How to use public Wi-Fi without guessing
A familiar-looking network name does not prove who runs it. Confirm the network with the venue, keep device sharing controlled, and use your usual secure services.
Digital Safety
Digital Safety
What the padlock in the address bar means
HTTPS helps protect the connection to the address you opened. It does not establish that the organization behind that address is honest or that a payment request is legitimate.
How to start using a password manager
A password manager helps you use a different strong password for each service. The first task is protecting the vault and making sure you can recover access to it.
What to do in the first hour after you click a bad link
What happened after the click matters. Simply opening a page, entering a password, approving a request, and running a file call for different responses.
What to do when a text says it is from your bank
A message that looks like it came from your bank may be trying to lead you elsewhere. Open the bank’s usual app or use a number you already trust to check the claim.
Business email compromise: verify bank changes before paying
A convincing invoice can arrive from a real but compromised mailbox. Protect the payment decision with independent verification of changes to the beneficiary or account details.
Phishing beyond the email filter: verify the request, not the badge
An email that passes technical checks can still ask you to do something harmful. A trusted sender’s account may be compromised, and a plausible message may lead to an unsafe action.
MFA push fatigue: what to do with unexpected approval requests
Repeated sign-in prompts can pressure someone into approving access they did not start. Treat an unexpected approval request as a signal to stop, verify, and investigate.
Stolen passwords: stop credential stuffing across every login route
An attacker can reuse a stolen password through more than the main sign-in page. Review mobile APIs, legacy access, and recovery routes alongside the login form.