Cybersecurity Basics for Everyday Life
Lock down your accounts, spot scams before you click, and keep your family's money and data out of criminal hands.
This course is for members
$9 unlocks every course in the library, this one included, plus a credit to build a topic of your own and at least 10 new courses every month.
What you will learn about Cybersecurity Basics for Everyday Life
The 7-day sprint
- Know What You Are Defending. Almost all everyday cybercrime is a volume business that targets people who skipped the basics, so a short list of habits removes you from the easy-target pool.
- Long, Unique, Managed Passwords. Password security today means length and uniqueness handled by a password manager, not clever character substitutions you remember yourself.
- Turn On Multifactor Authentication. Multifactor authentication means proving who you are with more than one distinct kind of evidence, so a stolen password alone is not enough to get in.
- Passkeys and Phishing Resistance. A passkey signs a one-time challenge with a private key that never leaves your device, so there is no secret for you to be tricked into giving away.
- Recognize, Verify, Report Phishing. Phishing works by telling a story that makes you act fast, so the defense is a rule, not a feeling: verify through a channel you chose yourself.
- Updates and Device Hygiene. Software updates close the specific holes attackers are already exploiting, and a handful of phone settings close the rest of the everyday gaps.
- Recovery, Reporting, and the Family Plan. Security that only works when nothing goes wrong is not security, so plan your recovery paths and your response before you need them.
The 80/20: the 7 concepts that matter most
- One unique, long password per account, held by a password manager
- Multifactor authentication, and knowing which factors are strong
- Verify through a channel you chose, never the one you were sent
- Prune the fallbacks, because an account is only as strong as its weakest route
- Update everything, automatically
- Passkeys, when the option is offered
- Know the money tells, and know where to report
The core idea, explained like you are 5
Every login is you proving you are you, and nearly every attack is either stealing that proof or tricking you into handing it over.
Then the quiz and the ladder
10 questions that correct you when you are wrong, and beginner, intermediate, advanced levels, each with a practical exercise.
Created Sep 13, 2026. No mistakes have been reported by learners.
Written from these sources
- Secure Our World | CISA, cisa.gov. day 1 framing and the four core actions.
- From Awareness to Action—Cybersecurity for Everyone from K through Gray | CISA, cisa.gov. authoritative ordering of CISA's four steps.
- Secure Yourself & Your Family | CISA, cisa.gov. plain definition of multifactor authentication, habit framing.
- Secure Our World Opportunities Guide PUBLICATION: AUGUST 2024, ahla.com. restated four easy steps for day 1.
- Secure Our World: During Cybersecurity Awareness Month, Take Four Steps for Better Online Safety, ansi.org. campaign context, flagged dated complexity advice.
- NIST SP 800‑63B (PDF), nvlpubs.nist.gov. day 2 and expert stage password requirements.
- global password strategies, corp.unicode.org. verbatim length and character-set requirements.
- NIST SP 800-63B DIGITAL IDENTITY GUIDELINES:, profsandhu.com. blocklist, no forced rotation, hashing and KDFs.
- NIST password guidelines - Compliance Made Simple, compliance-made-simple.ch. Appendix A reasoning, rate-limited threat model.
- NIST 800-63B Rev 4: What’s New in Password Security | Enzoic, enzoic.com. Revision 4 minimum length direction, hedged.
- NIST password guidelines: SP 800-63B explained, netwrix.com. length over complexity, passphrase support.
- NIST Password Guidelines (SP 800-63B) | DevToolbox, dev-toolbox.tech. composition rule quote, security questions, lockout advice.
- 2022-2023 NIST 800-63b Password Guidelines and Best Practices, specopssoft.com. breached-password blocklist requirement in day 2.
- NIST Password Manager Guidance: SP 800-63B-4 (2025), bellatorcyber.com. password managers as expected infrastructure.
- FIDO Passkeys: Passwordless Authentication | FIDO Alliance, fidoalliance.org. day 4 passkey definition, sync and recovery.
- How Passkeys Work | Passkey Central, passkeycentral.org. registration flow and public key cryptography basics.
