The fakes in The Phishing Gallery fooled almost everyone at least once — that was the point of the exercise. Staying secure online is not about fear, and it is not about genius. It is a small set of habits, practised until they are boring. Boring is the goal.
Passwords that do their job
Length beats cleverness — three unrelated words make a stronger
password than any amount of swapping @ for a. What matters even
more is reuse: when one site leaks, every account sharing that
password leaks with it. Your email deserves the strongest, most
unique password you own, because email can reset everything else.
The Password Checker had you write the rules in code; the rules
apply to you too.
Spotting the hook
Phishing runs on urgency — act now or your account will be closed — because urgency switches off checking. The habits that beat it are unglamorous: slow down, read the actual sender address, and never follow a link you were pushed toward. Type the site’s address yourself instead. A real organisation will survive you taking sixty seconds to verify.
Sharing on purpose
Every profile field, photo, and location tag is a decision, and the audience is always bigger than the follower count — screenshots travel. The useful question is never “is this secret?” but “who could see this, and am I fine with that?” Privacy settings are where that answer becomes real: who can see posts, who can find the account, and which apps still hold permissions they no longer need. Who Owns Your Data picks up what happens after you share.
Habits worth building this week
- Turn on two-factor authentication — email first, then the rest
- Retire any password doing double duty across accounts
- Install that postponed update — see Software and Operating Systems
- Walk through privacy settings on the app you use most
- Sixty-second rule: verify urgent messages before acting on them
Curriculum connection
B3.1
apply safe and effective data practices when using digital technology in various contexts
Link to original
B3.2
apply safe and effective security practices, including practices to protect their privacy, when using digital technology in various contexts
Link to original
A2.2
analyze personal and societal safety and cybersecurity issues related to digital technology, and identify measures and technologies that can help mitigate related concerns for individuals and communities
Link to original