CT / SEC / 01
Cybersecurity for teens
Defense, crypto, a CTF.
Open the syllabusUnited States · Ages 13 to 18 · Defensive cybersecurity
Teenagers who get curious about cybersecurity often start from one of two places: a scam message that nearly fooled someone in the family, or a friend who mentions a school cyber team. Both are good starting points. Security is one of the few areas of computing where a 14-year-old can do real, useful work early, as long as the learning is defensive and stays on systems built for practice. This page explains the American programs teens hear about, what each one actually involves according to its own website, how to begin safely at home, and how our live classes fit around them.
Live teaching since 2020 · 10,000+ students · Defensive and ethical, always
In short
Good cybersecurity classes for teens teach defense: how the internet works, passwords and hashing, phishing, safe habits, encryption, and practice puzzles on systems built to be tested. In the US, teens can also join CyberPatriot through a school team, practice free at CyLab Security Academy (formerly picoCTF), and from fall 2026 take AP Cybersecurity where schools offer it. Modern Age Coders teaches this live online for US students, in a batch or one to one, and the first class is free.
Learn it with a teacher
The first is our cybersecurity course; the other two build the coding that security work leans on later.

CT / 01
Ages 13 to 18, no coding needed. Defense first, a CTF capstone last.
Open the syllabus →
CT / 02
The language most security tools and puzzles use.
Open the syllabus →
CT / 03
Ages 13 to 18. Team competition practice: hardening, networks, capture the flag.
Open the syllabus →US programs
Three US programs come up most in searches by teens and parents. Each is run by a different kind of organization and suits a different kind of teen. Every fact below comes from the program’s own website, read on 17 October 2026.
| Program | Run by | Format | How a teen takes part |
|---|---|---|---|
| CyberPatriot | The Air & Space Forces Association | Team competition: secure virtual Windows and Linux systems | Through a school or approved organization, on a team with an adult coach |
| CyLab Security Academy (formerly picoCTF) | Carnegie Mellon University | Free online challenges, learning paths and timed events | Sign up individually, or through a teacher’s classroom |
| AP Cybersecurity | College Board | A yearlong high school course with an AP exam | Where a high school offers it, from fall 2026 |
A teen who likes teamwork and deadlines will enjoy CyberPatriot, but it depends on a school or organization fielding a team. A teen who likes working alone at their own pace can start on CyLab Security Academy tonight.
AP Cybersecurity depends entirely on the high school. If yours offers it from fall 2026, it is the most structured option of the three; if not, the other two remain open.
Our classes are not a team in any of these programs, and we are not connected with the Air & Space Forces Association, Carnegie Mellon University or College Board. We teach the defensive basics all three assume.
That is the role we aim to play: a teacher who explains, live, the concepts a competition or course moves through quickly.
CyberPatriot
CyberPatriot calls itself the National Youth Cyber Education Program, created by the Air & Space Forces Association, and describes its National Youth Cyber Defense Competition as the nation’s largest cyber defense competition.
| Point | What CyberPatriot says |
|---|---|
| The task | Teams find and fix cybersecurity vulnerabilities in virtual operating systems and are scored on how secure they make them |
| Team size | Two to six competitors; at most five compete at one time; one coach, who is an adult |
| Volunteers | Technical mentors and team assistants must register and pass a background check (minimum age 18) |
| Divisions | Open (high school), All Service (JROTC, Civil Air Patrol, Naval Sea Cadet Corps) and Middle School |
| A round | A four-hour period with a Network Security Challenge (Windows and Linux) and a Cisco Networking Challenge |
| Where | Online rounds from any location; National Finals in person in Bethesda, MD, in the spring |
| Prior knowledge | "designed for any student, regardless of prior cybersecurity knowledge" |
| Stage | When |
|---|---|
| Team registration | June 2 to October 1, 2026, for the 2026 to 2027 season |
| Exhibition rounds | Summer months, May to August |
| Training round, with an answer key | September |
| Official practice round | October; the posted reminder gives October 7 to 20 |
| Roster finalization | October 21 |
| Scored rounds | One weekend a month, October to January; teams pick any four-hour period that weekend |
Registration for the 2026 to 2027 season ran June 2 to October 1, 2026; uscyberpatriot.org publishes each new window. The months before a season are the useful ones for learning Windows and Linux settings, networking basics and careful note-taking.
Ask the school early. Because teams need an adult coach from a participating organization, a teen often has to find a teacher willing to start one.
Teams are scored on how secure they make a system, so the work is defensive by design. In general terms, hardening a computer means reviewing accounts and settings and keeping software current; that is our summary, not CyberPatriot’s scoring list.
