Account takeover
Unauthorized control of an existing account, often through stolen credentials, reset access, or a hijacked session. See how identity theft happens →
Plain English, useful context
Cybersecurity
without the fog.
Short definitions that explain what a term changes for an actual person or organization.
Authentication
The process used to prove that a person or device should receive access. Compare stronger authentication methods →
Backup
A separate copy of data designed for restoration after loss, damage, deletion, or attack. Build a tested backup plan →
Browser fingerprinting
Combining browser and device characteristics to recognize a visitor without a conventional cookie. Learn how website tracking works →
Credential stuffing
Trying username-and-password pairs stolen from one service against other services. Use unique passwords safely →
Data broker
An organization that collects, combines, licenses, or sells information about people or organizations. Understand data broker collection →
Deepfake
Synthetic or altered audio, image, or video designed to represent something that did not occur as shown. Check deepfakes more reliably →
Encryption
Transforming readable information so it can be read only with the appropriate key or process. Evaluate encrypted storage →
Least privilege
Giving a person, app, or system only the access required for its current task. Apply least privilege at work →
MFA
Multi-factor authentication: access that requires evidence from more than one factor category. Choose an MFA method →
Passkey
A phishing-resistant sign-in credential based on public-key cryptography and unlocked on a user's device. Compare passkeys and 2FA →
Phishing
A deceptive message or flow intended to make someone reveal information, approve access, install software, or send value. Follow the phishing prevention guide →
Ransomware
Malicious activity that disrupts access to data or systems, often paired with data theft and extortion. Prepare for ransomware →
Recovery code
A one-time backup credential used when the normal authentication method is unavailable. Prepare for device loss →
Threat model
A practical statement of what you are protecting, from whom or what, and under which constraints. Prioritize realistic cyber risks →
VPN
An encrypted connection from a device to a VPN endpoint; it changes who can observe certain network traffic, not every form of tracking. Understand VPN uses and limits →