Someone Is Logged Into My Account — What to Do
Work the lockdown in the order that stops access first. Recovery details before password, sessions before cleanup, and the forwarding rules most people never check.
8 min read
Malware, Phishing and Everyday Online Security
Security advice usually arrives as a list of things you should already have done, which is useless at the moment something has actually gone wrong. These guides are built the other way around: what the attack actually is, how to tell whether you are affected, and the specific order of steps that limits the damage. They also say plainly when a popular precaution is not worth your time, because attention spent on theatre is attention not spent on the controls that matter.
Security guides(20)
The Fake Virus Warning Scam, Explained
The pop-up is an advert, not a detection. Here is how the con works from the page to the phone call, and the one thing you must never do.
8 min read
How to Remove a Browser Hijacker and Restore Search
Changing the search engine back does not work while the thing that changed it is still installed. Remove it in this order and it stays fixed.
8 min read
How to Check If Your Password Has Been Leaked
Your browser already checks every saved password against known breaches. Here is where that report lives, and what to do with what it finds.
7 min read
What to Do If Your Email Was in a Data Breach
An exposed email address is not an emergency. What was exposed alongside it decides whether you have ten minutes of work or a serious afternoon.
8 min read
Is Public Wi-Fi Still Dangerous in 2026
The advice everyone repeats describes a web that stopped existing a decade ago. Here is what public Wi-Fi can and cannot expose now that HTTPS is universal.
8 min read
What a Firewall Does, and What It Does Not
A firewall filters connections by port and program. It cannot tell a good download from a bad one, which is why it is only part of the picture.
7 min read
How to Tell If an Email Is Really From Your Bank
Display names are free and logos are copy-paste. Read the actual sending domain and the link destination, and most fakes collapse in ten seconds.
8 min read
What to Do After Clicking a Suspicious Link
An ordered checklist that starts with the step that stops ongoing damage, not the one that feels productive. Work down it and stop where it stops applying.
8 min read
Signs Your Phone Has Malware, and the False Alarms
Most phone malware symptoms are a battery-hungry app or a browser notification. Here is what counts as evidence, and what to check before worrying.
8 min read
How to Stop Spam Emails Actually Reaching You
Unsubscribing works on legitimate marketing and backfires on real spam. Here is how to tell which you are looking at before you touch anything.
8 min read
Do You Need Antivirus on a Mac
macOS already runs three layers of malware protection you never see. Here is what they cover, what they miss, and when a scanner is actually worth installing.
7 min read
Is Free Antivirus Enough, or Do You Need to Pay
Microsoft Defender covers the malware scanning most people need. Here is what paid suites actually add, and which of those additions are worth money.
8 min read
How to Scan For and Remove Malware on Windows
A normal scan can be defeated by malware already running. The Defender offline scan reboots first, which is why it finds what the quick scan missed.
8 min read
How to Check Your Mac for Malware
Macs get adware and browser hijackers far more often than viruses. Here is where to look, in the order that finds the real thing fastest.
8 min read
What Is Social Engineering and How to Spot It
Social engineering attacks the person, not the software. Learn the four pressure patterns behind nearly every version, and the one rule that defeats them.
8 min read
What Is a Botnet and How Devices End Up in One
A botnet is thousands of ordinary devices quietly taking orders from a stranger. Here is how yours would join, and the handful of checks that matter.
8 min read
What Is a Man-in-the-Middle Attack, in Plain English
Someone sits between you and the site you think you are talking to. Here is what that actually requires, and why HTTPS made most versions of it fail.
8 min read
What Happens If You Click a Phishing Link
Opening the page is rarely the problem. What you typed next decides whether this is a non-event or an hour of work — here is how to tell which.
8 min read
What Is a Phishing Attack and How to Spot One
Phishing works by manufacturing urgency, not by looking convincing. Here are the signals that actually separate a real message from a fake one.
8 min read
Topics in Security
Security questions
Do I need to pay for antivirus?
On Windows, usually not. Microsoft Defender is built in, updates automatically and scores close to paid suites in independent lab testing. Paid products mainly add features beyond malware scanning, such as VPNs and identity monitoring.
How do I know if I have been hacked?
Look for evidence rather than symptoms — unfamiliar sign-ins in your account's device list, password reset emails you did not request, or messages sent from your account. A slow computer on its own is far more often a storage or startup problem.
What should I do first if I clicked a phishing link?
If you only opened the page, very little happens. If you typed a password, change that password immediately from a different device, then sign out all sessions and check that the account's recovery email and phone number are still yours.
Related categories
Accounts
Set up two-factor authentication that you cannot get locked out of, recover accounts when you lose your phone, and audit where you are signed in.
14 guides
VPN
What a VPN actually does, which features matter, and how to fix one that is slow, leaking or connected but not working the way you expect.
16 guides