Phishing
Fake emails and websites trick you into handing over a password or code. Warning signs: urgency, pressure and a web address that looks like the real one.
Eberprot P / security
Security
In short: four habits prevent most problems — unique passwords in a password manager, a second factor, timely updates and backups. Below are the main risks, the warning signs and calm next steps.
Risks
Password reuse
A leak from one site exposes your other accounts that use the same password.
Outdated software
Updates fix known vulnerabilities; without them, your device stays exposed.
Malicious downloads
"Cracked" software, cheats and key generators often contain malicious code.
Data loss
Without a backup, a drive failure or ransomware means losing your files.
Open Wi-Fi networks
HTTPS sites protect the data you send, but a fake hotspot can show you a phishing page.
What you can do
- Use a password manager and a unique password for every service
- Turn on a second factor for email, banking and social media
- Turn on automatic updates for your system and browser
- Make backups using the 3-2-1 rule
- Download software only from developers' websites and official app stores
What to avoid
- Entering your password via a link in an unexpected email or message
- Sharing verification codes with anyone, even "support"
- Disabling your antivirus because an installer tells you to
- Installing cheats, "cracks" and "boosters" from random sources
Situation — action — limitation
| Situation | Action | Limitation |
|---|---|---|
| You entered your password on a suspicious site | From another device, change the password and sign out all other sessions | If you reused the password, change it everywhere it was used |
| You got an SMS code you didn't request | Don't share the code with anyone; change your account password | The code means someone knows your password |
| You ran a suspicious file | Disconnect the device from the network and run an antivirus scan | If files appear to be encrypted, contact a specialist |
| A service notified you of a data breach | Change your password and turn on a second factor | A breach can't be undone: expect phishing emails |
When you need a specialist
If your files have been encrypted with a ransom demand, money has been taken from your account or a work computer has been compromised, don't try to fix everything yourself: contact your bank, your organization's IT team or a specialist company. Don't pay the ransom — it doesn't guarantee you'll get your data back.
Sources and verification
- Guidance from national cybersecurity centers (e.g. NCSC, CISA)
- NIST SP 800-63B: password requirements
Software and service interfaces change. We list the versions we tested commands on; on other versions the steps may differ.