Computer Science
Grade 9
20 min
Online Safety Tips: Staying Safe While Browsing the Web
Learn general online safety tips for browsing the web and using social media.
Tutorial Preview
1
Introduction & Learning Objectives
Learning Objectives
Identify at least three common online threats, such as phishing, malware, and social engineering.
Create a strong, unique password that meets established security criteria.
Differentiate between secure (HTTPS) and insecure (HTTP) websites.
Explain the purpose of Two-Factor Authentication (2FA) and how to enable it.
Analyze a suspicious email or message and identify its red flags.
Describe the function of browser cookies and how to manage them for privacy.
Ever received an email claiming you've won a prize, but it felt a little too good to be true? 🤔 Let's learn how to spot the fakes and protect your digital life.
This lesson introduces the fundamental concepts of online privacy and security. We will explore common threats you might encounter w...
2
Key Concepts & Vocabulary
TermDefinitionExample
PhishingA type of cyber attack where attackers disguise themselves as a trustworthy entity in an electronic communication to trick people into revealing sensitive information like passwords and credit card numbers.You receive an email that looks like it's from your bank, asking you to click a link and 'verify' your account details due to a 'security issue'. The link leads to a fake website that steals your login information.
MalwareShort for 'malicious software,' it's a program designed to disrupt, damage, or gain unauthorized access to a computer system.Downloading a 'free' game from an untrusted website that secretly installs a keylogger on your computer to record everything you type, including passwords.
HTTPS (Hyp...
3
Core Syntax & Patterns
Strong Password Algorithm
A strong password must satisfy these conditions: (length >= 12) AND contains(uppercase_char) AND contains(lowercase_char) AND contains(number) AND contains(symbol) AND is_unique_per_site.
Use this algorithm as a checklist whenever you create a new password. A password that meets all these criteria is exponentially harder for a computer to guess or 'brute-force'.
URL Safety Check Pattern
1. Check for 'https://' at the beginning of the URL. 2. Verify the domain name is correct and spelled properly (e.g., 'google.com' not 'go0gle.com'). 3. Be wary of unusually long URLs with random characters or subdomains designed to trick you.
Apply this three-step pattern before clicking any link in an email or message, and...
4 more steps in this tutorial
Sign up free to access the complete tutorial with worked examples and practice.
Sign Up Free to ContinueSample Practice Questions
Challenging
A user receives a suspicious email. They correctly identify the generic greeting and urgent tone. Before clicking any links, they hover their mouse over the link to see the URL. This action combines which two 'Skills to Master'?
A.Secure Password Management and Privacy Settings Configuration
B.Phishing Detection and Safe Browsing Habits
C.Privacy Settings Configuration and Safe Browsing Habits
D.Phishing Detection and Secure Password Management
Challenging
The tutorial's password creation method starts with a phrase like 'My first dog was a golden retriever named Max!'. While good for memorability, how could this method become a security risk if not done carefully?
A.The phrase is too long, making the resulting password difficult to type.
B.If the user chooses a famous quote or song lyric, the password could be guessed by an attacker who knows their interests.
C.The method does not work for websites that have a maximum password length.
D.Abbreviating words always results in a password that is too short to meet the length requirement.
Challenging
A website's URL is `https://www.secure-bank.com`, but your browser shows a security warning like 'Connection is not private'. Based on the tutorial's emphasis on verifying the domain name and protocol, what is the most likely reason for this conflict?
A.The website is actually using HTTP, and the URL is lying.
B.The website's security certificate is expired or doesn't match the domain 'www.secure-bank.com'.
C.The domain name is fake; all real banks use '.gov' domains.
D.Your computer's clock is wrong, which always triggers false security warnings.
Want to practice and check your answers?
Sign up to access all questions with instant feedback, explanations, and progress tracking.
Start Practicing Free