Resources

Knowing about security is not the same as being secure, and the habits that close that gap are smaller than you think.

Attackers do not sit typing guesses into a login box, and understanding what they actually do changes how you build a password.

The capital-letter-number-symbol rule we were all taught turns out to be a poor measure of what makes a password hard to crack.

Your own accounts can be locked down tight and still be reached through the least protected person in your household.

Handing every password to one piece of software sounds risky until you understand how a password manager actually stores them.

Free Wi-Fi in cafes, airports and hotels is convenient and usually harmless, which is exactly what makes the exceptions costly.

The easiest way into your account is not cracking your password but persuading you to hand it over.

Your phone holds your messages, your photos and the codes that protect everything else, which makes it a single point of failure.

There are good reasons to share a password, and better ways to do it than texting it and hoping for the best.

Fake login pages are built to be indistinguishable from the real thing, but they leave signs you can learn to catch.

Getting hacked is rarely a single bad afternoon, and the real cost shows up in places most people never anticipate.

Letting your browser remember every password is effortless, which is precisely why it is worth understanding what you are trading away.

Forcing a password change every 90 days feels responsible, but the evidence suggests it makes people less safe, not more.

Two-factor authentication is a second lock on your door, and not all second locks are equally hard to pick.

A convincing email from your bank is the oldest attack on the internet because it keeps working.

That apologetic email about a security incident is the end of a long story, and knowing the rest tells you how worried to be.

Storing passwords online means trusting a company, unless the design makes it impossible for that company to read them.

One favourite password used everywhere means one breach anywhere unlocks everything you own.

Your first pet and your mother's maiden name are not secrets, and treating them as passwords is the problem.

Most people would protect their bank account first, but the inbox that can reset it is the account that really matters.