Methodical work, careful notes and teamwork matter in any team competition, and our course builds them in its practice rounds. We teach the concepts; competition practice belongs to the team and its coach.
Practice at your own pace
Many teens search for picoCTF. Its website now announces that picoCTF has joined CyLab Security Academy, Carnegie Mellon University’s free cybersecurity learning platform. Existing picoCTF logins created before May 8, 2026 still work there.
| Point | What the platform says |
|---|---|
| Cost | Always free |
| Who it is for | Middle schoolers through adults; it started as a competition for high school students |
| Reach | 1M+ learners and 15K+ classrooms worldwide |
| Content | 500+ challenges from beginner to advanced |
| Four parts | Challenges, Learning Paths, Events (timed, often with a scoreboard) and Classrooms for teachers |
| Eight domains | General Skills, AI, Cryptography, Web Exploitation, Forensics, Binary Exploitation, Reverse Engineering, Blockchain |
| Why it is legal | "Every challenge is built to be hacked, so the practice is legal" |
CTF stands for Capture the Flag. Each challenge hides a short piece of text, the flag, that you find by reading, reasoning and testing. Hints come one at a time on CyLab’s platform.
In our experience, General Skills and Cryptography are the gentlest places for a beginner. CyLab describes the first as the terminal, scripting and quick file work, and the second as codes, ciphers and locked data; old ciphers can be solved with a pencil.
A CTF platform is a playground built to be broken. A school website, a friend’s account or a game server is not. The same curiosity used on a system without permission stops being practice.
Our rule in class is short: only test what you own, or what was built for practice and says so. We teach that rule before anything technical.
CyLab Security Academy also publishes research. Its own announcement describes a white paper on competition data and AI use, which is worth reading with a teen who is tempted to let a chatbot solve the puzzles. Whatever the platform’s age rules are for accounts, check them with your teen when signing up; they were not on the pages we could read.
In high school
College Board is adding cybersecurity to the AP program through AP Career Kickstart, a group of career courses. Its timeline shows AP Cybersecurity launching in fall 2026, with the first exams in May 2027.
| Point | What College Board says |
|---|---|
| What it is | A yearlong course that "aligns closely with standard first-year collegiate cybersecurity courses" |
| Framework | Aligns with the NICE Workforce Framework; five units |
| Skill category 1 | Analyze Risk: 25 to 40 percent of the exam |
| Skill category 2 | Mitigate Risk: 25 to 40 percent of the exam |
| Skill category 3 | Detect Attacks: 25 to 40 percent of the exam |
| First exam | May 2027 |
| College credit | The first list of institutions granting credit "will be released in spring 2027" |
For the first time, a US high school student may be able to take cybersecurity as an AP course, if their school adopts it. Ask the counselor during course selection whether it is offered for 2026 to 2027 or planned for later.
Because credit policies are still being set, nobody can yet say which colleges will award credit. College Board says that list comes in spring 2027.
The three skill categories, analyze risk, mitigate risk and detect attacks, are the backbone of our own course, so a teen who takes our classes first meets the ideas before the AP course moves through them at school pace.
We do not offer AP Cybersecurity exam preparation at the moment and make no score promises. For teens on the AP CS route, see our AP CSP coaching.
Start at home
October is Cybersecurity Awareness Month, and CISA, the US Cybersecurity and Infrastructure Security Agency, says everyone should take four core steps. They make a good first week.
| The message | The red flag | The safe move |
|---|---|---|
| "Your school account will be deleted in 1 hour. Log in here to keep it." | Urgency and a login link | Go to the school portal yourself, never through the link |
| A game friend offers free in-game currency if you share your password | Anyone asking for a password | Never share it; report the account |
| An email from your "bank" with a misspelled sender address | A look-alike address | Do not reply; a parent checks through the official app |
| A text saying a package could not be delivered, with a short link | An unexpected delivery and a link | Check the order on the shop’s own site |
| A pop-up saying your laptop is infected, with a phone number to call | A scare plus a phone number | Close the tab; tell a parent or school IT |
# passphrase.py: a random passphrase, and how many exist (ours)
import secrets
words = ["maple", "rocket", "canyon", "pickle",
"harbor", "violet", "tundra", "biscuit",
"lantern", "falcon", "meadow", "quartz"]
passphrase = "-".join(secrets.choice(words) for i in range(4))
print(passphrase)
possible = len(words) ** 4
# 20736 for this list
print("Possible passphrases:", possible)The Python documentation says the secrets module is for cryptographically strong random numbers suitable for managing data such as passwords, and should be used in preference to the random module for this. secrets.choice picks one item from the list.
