Security & Privacy
Everyday security and privacy settings in plain English.
35 posts in this topic
How to tell if someone is tracking your phone: watch for fast battery drain, extra data use, unknown apps, and strange settings on Android and iPhone.
Two-factor authentication adds a second login step beyond your password, so a stolen password alone cannot open your account, greatly improving your security.
How to know if a text message is a scam: look for urgent threats, unknown numbers, odd links, requests for codes or payment, and misspellings, then verify before acting.
Clicked a phishing link? Do not enter details, disconnect if you downloaded anything, change passwords, enable two-factor authentication, and scan your device. Steps here.
To see what devices are logged into your Google account, open your Google Account security settings and check Your devices, where you can review and sign out any device.
Learn how to tell if an email is really from your bank by checking the sender address, avoiding links, watching for urgency, and confirming in the official app.
A passkey lets you sign in with your face, fingerprint, or device PIN instead of a password. Here is what a passkey is, how it differs, and why it is safer.
To stop apps tracking your location in the background, open your phone's location settings and set each app to While Using or Never. Steps for Android and iPhone.
To check if your email was in a data breach, search it on Have I Been Pwned or your browser's password checkup, then change any exposed passwords. Full steps here.
Scanning a QR code is usually safe, but random QR codes can hide scam links or payment traps. Learn the risks and how to check a QR code before you open it.
To reduce spam calls, register on your country's Do Not Call list, turn on carrier and phone call blocking, and avoid confirming your number. Steps for Android and iPhone.
Clicking a link then closing it is low risk on an updated device; danger comes from entering info or downloading files, not from briefly viewing a page.
A VPN hides your IP and encrypts traffic, but it does not stop malware, phishing, cookies, account tracking, weak passwords, or data breaches at websites.
Verification codes you didn't request usually mean someone is trying to log in with your password, or a scam wants the code. Never share it; change your password.
SIM swapping is when a scammer moves your phone number to their SIM to intercept your texts and 2FA codes, then take over your accounts. Add a carrier PIN.
Face unlock is safe on phones with secure 3D face mapping like Face ID; basic camera-only face unlock is weaker and can sometimes be fooled by a photo.
Clearing cookies logs you out of sites, forgets preferences, and resets browser tracking, but it does not delete your accounts, history, or saved passwords.
A suspicious login alert means your email saw a sign-in from a new device or location. It is often you, but if not, change your password and turn on 2FA.
A passkey is a passwordless login that replaces your password with a secure key on your device, unlocked by fingerprint, face, or PIN, and resists phishing.
Public charging is safe for your data if you use a wall outlet, your own charger, or a data blocker. Modern phones block USB data until you approve it.
Charging at a public USB port is usually safe on modern phones; the rare juice-jacking risk is avoided by using a wall outlet or a USB data blocker.
Your phone says a network is blocking encrypted DNS when Wi-Fi prevents private DNS, so your site lookups may be visible. It is a warning, not a breach.
Incognito only stops your browser saving local history and cookies. It does not hide your IP, activity from your ISP, employer, or the websites you visit.
You get so much spam because your email or phone number was leaked in a breach, sold, or scraped online. Learn why it happens and how to cut it down.
Phishing is when scammers pose as a trusted company to trick you into giving passwords, codes, or money. Learn the signs and how to stay safe online.
Saving passwords in your browser is reasonably safe if your device is locked and protected, but a dedicated password manager offers stronger security.
App tracking means an app follows your activity across other apps and sites to build a profile for ads. Learn how it works and how to turn it off.
A firewall controls which network traffic can enter or leave your device or network, blocking unwanted connections while allowing the ones you trust.
Antivirus can slow your PC during full scans and updates because it checks files in real time. Learn why it happens and how to speed things up.
HTTPS means your connection to a website is encrypted, so data sent between you and the site cannot be read or changed by others on the network.
SIM not provisioned means your carrier has not yet activated the SIM on their network. Wait for activation, restart, or contact your carrier to fix it.
A strong password is long, unique, and hard to guess. Aim for at least 12 characters or a random passphrase, and never reuse it across accounts.
A data breach means information held by a company was exposed or stolen. Learn what gets leaked, the risks, and the steps to protect your accounts.
A VPN hides your IP address and encrypts your traffic from your ISP and network owner, but not from sites you log into or the VPN company itself.
Public Wi-Fi is mostly safe today because HTTPS encrypts your traffic, but avoid fake hotspots, use a VPN, and never trust login pages that look off.