Cybersecurity basics for beginners

Your beginner learning path

1. 01

   Recognize

   Notice the request, not just the logo

   Phishing is an attempt to trick you into sharing information or taking an unsafe action by posing as someone you trust. A convincing message can still lead to a fake sign-in page.

   Try it safely: read the five fictional messages and explain what each sender wants. Use only the examples on this site; don’t open suspicious messages to practice.

   Read the FTC’s phishing guide → ↗ (opens in a new tab or window)
2. 02

   Protect

   Start with your most important account

   Your email can be a route to resetting other passwords. Give it a unique password, enable an additional sign-in check, and make sure you can still use its recovery options.

   Try it safely: open your email provider’s app directly and review the security settings. Keep backup codes private.

   Use the account protection checklist →
3. 03

   Prepare

   Look after the device you use every day

   Software updates fix security problems. Backups give you a separate copy if files are lost. These habits work together; neither replaces the other.

   Try it safely: check the built-in update settings and confirm you can open a file from a recent backup.

   Explore CISA’s four safety habits → ↗ (opens in a new tab or window)
4. 04

   Respond

   Know where you would turn for help

   A click, a stolen password, and a money transfer need different responses. Decide where to find your bank’s contact details and your account provider’s recovery page before you need them.

   Try it safely: bookmark the recovery guide. If this involves work, find your organization’s reporting channel.

   Ready for more? Compare beginner courses →

Your first-session checklist

• I can explain one phishing warning sign.I will check unexpected requests independently.
• My email uses a unique password and an extra sign-in check.I know where my recovery options are stored.
• I know how to find software updates and backups.I use my device’s settings, not a pop-up’s download button.
• I know who to contact if something happens.I can find my bank, account provider, or workplace support without using a suspicious message.

Courses, podcasts & videos