Big ideas. Useful next steps.

A familiar-sounding voice is not enough to establish who is calling.

A browser extension can read or change parts of your browsing experience according to its permissions.

Before uploading a document, decide whether the service is an appropriate place for its contents.

Two-factor authentication adds another proof of identity beyond a password.

A passkey uses cryptographic credentials rather than a password you type into a website.

Private browsing changes how a browser handles parts of local session history and storage.

A phishing message can be fluent, well-designed and apparently relevant to your work.

Connected apps can retain access after the task that justified the connection is finished.

A password manager helps you use different strong passwords across services without memorising them all.

A free-credit offer can be attractive enough to make people overlook an unfamiliar domain or an unnecessary request for information.