Everyday security · No technical background needed

Cyber Intelligence

A safer digital life starts here.

Short lessons. Real-life choices. Practical habits for protecting your accounts, money and personal information.

Explore the lessons ↓Take the quick test →

Your everyday security guide

About 2 minutes per lesson

Stronger passwords

Length and uniqueness matter more than replacing a letter with a symbol.

Try this today

  1. Use a different password for every account. Start with your email: it can reset many of your other accounts.
  2. Let a password manager generate a random password of at least 16 characters where supported.
  3. For a password you must remember, use a long passphrase of unrelated words. Never copy a public example.

In real life

A shopping site leaks your password. Your email uses the same one. What should you do?

Replace both with different, long passwords and enable 2FA.

Let a password manager remember

A password manager stores passwords in a protected vault, so you do not need to reuse or memorise them all.

Try this today

  1. Choose a maintained manager from its official website or app store. Check its recovery instructions before moving your accounts.
  2. Protect the vault with a long, unique master passphrase and enable MFA. Store recovery information somewhere safe.
  3. Generate a new password for each account. If autofill unexpectedly refuses on a familiar site, stop and verify the address.

In real life

Your password manager will not autofill on a link from a delivery text. What next?

Close the link and open the delivery company’s official app or website.

Add a second lock: 2FA

Two-factor authentication asks for another proof when you sign in. A password alone is no longer enough.

Try this today

  1. Open the official app or website: Settings → Security → Two-factor authentication. Names vary between services.
  2. Prefer a passkey or security key where offered. Otherwise use an authenticator app; SMS is still better than no second factor.
  3. Save backup codes safely outside the account. Never share codes or approve a sign-in you did not start.

In real life

A caller claiming to be support asks for your login code. What do you do?

Refuse and contact support through the official app.

Pause before you tap

Scams arrive by email, SMS, social media and QR codes. A familiar logo or perfect grammar is not proof.

Try this today

  1. Treat urgency, unexpected prizes and requests for passwords or payment as reasons to pause.
  2. Open the organisation’s app yourself instead of following the message. A padlock means an encrypted connection, not an honest website.
  3. Report suspicious messages through the service and delete them. Do not send documents, passwords or login codes.

In real life

A text says your parcel needs a small fee and links to a payment page. What is safest?

Check the delivery through the official app or a known website.

Verify before sending money

A stolen account or an imitated voice can make a fake request feel personal.

Try this today

  1. If a friend urgently asks for money or a payment code, call their usual number or verify in person.
  2. Do not move money to a “safe account”, install remote-access software or share your screen because an unexpected caller asks.
  3. If money or card details were sent, contact your bank immediately through its official app or known number.

In real life

A friend messages you for an urgent payment code. What comes first?

Call their usual number and verify the request.

Keep your phone and laptop ready

Security updates fix weaknesses. Fake update pop-ups can instead install harmful software.

Try this today

  1. Turn on automatic updates for your device, browser and apps. Restart when the official updater asks.
  2. Install software from the official store or developer. Review permissions: a torch app does not need your contacts.
  3. Use a screen lock and built-in device security. Never install an “update” offered by an unexpected web page.

In real life

A website says your browser is infected and offers an urgent update. What should you do?

Close it and check updates in the browser’s own settings.

Keep a copy you can recover

A lost phone, accidental deletion or ransomware should not erase your important files.

Try this today

  1. Back up important photos and documents automatically to a protected service or another device.
  2. Keep an additional copy disconnected or protected by version history. File syncing alone can copy deletions too.
  3. Try restoring one harmless file now. Secure your backup account with a unique password and MFA.

In real life

Your files sync to the cloud. Is that always a complete backup?

No: deletions may sync too. Check recovery history and test a restore.

If something already happened

Act promptly. You do not need to feel embarrassed or solve it alone.

Try this today

  1. If you entered a password on a suspicious site, use a trusted device to change it through the official service. Replace reused passwords too.
  2. Sign out other sessions, check recovery details and email forwarding rules, and enable MFA. If locked out, use the provider’s official recovery process.
  3. Tell affected contacts about fake messages. If you shared card details or lost money, contact the bank immediately. Save evidence without reopening suspicious links.

In real life

You entered your email password on a fake page. What now?

Use a trusted device to secure the account and sign out other sessions.

Cyber Intelligence

Quick test

Eight everyday situations. Choose what you would do, then learn why. No timer, no sign-up.

Your answers stay in this page while it is open. They are not saved or sent to a server.

This is a learning exercise, not a security assessment of your devices or accounts.

Further reading

Based on public guidance from CISA, NIST, the NCSC and the FTC. Reviewed 2 November 2026.