Fighting Weak Passwords with Stories: Research Project Raises Cybersecurity Awareness

How can you get older people interested in the topic of private IT security? Without dry training, technical jargon or technical overload? Professor Dr Wolfgang Heiden from the Institute for Visual Computing (IVC) at Bonn-Rhein-Sieg University of Applied Sciences has found an answer that is as creative as it is effective: through stories.

The CrossComITS joint project, funded by the Federal Ministry of Education and Research (BMBF) as part of the initiative “Supporting Citizens in Private IT Security” within the “Forschung Agil” program, explores innovative ways to communicate cybersecurity knowledge. Heiden developed a concept that uses stories and music as tools for knowledge transfer, aiming to raise awareness - especially among vulnerable groups such as older adults - about topics like password security, data protection, and the mindful use of digital services.

On the evening of October 7, 2025, a public reading took place at the VHS building in Siegburg as part of Heiden’s ongoing event series. Under his pen name Ingo Pagan, he presented his self-written crime story “Der Stick des Todes” (“The USB Stick of Death”).
The plot revolves around a mysterious USB stick that becomes the trigger for a crime. Between stolen data, encrypted clues, and clever detective work, the story vividly demonstrates how quickly the illusion of security online can vanish.

At the beginning of the reading, the audience was asked to think of a password they might use for an online registration. As the story unfolded, it became clear how easily supposedly “secure” passwords can be cracked and what pitfalls to avoid when creating them. By the end of the evening, Heiden asked the same question again - only two participants still considered their original password to be safe.

Musical interludes between chapters gave the reading a special rhythm and time to reflect. Professor Heiden was accompanied by Dr. Marco Hülsmann (LfbA), and together they lightened the mood with well-known folk and rock classics.

Eleven participants enjoyed two hours filled with suspense, humor, and aha moments. The audience responded enthusiastically, some even joined in the singing.

“We want to show that IT security doesn’t have to be a dry topic,” says Heiden. “When stories evoke emotions, the knowledge stays with people much longer.”

A hypermedia novel about password security

The reading is part of a series of hypermedia novels that are being created as part of the CrossComITS project (funding number 16KIS1623). These interactive stories combine literary, visual and informative elements to convey IT security in an understandable and emotional way.

The focus is on password security, a key aspect of digital self-determination. The CrossComITS project is developing a cross-media platform that supports people in strengthening their everyday digital skills. Using a train-the-trainers concept, participants are empowered to pass on their knowledge and build sustainable IT security networks in their communities.

The project impressively demonstrates how creative approaches from the field of IT can help to communicate socially relevant topics in new ways.

Further information on the CrossComITS project