Security awareness (employees)

Everyday security every staff member needs: accounts, phishing, devices.

Accounts & passwords

Strong, unique credentials and password managers.

Strong passwords that actually work
Length beats complexity. Learn how to build passwords that are genuinely hard to crack, why every account needs its own, and why you should stop changing them on a schedule.
Why a password manager is the single best upgrade you can make
One tool solves the two hardest problems at once: unique passwords for every account and never having to remember them. Here's how they work and how to start safely.

MFA & passkeys

Turning on the second factor that actually stops attackers.

Turn on MFA, and move to passkeys when you can
A second factor is the single most effective thing you can add to an account. Learn which kinds actually stop attackers, and why passkeys are the phishing-proof future.

Spotting phishing

The tells, and the stop-and-check habit.

Spot a phishing email in ten seconds
Phishing works by rushing you. Learn the handful of tells that give it away and the one habit (stop and check) that defeats almost all of it.

Social engineering

Recognizing manipulation and verifying out of band.

Recognizing social engineering, and verifying out of band
Attackers manipulate people, not just computers. Learn the pressure tactics they use and the simple rule that stops them: verify through a channel you already trust.

Mobile & device security

Locks, updates, permissions, lost-device response.

Keep your phone and laptop secure
Your devices are the keys to your accounts. A few habits (a strong lock, automatic updates, careful app permissions, and knowing what to do if one is lost) cover most of the risk.

If something goes wrong

What to do (and report) if you clicked or got compromised.

What to do if you clicked, or think you're compromised
The most important move after a mistake is to report it fast, not to hide it. Here's the calm, step-by-step response, and why speed matters more than blame.