| Secret | Calculation | Possibilities |
|---|---|---|
| A 4-digit PIN | 10 ** 4 | 10,000 |
| 4 words from our 12-word list | 12 ** 4 | 20,736 |
| 8 random lowercase letters | 26 ** 8 | 208,827,064,576 |
| 8 random letters (both cases) and digits | 62 ** 8 | 218,340,105,584,896 |
| 4 random words from a 7,776-word list | 7,776 ** 4 | 3,656,158,440,062,976 |
The script on its own is weak. Twelve words give only 20,736 four-word passphrases, fewer than a teen might guess. The strength comes from the size of the list and the randomness of each pick, not from the word count.
With a 7,776-word list, four random words give more possibilities than eight random letters and digits, and are far easier to remember. That trade-off is the whole lesson.
These counts only hold when every choice is truly random. A passphrase a person picks, such as a favorite team and a birth year, is far weaker than its length suggests.
We do not print crack times. They depend on how a site stores passwords, which is why hashing is the next lesson in our course, and why a password manager plus a second factor matter more than any single clever password.
Sources: CISA Secure Our World and the Python secrets module documentation, read 17 October 2026. CISA lists Cybersecurity Career Week for October 19 to 24, 2026. We are not connected with CISA.
Our course
A summary of our own course for ages 13 to 18. No coding is needed to start; teens who already code go deeper in the practical weeks.
| Months | Theme | What teens do |
|---|---|---|
| 1 | How the internet actually works | Trace a web request, map their own digital footprint |
| 2 | Passwords, hashing and proving who you are | See why good sites never store your password, set up two-factor sign-in |
| 3 | Phishing and social engineering | Take apart real-style phishing messages and build a field guide |
| 4 | Malware concepts and safe habits | Read an outbreak as defenders; harden their own devices |
| 5 | Encryption and a trustworthy web | Classical ciphers by hand, then cookies, sessions and the padlock |
| 6 | The capture-the-flag capstone | Practice puzzles, a scored CTF event, and written writeups |
Months 1 to 4 at a gentler pace, with lots of discussion of scams teens actually see. A good fit for CyberPatriot’s middle school division later.
The full course, then Python for teens, so the CTF capstone can include a little scripting.
The course alongside AP or college plans, with the writeups shaped into a portfolio they can show.
Teens weighing security against other computing paths can also read our guide to computer science extracurriculars and hackathons for high school students.
From user to defender
Our description of the stages a teen moves through in this subject.
| Stage | What it looks like |
|---|---|
| 1. Careful user | Spots phishing, uses a password manager, turns on two-factor sign-in |
| 2. Explainer | Can explain hashing, encryption and why updates matter to a parent |
| 3. Practitioner | Solves beginner CTF challenges and writes up how |
| 4. Team defender | Hardens a system methodically, documents it, works in a team |
Stage 1 protects the whole family. Ask your teen to set up two-factor sign-in on your accounts; it is a real job and a confidence boost.
If your teen talks about hacking, ask what they practiced on. A clear answer naming a practice platform is the right one.
Write up every challenge you solve, even easy ones. Writeups are how security people show what they know.
Never test a system you do not own or have permission to test. Practice platforms exist so you never need to.
The catalog
Live online, with one teacher through the term, as a batch or one to one.
CT / SEC / 01
Defense, crypto, a CTF.
Open the syllabusCT / SEC / 02
Scripts and tools.
Open the syllabusCT / SEC / 03
How the web is built.
Open the syllabusCT / CS / 01
For the College Board CSP exam.
Open the syllabusCT / CS / 02
The Java-based AP course.
Open the syllabusCT / CS / 03
The thinking behind CTFs.
Open the syllabusCT / BLD / 01
Memory and speed, understood.
Open the syllabusCT / BLD / 02
The language of the browser.
Open the syllabusCT / BLD / 03
Build in a team, fast.
Open the syllabusWhen classes run
Weekdays or weekends, flexible: choose your batch, or for a very personalised plan choose 1-on-1 at your convenience, weekend mornings or weekdays.
Weekdays
Evening batches that work across US time zones.
Weekends
Weekend mornings, clear of sports and jobs.
1-on-1
A private plan around school and competitions.
Nothing is taught that targets a real system.
Coding comes in when it helps.
Teens learn to document like professionals.
One person who knows your teen’s progress.
Live online from home.
Fifteen to twenty per batch, or one to one.
