Security
Phishing, password leaks, malicious downloads: the risks and calm next steps.
Eberprot P / faq
FAQ
Short, self-contained answers, from the basics to the practical. Where it's easy to go wrong, we point out what to check and where.
The basics
Should I change my password regularly?
Current guidelines (such as NIST SP 800-63B) don't require regular changes without a reason. You should change your password if you suspect a leak. Uniqueness and length matter more.
Is public Wi-Fi safe?
HTTPS sites encrypt your data, so interception of the contents is unlikely. The risk is a fake hotspot and phishing pages. Don't enter passwords on pages that open by themselves.
Do I need antivirus software?
Windows has Microsoft Defender built in and turned on by default; for most home users, updates and caution with downloads matter more than choosing a paid product.
What is a 3-2-1 backup?
Three copies of your data on two types of storage, with one kept away from home. Details are in our how-to guides.
Practical questions
How do I check a downloaded file?
Compare its SHA-256 checksum with the one published on the developer's website. A match means the file wasn't corrupted or tampered with in transit, but it doesn't guarantee the source itself is trustworthy.
Why does a website load for my friend but not for me?
Common causes are DNS, the browser cache or blocking at the network level. Start with nslookup and flushing the DNS cache (see "Troubleshooting").
What's the difference between a 301 and a 410 response?
301 means the page has moved permanently and the browser goes to the new address. 410 means the page has been permanently removed with no replacement. 404 means the page wasn't found, with no reason given.
What should I do if I lose the phone with my authenticator?
Sign in with your backup codes or a spare key and set up the second factor again. If you have no backup methods, you'll have to go through the account recovery process for each service.
A common myth
"The padlock in the address bar means the site is safe." In fact, the padlock only tells you the connection is encrypted. A scam site can get a certificate and show a padlock too.
Sources and verification
- NIST SP 800-63B
- RFC 9110: HTTP Semantics
- Microsoft: Microsoft Defender information
Software and service interfaces change. We list the versions we tested commands on; on other versions the steps may differ.