Beginner's Guide to Cyber Safety

Principais ideias

• Most attacks are automated and opportunistic, so the goal is not to be unbreakable but to be harder to break into than the next account.
• Your email account can reset almost every other account, so it deserves your strongest password, a passkey or authenticator app, and current recovery details.
• A password manager with a unique password for every site defeats credential stuffing, the very common trick of reusing leaked passwords against you.
• Not all two-step login is equal: codes by text can be stolen with a SIM swap, while passkeys refuse to work on fake sites.
• After a break-in, changing the password is only the start: sign out every session, remove unknown forwarding rules and apps, then check recovery settings.

Dentro deste bit

1. What cyber safety is really protecting

   Cyber safety is the set of habits and settings that keep your accounts, money, devices and reputation under your control. The attacker most people imagine is a lone genius targeting them personally.

2. The vocabulary behind almost every attack

   A handful of words explain most of what goes wrong. Phishing is a message that pretends to come from someone you trust so you hand over a password, a code or money.

3. Why your email is the master key

   Almost every account you own has a forgotten-password button, and almost every one of those buttons sends a reset link to your email. That makes your inbox the master key to your digital life.

4. The first three moves that matter most

   If you do only three things, do these, in this order. First, put your email and your phone's own account behind the strongest login available: a passkey where offered, otherwise an authenticator app, and text codes only as a last resort.

5. Beginner mistakes, obvious and subtle

   The obvious mistakes are well known and still common: reusing one password everywhere, clicking a link because the message looked official, reading a one-time code aloud to a caller who claims to be from the bank. No genuine bank or company will ever ask you for that code; it exists precisely so that only you can use it.

6. Recovering from a break-in, then going further

   When something goes wrong, speed and order matter. From a device you trust, change the password of the affected account, then use its setting to sign out every other session, which evicts anyone still logged in.