- What is a FIDO Passkey? FIDO Alliance Passkeys Explained, passkeys.com. key pair mechanics and challenge signing.
- Phishing-Resistant Authenticator Playbook - IDManagement, idmanagement.gov. device-bound versus synced passkeys, roaming authenticators.
- What Is a FIDO Passkey? | Akamai, akamai.com. private key never leaves device, platform storage examples.
- Passkeys (FIDO2) authentication method in Microsoft Entra ID - Microsoft Entra ID | Microsoft Learn, learn.microsoft.com. origin binding and replacing phishable methods.
- What Is Phishing-Resistant MFA? Modern Security, sentinelone.com. domain binding, synced passkeys, AAL3 note.
- © 2025 FIDO Alliance. All rights reserved., fidoalliance.org. only practical consumer phishing-resistant option, fallback elimination.
- What is FIDO Authentication and How Does It Work? – Rublon, rublon.com. FIDO standards versus passkey credential distinction.
- WHITE PAPER A Comprehensive Overview of FIDO & Passkeys, rfideas.com. adoption list of major companies supporting passkeys.
- Mobile Communications Best Practice Guidance, cisa.gov. day 6 mobile hygiene, app permissions, reporting address.
- The urgent need to replace SMS-based MFA | 1Password, 1password.com. CISA SMS warning and FIDO ranking of MFA.
- CISA pushes guide for high-value targets to secure mobile devices | CyberScoop, cyberscoop.com. carrier PIN, updates, password manager recommendations.
- CISA Recommends Signal for Secure Mobile Communication, anvilogic.com. Signal, Lockdown Mode, Private DNS settings.
- SMS vs Authenticator Apps: What CISA Actually Recommends, dogtownmedia.com. SIM swapping definition and SMS stepping-stone framing.
- SIM Swapping: How the Attack Works and How to Protect Your Users - Security Boulevard, securityboulevard.com. weak SMS fallback left enrolled after adding MFA.
- CISA issues mobile security guidance amid cyber threat concerns | Technology | koamnewsnow.com, koamnewsnow.com. condensed mobile security checklist for day 6.
- How To Recognize and Avoid Phishing Scams | Consumer Advice, consumer.ftc.gov. day 5 verification habit and post-click steps.
- protect yourself phishing scams, consumer.ftc.gov. email top contact method, filters, reporting addresses.
- Phishing scams can be hard to spot | Consumer Advice, consumer.ftc.gov. story-driven pretexts and contacting friends separately.
- Scams | Consumer Advice, consumer.ftc.gov. impersonation red flags, QR codes, fake CAPTCHA.
- Phishing Scams - FTC Consumer Advice, consumer.ftc.gov. traffic hearing and rewards points text examples.
- How Not to Get Hooked by a 'Phishing' Scam, northsidefederal.com. classic phishing definition and type-the-address advice.
- www.ftc.gov, ftc.gov. FTC consumer helpline number in day 7.
- Cryptocurrency and AI Scams Bilk Americans of Billions | Federal Bureau of Investigation, fbi.gov. 2025 IC3 complaint counts and loss figures.
- FBI Releases Its 2025 Internet Crime Report and Highlights Significant Cyber Threats to Financial Institutions and Their Customers: Bressler, Amery & Ross, P.C., bressler.com. phishing report count, elder fraud totals, loss increase.
- South Carolinians Lose $264 Million to Cybercrime, According to Newly Released 2025 Annual IC3 Report | Federal Bureau of Investigation, fbi.gov. headline loss totals and percentage increase.
- 1 2025 IC3 ANNUAL REPORT, ic3.gov. age breakdown and report framing for day 1.
- FBI Report: Internet Crime Losses Hit $20.9 Billion, aarp.org. underreporting caveat and senior loss figures.
- FBI: Seniors lost $7.75B to cybercrime in 2025 — a 59% jump, housingwire.com. AI voice cloning, crypto kiosks, FBI household actions.
- Annual Reports - Internet Crime Complaint Center (IC3), ic3.gov. how complaints are handled after filing.