Student work
A sample of what teens built in our classes. The student labs page has the rest.

AI and ML
An AI nutrition coach that reads what you eat and works you toward a target.

AI and ML
A chatbot that answers mathematics and programming questions, built and deployed by a student.

AI and ML
An assistant that helps a young person recognise unsafe situations online.

Web app
A weather forecasting site with live conditions for any location.
Fees
CyberPatriot practice, CyLab Security Academy and CISA’s guidance are all free to read and use. Our classes are paid monthly in US dollars, with no long commitment; finish at the end of any month.
Free first class
USD 0
no card required
Group batch
USD 100
a month, billed in US dollars
One to one
USD 150
a month, billed in US dollars
What families say
Google reviews from parents, quoted exactly.
★★★★★
"The one step solution for my son. Modern Age Coders make learning coding so simple that kids love it. The teachers explain complex concepts clearly with practical exercises and interactive content."
Ria Mukherjee
Parent
★★★★★
"Modern Age Coders has been a game-changer for me. I struggled to grasp IT concepts and coding before joining, but their classes transformed everything. I can now confidently write complex programs with ease."
Samriddha Mondal
Student
★★★★★
"One of the most wonderful education centres out there. Education is not limited to school syllabus but focuses on skill development."
Vansh Agarwal
Student
★★★★★
"My child Dhairya is really enjoying the Modern Age Coders classes. This is his first online class and he eagerly looks forward to it. I can already see his improvement, and the teachers are very cooperative."
Sonam Oswal
Parent of Dhairya
★★★★★
"Modern Age Coders have wonderful teachers who teach in a clear, easy and practical way. The teacher boosts students' confidence and inspires them to learn without hesitation."
Sonu Goyal
Parent
★★★★★
"I highly recommend this computer coding class! The teachers are incredibly knowledgeable and passionate about coding."
Ritu Kedia
Parent
Questions from families
Defense: how the internet works, passwords and hashing, two-factor sign-in, phishing, malware concepts, updates, encryption and practice puzzles on systems built to be tested. It should never teach attacks on real systems.
No. Our course starts with no coding. Python helps later, especially for capture-the-flag puzzles, so many teens add our Python course after the first few months.
The National Youth Cyber Education Program created by the Air and Space Forces Association. Its competition has teams of two to six middle or high school students secure virtual Windows and Linux systems, with an adult coach.
Teams register through a school or approved organization. For the 2026 to 2027 season, CyberPatriot listed team registration as June 2 to October 1, 2026; check uscyberpatriot.org for the next registration window.
The picoCTF website says picoCTF has joined CyLab Security Academy, Carnegie Mellon University's free cybersecurity learning platform. Logins created before May 8, 2026 still work there.
Yes. College Board lists AP Cybersecurity as launching in fall 2026, with the first exams in May 2027. Whether a student can take it depends on whether their high school offers it.
Practicing on platforms built for it is legal; CyLab says its challenges are built to be hacked so the practice is legal. Testing a real system without permission is not. We teach defense and only use practice environments.
Start with CISA's four core steps: avoid and report phishing, use strong passwords, use multifactor authentication with a password manager, and update software. The practice set on this page is a good first exercise.
Weekdays or weekends, flexible. Choose your batch, or for a very personalised plan choose 1-on-1 at your convenience, weekend mornings or weekdays.
The first lesson is free. After that, classes are paid one month at a time, and the fees section on this page shows the monthly figure in US dollars.
Also on this site
More for US teens heading into computing.
All our pages for US families.
Clubs, competitions and projects.
The AP course many teens take first.
Team building under time pressure.
What fits at fifteen.
Using chatbots without losing the skill.
The Congressional App Challenge explained from the 2026 rules, with a ten-week plan.
The Presidential AI (now SI) Challenge explained from the official 2027 rules.
ACSL from the official 2026-27 pages, with original practice problems.
Start here
Tell us what got your teen interested: a scam, a school team, a CTF they tried. The teacher builds the first lesson around that.
For a closer look at a class, read how we teach; the full cybersecurity syllabus is on our courses page.
WhatsApp us · +91 91233 66161 · connect@modernagecoders.com
Teaching happens live online, with teachers who are based in India, so teens anywhere in the country can join. Send us a WhatsApp message for a quick reply.
A priority demo is a full class of about 45 to 60 minutes. After the class the mentor sends a written skill report and a personal learning roadmap on WhatsApp. If you enrol, the demo fee is adjusted against your first month's fee. Share your demo Order ID with us on WhatsApp and we take it off.
Book a priority demo