Mac
How to Check a Mac for Malware Without Buying Anything
macOS has built-in malware protection that runs silently and reports nothing. Here is where to look for unwanted software yourself and what the built-in tools miss.
59 guides tagged “Security”.
Mac
macOS has built-in malware protection that runs silently and reports nothing. Here is where to look for unwanted software yourself and what the built-in tools miss.
Security
Work the lockdown in the order that stops access first. Recovery details before password, sessions before cleanup, and the forwarding rules most people never check.
Chrome
A corrupted profile can usually be salvaged. Close Chrome first, copy the folder before touching anything, and rename rather than delete at every step.
Mac
Gatekeeper blocks apps without an Apple Developer signature. Here is what the warning actually proves, how to open an app you trust, and when to walk away.
Accounts
SSH keys replace a password with a key pair your computer holds. What they do, why your host asked for one, and why most people never need to make one.
VPN
The connected indicator only reports a handshake. Four checks — IP, DNS, IPv6 and WebRTC — tell you what the rest of the internet can still see.
Accounts
Changing passwords in the wrong order locks you out halfway through. The sequence that works, starting with the account that controls all the others.
Android
IMEI checks catch some stolen phones and miss many others. Here are the checks worth doing, in order, and what the databases genuinely cover.
Security
The pop-up is an advert, not a detection. Here is how the con works from the page to the phone call, and the one thing you must never do.
Mac
The prompt means your login keychain password no longer matches your account password. Here is why they drift apart and the two ways to put them back in step.
Security
Changing the search engine back does not work while the thing that changed it is still installed. Remove it in this order and it stays fixed.
Check every device with access to your Google account, sign out the ones you do not recognise, and know which extra steps actually matter afterwards.
Wi-Fi
Your devices already know the password you forgot. Here is how to read it back on Windows, Android and iPhone, and how to share it without typing anything.
Security
Your browser already checks every saved password against known breaches. Here is where that report lives, and what to do with what it finds.
Windows
MsMpEng.exe is Windows Defender scanning your files. Here is how to reschedule scans, add exclusions safely, and why turning Defender off is the wrong fix.
Accounts
Texting a password puts it in two message histories and two cloud backups forever. The better routes, and which accounts you should never share at all.
Explainers
Private browsing hides your activity from other people using your device. It hides nothing from your employer, your provider, or the sites themselves.
Security
An exposed email address is not an emergency. What was exposed alongside it decides whether you have ten minutes of work or a serious afternoon.
VPN
VPNs are ordinary business tools in most of the world. A small number of countries restrict or ban them, so here is how to find out what applies where you are.
Accounts
Find the device list on Google, Apple and Microsoft, work out which entries are genuinely suspicious, and revoke the access a password change leaves behind.
Security
The advice everyone repeats describes a web that stopped existing a decade ago. Here is what public Wi-Fi can and cannot expose now that HTTPS is universal.
Explainers
An IP address routes traffic to your connection, not to you personally. Here is what it reveals, what it does not, and who can link it to your name.
Security
A firewall filters connections by port and program. It cannot tell a good download from a bad one, which is why it is only part of the picture.
Accounts
Passkeys replace the password with a key your device holds and a site cannot leak. Here is the mechanism, the lock-out risk, and how to keep a way back in.
Security
Display names are free and logos are copy-paste. Read the actual sending domain and the link destination, and most fakes collapse in ten seconds.
Security
An ordered checklist that starts with the step that stops ongoing damage, not the one that feels productive. Work down it and stop where it stops applying.
Accounts
Length beats symbols, and the substitutions you were taught add almost nothing. The passphrase method, plus what to do when the rules forbid it.
Chrome
The warning means Chrome could not verify who it is talking to. Here is how to tell a harmless clock error from a genuine interception, and when never to proceed.
Security
Most phone malware symptoms are a battery-hungry app or a browser notification. Here is what counts as evidence, and what to check before worrying.
Explainers
TLS is the encryption behind HTTPS; SSL is its obsolete predecessor. Here is what a certificate proves and why expiry warnings are so common.
iPhone
The fast route takes two minutes on a device you are already signed in to. The slow route is account recovery, and it genuinely takes days.
Office
Some Office protection options are real encryption and some are a polite request. Here is which is which, and how to lock a file so it genuinely stays locked.
Security
Unsubscribing works on legitimate marketing and backfires on real spam. Here is how to tell which you are looking at before you touch anything.
Accounts
Browser password saving is better than people claim and worse than a dedicated manager in four specific ways. Here is which of those actually affect you.
Explainers
HTTPS encrypts the connection between you and a site. It proves nobody is reading in transit. It proves nothing about whether the site is honest.
Security
macOS already runs three layers of malware protection you never see. Here is what they cover, what they miss, and when a scanner is actually worth installing.
Windows
The documents folder is the easy part. These are the things people discover missing a week after resetting Windows, and where each one actually lives.
Security
Microsoft Defender covers the malware scanning most people need. Here is what paid suites actually add, and which of those additions are worth money.
Security
A normal scan can be defeated by malware already running. The Defender offline scan reboots first, which is why it finds what the quick scan missed.
VPN
Running VPN servers costs money, so a free service recovers it somewhere. Here is where, and which of those trade-offs actually matter to you.
Security
Macs get adware and browser hijackers far more often than viruses. Here is where to look, in the order that finds the real thing fastest.
Windows
Deleting files and emptying the recycle bin does not remove them. Here is the sequence that actually clears a Windows PC, including the steps people skip.
Accounts
SMS codes are the one second factor attackers defeat routinely. Here is the mechanism, what you give up by switching, and when SMS is still the right call.
Wi-Fi
An SSID is your Wi-Fi network's name. Hiding it is widely recommended as a security measure and does not work. Here is what it does instead.
Security
Social engineering attacks the person, not the software. Learn the four pressure patterns behind nearly every version, and the one rule that defeats them.
Explainers
A QR code is just text, so it cannot infect your phone. The risk is entirely in where the link goes, and in codes stuck over other codes.
Security
A botnet is thousands of ordinary devices quietly taking orders from a stranger. Here is how yours would join, and the handful of checks that matter.
Accounts
Which accounts you get back depends entirely on what you set up before the phone disappeared. Here is what still works, and what to do today.
Wi-Fi
Log into the router, find the wireless section, change the key. The steps are the same on every brand once you know what you are looking for.
Security
Someone sits between you and the site you think you are talking to. Here is what that actually requires, and why HTTPS made most versions of it fail.
Windows
Which recovery route works depends entirely on whether you sign in with a Microsoft account or a local one. Find out which you have, then take the right path.
Accounts
Set up Google Authenticator properly, understand what cloud sync does and does not cover, and move your codes to a new phone without being locked out.
Two kinds of PDF password exist and they come off in completely different ways. Here is the method for each, using tools already on your computer.
Security
Opening the page is rarely the problem. What you typed next decides whether this is a non-event or an hour of work — here is how to tell which.
VPN
A kill switch blocks all internet traffic the moment the VPN tunnel drops. Useful for some tasks, actively annoying for everyday browsing.
Accounts
The four kinds of second factor, ranked by how easily each one is defeated, and the setup step that decides whether you ever get locked out.
Explainers
A CAPTCHA is a test that separates people from automated scripts. Here is what it actually measures, and why some people get much harder puzzles.
Security
Phishing works by manufacturing urgency, not by looking convincing. Here are the signals that actually separate a real message from a fake one.
VPN
A VPN moves the record of your browsing from your internet provider to the VPN company. Here is what that genuinely protects, and what the marketing overstates.