SafeOnline.

Cybersecurity awareness

Most online danger comes from three familiar tricks.

You don't need to be technical to stay safe. This guide explains the three threats ordinary internet users meet most often — and exactly what to do about each one, in plain English.

01Phishing 02Weak passwords 03Malware

Most people use the internet every day without thinking about the risks that come with it. Attackers count on that. The good news is that the same handful of habits protects you against the overwhelming majority of attacks. Read the three sections below, then keep the checklist at the end somewhere handy.

Threat 01

Phishing

Fake messages designed to steal your details.

Phishing is one of the most widespread forms of cybercrime today. An attacker sends an email, text, or message that looks like it comes from a trusted organisation — your bank, a delivery company, a government service — to trick you into handing over passwords, card numbers, or other personal details.

How to spot it

  • Urgency and fear. "Your account will be closed in 24 hours." Real organisations rarely pressure you like this.
  • Odd sender address. The display name looks right, but the actual email address is strange or misspelled.
  • Links that don't match. Hover over a link (don't click) and check the real address. If it isn't the official site, leave it.
  • Requests for secrets. No legitimate organisation asks for your full password by email or text.

What to do

Don't click links or open attachments in unexpected messages. If you're unsure, go to the organisation's website directly by typing the address yourself, or phone them using a number you already trust. Report and delete the message.

Threat 02

Weak passwords

The easiest door for an attacker to walk through.

Passwords like 123456, password, or your own name are easy for attackers to guess or crack with automated tools in seconds. Reusing one password across many sites is just as risky: if one site is breached, every account that shares that password is exposed.

What makes a strong password

  • Long beats complex. A passphrase of several unrelated words — like copper-violin-harbour-7 — is both strong and memorable.
  • Unique for every account. One breach should never put your other accounts at risk.
  • Turn on two-factor authentication (2FA) wherever it's offered. Even if your password leaks, the attacker still can't get in.

What to do

Use a reputable password manager. It generates and remembers a long, unique password for every site, so you only need to remember one strong master password. This single habit removes the biggest weakness most people have.

Threat 03

Malware

Harmful software that infects your device.

Malware is software built to harm you — viruses, ransomware that locks your files until you pay, and spyware that quietly steals your data. It usually arrives through a dodgy download, a fake attachment, or a compromised website.

How to avoid it

  • Keep everything updated. Updates fix the security holes malware relies on. Turn on automatic updates for your operating system, browser, and apps.
  • Only install from trusted sources. Use official app stores and the software maker's own website — not random download sites.
  • Be wary of attachments. Don't open files you weren't expecting, even from people you know.
  • Back up your important files so ransomware can never hold them hostage.

What to do

Run the security software built into your device (such as Windows Security or your phone's protections), keep it switched on, and let your system install updates promptly. If a device starts behaving strangely, disconnect it from the internet and run a full scan.

Your 60-second safety checklist