Password Power
Phishy Business
Data Drama
Interner Street Smarts
Hacker Lingo
100

This is the worst kind of password — easy to guess, like “123456” or “password.

What is a weak password?

100

A fake email or message designed to trick you into revealing information.

What is phishing?

100

When private information is leaked, stolen, or exposed.

What is a data breach?

100

The “S” in HTTPS means your connection is doing this.

What is securing or encrypting your data?

100

A hacker who helps companies find vulnerabilities legally.

What is a white hat hacker?

200

This type of password uses simple words in a sentence instead of random characters.

What is a passphrase?

200

An email claiming “your account will be deleted in 24 hours” is an example of this tactic.

What is creating urgency?

200

You can make this unreadable to protect it from unauthorized access.

What is encryption?

200

Using this on public Wi-Fi helps keep your traffic private.

What is a VPN?

200

A network of infected devices controlled by attackers.

What is a botnet?

300

Doing this across multiple accounts increases your risk if one is breached.

What is reusing passwords?

300

When attackers personalize phishing emails using real info about you.

What is spear phishing?

300

This malware locks your files and demands payment to restore them.

What is ransomware?

300

You can hover over this before clicking to see where it actually leads.

What is a link or URL?

300

An attack that takes advantage of a flaw before a fix is available.

What is a zero-day exploit?

400

This tool securely stores and creates complex passwords for you.

What is a password manager?

400

A phishing attempt sent by text message.

What is smishing?

400

Once you “delete” a file, it often remains on your system until this happens.

What is overwriting or secure deletion?

400

These small files help websites remember your activity and preferences.

What are cookies?

400

Manipulating people into revealing confidential information.

What is social engineering?

500

A login method that combines a password with another form of verification.

What is multi-factor authentication?

500

The safest thing to do when you’re unsure about a suspicious email.

What is verify with the sender directly?

500

Sharing your birthdate and address publicly increases this risk.

What is identity theft?

500

You should never access sensitive accounts when connected to this.

What is public Wi-Fi?

500

Flooding a website with traffic until it crashes.

What is a DDoS attack?