🏦 PASSWORD VAULT HEIST

What it does. Password Vault Heist puts students on both sides of a break-in. Phase 1 hands them a cracked list of common weak passwords to guess against a "vault." Phase 2 flips it: they build their own password and watch it get attacked the same way, so they see directly whether what they typed would have survived.

Why it's built this way. Telling a student "use a strong password" doesn't stick nearly as well as watching password123 fall in three guesses and then having to defend their own choice against the same attack. Playing both the attacker and the defender is what makes the lesson land.

It's a safe simulation. Every password in this tool, guessed or typed, is fictional and never leaves the browser. No accounts, no real credentials, nothing stored or sent anywhere. It's a sandbox built specifically so students can see how password attacks work without any real risk.