Build habits that
protect your everyday.
Three short lessons. Real-life decisions. Practice spotting phishing, avoiding password reuse, and protecting sign-ins.
Free self-paced practice · No sign-up · English edition
Pause before you click
An urgent message is a reason to slow down. If an alert asks you to sign in or pay, open the company’s official app or a trusted bookmark to check it independently.
FTC: Recognize and avoid phishingMake each password a fresh start
Use a long, randomly generated password for each account, and keep it in a password manager. If a password has been exposed, replace it everywhere you reused it.
CISA: Strong passwords and password managersAdd another layer to sign-in
Turn on multi-factor authentication where it is offered. Follow the service’s instructions, review your recovery options, and keep recovery codes somewhere protected.
FTC: Two-factor authenticationPut one habit into practice.
Generate a unique password or make a security checklist for your accounts, phone, and home.
Try the free tools