Phishing — How to Recognize It Before You Get Hooked
Modern phishing looks legitimate — always check the domain, never log in from a link, and treat urgency as a red flag.
You can't change what you don't see. Self-awareness is the unglamorous skill of noticing your own patterns — what triggers you, what drains you, which stories you tell yourself. The advice here helps you observe yourself honestly without drowning in self-analysis.
Modern phishing looks legitimate — always check the domain, never log in from a link, and treat urgency as a red flag.
Default social media settings expose everything — spend five minutes switching to the most restrictive options that still work for you.
Your recovery email can reset everything else — secure it with a unique password and 2FA before anything else.
Honest security question answers are easy to research — use fictional answers and store them like passwords.
SMS 2FA still blocks most attacks and is far better than nothing — but an authenticator app protects you from SIM-swapping too.
A verification code sent to your phone is the key to your account — no real company will ever ask you to read it to them.
Check haveibeenpwned.com to see if your email appeared in a data breach — then change compromised passwords immediately.
Public Wi-Fi makes your traffic visible to others on the network — avoid sensitive logins or use a VPN to encrypt your connection.
A guest Wi-Fi network isolates visitors and smart devices from your personal computers — most routers support this out of the box.
Apps accumulate permissions you forgot you granted — review and revoke unnecessary access every few months.
Most apps work fine with approximate location — switch off precise access to stop them from mapping your exact movements.
Photos embed GPS coordinates and other metadata — strip this data before sharing images directly via email or messaging.
Incognito mode only prevents local history storage — your ISP, employer, and websites can still see what you do.
Data brokers collect and sell your personal information — start opting out through their removal pages or dedicated services.
Google stores years of your search, location, and activity data — visit your privacy dashboard to review and delete it.
Clicking Accept All on cookie banners lets dozens of companies track you — take five seconds to reject non-essential cookies.
Reserve your real name for accounts that require trust and identity — use pseudonyms for forums, hobbies, and casual sign-ups.
Clearing history does not remove site permissions — review and revoke camera, microphone, notification, and location access regularly.