Cybersecurity Essentials: Stay Safe and Secure Online

Explore how passwords serve as authentication for access control and why passwords are stored as hashes. Understand the advantages and downsides of password-based security.

Discover how data breaches, credential stuffing, dictionary attacks, and brute force threaten passwords, and learn to create long, random, unique passwords protected by a password manager.

Demonstrates how quickly weak passwords can be cracked, highlighting dictionary attacks and substitutions, and shows that long, random passwords with letters, numbers, and symbols resist attackers.

Learn how password managers generate and store strong, unique passwords in an encrypted vault, and how to use a strong master password, biometric login, and autofill to stay secure online.

Understand how multi-factor authentication uses two or more factors. See something you know (password or PIN), something you have (codes from a phone or token), and something you are (biometrics).

Learn why multi-factor authentication requires two or more factors and strengthens online security beyond passwords. Discover options like one-time passwords, authenticator apps, and physical security tokens.

Choose strong authentication factors to protect your accounts, evaluating passwords, SMS-based MFA, biometrics, security keys, authenticator apps, and smart cards for better security.

Configure multifactor authentication for online accounts by choosing app-based mfa, syncing via qr code or setup key, and understanding why app-based methods offer secure, sms-free protection.

Explore how phishing threatens multifactor authentication by tricking users into sharing one-time passwords and codes from SMS or authenticator apps, and learn to verify legitimate sites and URLs.

Learn how phishing exploits deception, coercion, and manipulation to steal data, credentials, money, or malware, primarily via email, including spear phishing, BEC, whaling, and smishing and vishing.

Explore how phishing uses psychology and manipulation to prompt clicks, attachments, or replies, and learn seven persuasion principles: reciprocity, authority, social proof, unity, scarcity, consistency, and liking.

Identify phishing cues by analyzing example emails, spotting red flags like non-corporate domains, BCC mass mailers, poor grammar, fake invoices, and requests for personal data.

Learn how phishing extends beyond email to SMS, social media, and collaboration platforms, including smishing and link shorteners, and develop strategies to spot and avoid these attacks.

Learn how attackers use cloud-based document sharing to evade email scanners and exploit trusted domain names, and follow safer practices by not opening unsolicited shared documents and checking links.

Explore online security threats and risks of internet use, including phishing pages, malware, and information harvesting, and learn practical remediation to stay safe online.

Explore how web addresses identify pages through domains, top-level domains, subdomains, directories, and query strings, and inspect them to spot phishing.

Identify suspicious downloads by recognizing trojan horses and misleading offers; strengthen protection with regular software updates and automated and manual antivirus scans from official sites.

Understand how trackers and cookies identify you across sites to power targeted advertising and build profiles, while ad blockers protect privacy after checking reviews.

Understand device security by recognizing malware types like info stealers, trojans, ransomware, backdoors, and botnets. Implement defenses: strong passwords, disk encryption, antivirus, vpn on untrusted networks, and reputable software sources.

Choose a reputable antivirus and use it with regular scans, updates, and multi-method detection (signature, anomaly, behavior) to protect against malware.

Protect your mobile devices by understanding threats from malicious apps, insecure permissions, and public wi-fi. Strengthen security with strong authentication, official app stores, antivirus, VPN, limited permissions, and timely updates.

Learn how virtual private networks create encrypted tunnels on public networks, securing corporate data for remote work, protecting privacy on public wifi, and disguising origin for anonymity and geofencing evasion.

Use vpn to create a secure, encrypted connection that protects data from eavesdropping on untrusted networks, enables access to corporate resources, and reduces attack opportunities by routing and inspecting traffic.

Discover how a vpn creates a secure encrypted tunnel by establishing a shared key and using symmetric encryption to route traffic via a vpn endpoint.

Explore how to choose a VPN solution for corporate and personal use, note that a VPN is not end-to-end encryption, and assess provider visibility and use-case questions.

Learn how to create strong passwords and test if they have been compromised, and explore cybersecurity tools such as password managers, VPNs, and antivirus to stay safe online.

Explore the essential role of multi-factor authentication (MFA) in cybersecurity, from email and SMS codes to hardware keys and biometrics, through Hannah's breach and best practices.