A leading cybersecurity expert is urging families to adopt a surprisingly low-tech tool in the fight against sophisticated AI impersonation scams: secret passwords.
At a Glance
- Secret codes help verify real contacts during deepfake or phishing attacks
- Expert Cody Barrow says he and his wife already use this system at home
- AI-generated impersonations of loved ones are on the rise
- Older adults and children are especially vulnerable
- Secret passwords offer a simple, effective defense when digital safeguards fail
Old-School Security Meets High-Tech Threat
As artificial intelligence gets better at mimicking human voices and appearances, the threat of deepfake scams is rising sharply. Experts warn that video calls, voice messages, and even emails may no longer be reliable forms of identification. In response, cybersecurity professionals are promoting a new best practice that’s actually quite old-fashioned: agreeing on secret words or code phrases with loved ones to verify identity.
Watch a report: Cybersecurity Experts Warn About AI Deepfakes.
“We Use Code Phrases at Home”
Cody Barrow, CEO of cybersecurity firm EclecticIQ, says a shared code system can make all the difference. “My wife and I have a system where we use code phrases on video calls,” he explained in a recent interview. With AI-generated impersonations becoming increasingly convincing, these personal, pre-agreed words or phrases provide a layer of security that even the most advanced algorithms can’t replicate.
This technique works similarly to security questions from banks, but with a personal twist. Rather than relying on publicly known facts, families can select inside jokes, pet names, or childhood memories to confirm authenticity.
Standard Protections May Fall Short
While many people use two-factor authentication, that method is not foolproof. Hackers have learned to bypass it, often exploiting outdated email accounts or data exposed in past breaches. When combined with deepfake technology, these vulnerabilities can be devastating—particularly for older adults unfamiliar with newer digital threats.
Watch a report: Why Deepfake Scams Are Rising.
A Simple, Effective Tool for Vulnerable Groups
Secret codes are especially useful for protecting seniors or less tech-savvy relatives. Cybercriminals frequently target these groups, banking on the likelihood they’ll respond emotionally to a distress message or urgent phone call from what appears to be a trusted contact.
Even young children, often online without supervision, can benefit from knowing a password that confirms a message is genuinely from a parent or guardian. Barrow emphasized, “What might seem paranoid in May 2025 will be common sense soon enough.”
How to Set Up a Family Code
Security experts recommend selecting a phrase that is easy to remember but hard to guess. Avoid anything tied to birthdays, pet names found on social media, or shared public facts. Instead, pick something that would only be known to family—like a phrase from a shared vacation memory or an inside joke.
It’s also wise to have a few backup phrases and to revisit them periodically. Including these safety steps in regular family discussions can help normalize the habit and ensure everyone knows what to do if a suspicious message arrives.
Looking Ahead
As deepfake capabilities evolve, the gap between what appears real and what is safe will continue to narrow. Secret passwords offer an adaptable, low-cost layer of protection that works across generations and devices. While no security measure is perfect, this simple habit may help families avoid the emotional and financial costs of AI-driven deception.
