What is encryption?

The process of scrambling data using a mathematical algorithm and a key so that only someone with the correct key can read it A way to compress files to make them smaller for storage Converting data to binary code so computers can process it A method of hiding files inside other files so they can't be found

What is the difference between symmetric and asymmetric encryption?

Symmetric uses one shared key for both encrypting and decrypting; asymmetric uses a pair — a public key to encrypt and a private key to decrypt Symmetric is for encrypting text; asymmetric is for encrypting files and images Symmetric is used by governments; asymmetric is used by regular websites Symmetric encrypts data in storage; asymmetric encrypts data in transit

What is 'end-to-end encryption' (E2EE)?

Encryption where only the sender and recipient can read messages — not even the service provider (like WhatsApp or Signal) can access the content Encryption that protects data from the moment it leaves your phone until it reaches the server A type of encryption used on both ends of a network cable Encryption that encrypts both the sender's and recipient's devices

What is a 'VPN' (Virtual Private Network) and when should you use one?

A VPN encrypts your internet traffic and routes it through a server in another location, hiding your activity from your local network and ISP — most useful on public Wi-Fi A service that makes your internet connection faster by optimizing routing A private internet network only accessible to verified users Software that removes viruses and protects you while browsing

What is 'hashing' and how is it used for passwords?

Hashing converts data into a fixed-length string that can't be reversed — websites store password hashes, not the actual passwords, so a breach doesn't expose real passwords Hashing is a way to encrypt passwords so they can be recovered if you forget them Hashing is the process of verifying a website's SSL certificate Hashing breaks passwords into smaller pieces and stores each piece separately

What is a 'digital certificate' (SSL/TLS certificate)?

A digital document issued by a trusted authority that proves a website's identity and enables encrypted connections — the padlock in your browser verifies one exists A license that companies must buy to legally collect user data A security rating that shows how trustworthy a website's content is An official government approval required to operate a website

If you receive an unexpected code by SMS from a website you didn't try to log into, what could this mean?

Someone has your password and is trying to log into your account — the MFA code is the last thing stopping them; change your password immediately It's an automated security test from the website — nothing to worry about Your phone is sending messages without your knowledge — check for malware The website is updating their systems and sends codes to all users as confirmation

What is 'public key infrastructure' (PKI) in simple terms?

A system of trusted organizations, certificates, and keys that allows computers worldwide to verify identities and establish encrypted connections without having met before A private key that governments use to monitor encrypted communications Software that manages all the passwords saved in your browser A network of servers that speed up encrypted connections between countries

What is 'two-factor authentication' (2FA) and how does it differ from a password alone?

2FA requires a second verification step after your password — typically a time-limited code — so that knowing your password alone isn't enough to access your account 2FA means you need two different passwords to log into the same account 2FA is when two people from the same household must both approve a login 2FA verifies your identity twice using the same method for extra confirmation

What should you do if a browser shows 'Your connection is not private' or a certificate warning?

Do not proceed — the site's security certificate is invalid, expired, or suspicious, meaning your connection could be intercepted or you might be on a fake site Click 'proceed anyway' — these warnings appear frequently and are usually false alarms Refresh the page — the warning usually goes away on the second visit Log in quickly before the certificate expires — you only have a few minutes