I've always thought the best way to start is to tell people that they're creating a self-sovereign identity that works on multiple clients. Don't talk about cryptography

That way the keypair talk makes sense ... Identity = keys