedicated to ferreting out the best free and low-cost tech tools for teachers.