Library
Browse practical explainers by track or use search to find a technique. Every article ends with a concrete action you can try on a device or project you control.
Spot a phishing message before you click
Most suspicious messages ask you to act faster than you can verify. Learn to check context, not just spelling.
Read field note
Passwords, passkeys, and MFA: who does what?
Different sign-in layers solve different problems. Learn where each one helps—and where it does not.
Read field note
DNS is an address book, not a trust badge
Understand what a domain lookup tells you and why a correct answer does not guarantee a safe site.
Read field note
What HTTPS protects, and what it cannot
The browser lock icon is useful but narrow. Understand encryption in transit without assuming every page is honest.
Read field note
Read logs without jumping to conclusions
A strange event is a lead, not a verdict. Learn how timestamps and context change an investigation.
Read field note
Patch what matters first
Not every update has the same urgency. Combine exposure, impact, and recovery readiness to pick a sensible order.
Read field note
Build an incident timeline that helps your team
An orderly timeline prevents gaps and reduces duplicate work during a confusing event.
Read field note
Threat modeling with a whiteboard
You do not need a complicated framework to ask good questions about how a feature could fail.
Read field note
Keep tokens out of the wrong places
Secrets can spread through code, screenshots, logs, and support conversations. Reduce the places they can escape.
Read field note
Know what your application depends on
Libraries save time but add relationships your team must maintain. Make dependency reviews routine.
Read field note
A 15-minute phone privacy review
Small settings matter when combined. A quick review can reduce unnecessary access without breaking your daily apps.
Read field note
A backup is only useful if you can restore it
Copies are comforting; successful recovery is the real objective. Test the path back before you need it.
Read field noteNothing matched. Try a broader term.