Password Basics & Account Safety
Email Safety & Suspicious Messages
Social Media & Personal Information
Safe Browsing & Online Shopping
Workplace & Device Security
100

You should never use this personal information in your password, even though it's easy to remember—like your birthday or your pet's name

What is personal information

100

If an email asks you to "click here to verify your account" but you didn't request it, it's probably this type of scam that sounds like fishing

What is phishing

100

You should check these regularly on social media to control who can see your posts and personal information

What are privacy settings

100

When shopping online, make sure the website address starts with these letters to ensure your payment information is protected

What is HTTPS

100

When you leave your desk, even for a few minutes, you should do this to your computer—it's like locking your car

What is lock your screen (or log out)

200

This handy tool remembers all your passwords for you, so you only need to remember one master password

What is a password manager

200

Before clicking any link in an email, you should do this first—like looking both ways before crossing the street

What is hover over it (to see where it really goes)

200

Posting photos of this document on social media is risky because it contains personal information criminals can use

What is your driver's license (or ID card)



200

This small lock icon in your browser's address bar means the website is secure for entering personal information

What is the security lock (or padlock icon)

200

You should never leave these items visible in your car or on your desk where others can see sensitive information

What are documents (or papers with confidential information)

300

A strong password should be at least this many characters long—about the same number of letters in the word "hamburger"

What is 8 characters (or longer)

300

This red flag in emails includes urgent language like "Act now!" or "Your account will be closed!"—it's trying to make you panic

What is urgent language (or pressure tactics)

300

Those fun quizzes that ask "What's your superhero name using your first pet's name and street you grew up on?" are actually trying to collect this

What are security question answers

300

You should only download software from these trusted sources, not from random websites that pop up

What are official websites (or app stores)

300

If you find this item in a parking lot or lobby, don't plug it into your computer—it could contain malware

What is a USB drive (or flash drive)

400

When you get a text with a code to enter after typing your password, you're using this extra security layer that starts with "two"

What is two-factor authentication (or 2FA)

400

If you receive a suspicious email at work, you should do this right away to help protect your company

Use the Phish Alert Button in Outlook

400

You should be careful about posting these online because they can tell criminals when you're not home

What are vacation photos (or travel plans)

400

If a deal online seems too good to be true—like a $2000 laptop for $200—it probably is this

What is a scam

400

When working from home, make sure to use this type of internet connection instead of public Wi-Fi for work tasks

What is a secure/private network (or your home Wi-Fi)

500

You should do this immediately if you think someone else knows your password—it's like changing the locks on your house

What is change your password

500

These email attachments are especially risky and you should never open them unless you're expecting them—they often end in .exe or .zip

What are unexpected attachments

500

Before accepting friend requests from people you don't know, you should do this first—it's like checking who's at your door before opening it

What is verify who they are

500

These annoying pop-ups that say "You've won!" or "Your computer is infected!" are trying to trick you into doing this

What is clicking on them (or downloading malware)

500

Before throwing away old computers or phones, you should do this to protect your personal information

What is wipe/erase all data