Learning objectives
- Create safer account habits.
- Recognise common phishing signs.
- Protect personal information.
- Respond appropriately to online harm.
Protect accounts and personal data
Use a unique password for each important account and enable two-step verification where available. A password manager can help store long, unique passwords.
Personal information includes home address, phone number, school details, identity documents and live location. Share only when necessary and with a trusted recipient.
Recognise scams and risky links
Phishing messages often create urgency, promise rewards or threaten account closure. Check the sender, spelling and destination before opening a link.
Do not install unknown apps or files. Even a message from a friend may be unsafe if the friend's account was compromised.
Act responsibly and seek help
Online communication should follow the same standards of respect as face-to-face communication. Do not share private images, spread rumours or participate in harassment.
Save evidence of serious abuse, block the account and tell a trusted adult, teacher or platform safety team. Immediate threats should be reported to local authorities.
Scenario: a message that pretends to be from school
You receive a message saying, “Your school account will be closed in ten minutes. Click here and enter your password.” The message uses a familiar-looking logo but arrives from an unfamiliar address. The urgent deadline, unexpected link and request for a password are warning signs. Do not click the link or reply with personal information.
Instead, open the school website or app using your usual bookmark, or ask a trusted teacher or parent through a known contact method. If you already entered a password, tell a trusted adult immediately, change it using the real service and review account activity where available. Do not blame yourself or hide the incident; prompt reporting can limit harm.
| Situation | Safer next action |
|---|---|
| An unknown person requests a one-time code | Never share the code; report the request |
| A friend sends an unexpected file | Ask through a separate trusted channel before opening |
| A public post reveals a home address | Remove it where possible and ask a trusted adult for help |
| Someone is being bullied in a group chat | Do not amplify it; keep necessary evidence and report it |
Privacy is also about other people
Ask permission before sharing someone else's photograph, result or phone number. A message intended for one group can be forwarded far beyond that group. Treat location details, student records and account recovery information as sensitive even when they seem ordinary.
Check your response
A friend asks you to send an account verification code “just this once.” What should you do?
Do not share the code. Codes are meant to verify that you control your own account. If someone is having trouble signing in, direct them to the service's official recovery steps.
What is a safer way to check a suspicious school announcement?
Use an existing trusted school channel or ask a teacher or parent. Do not rely on contact details supplied inside the suspicious message itself.
Practice questions with explanations
Try each question before opening the answer. The explanation shows the reasoning, not only the final response.
Q1. Why should important accounts use different passwords?
Answer: One breach will not expose every account.
Explanation: Reusing passwords allows attackers to try the same credential elsewhere.
Q2. What does two-step verification add?
Answer: A second proof of identity.
Explanation: A stolen password alone may not be enough to access the account.
Q3. Name two examples of personal information.
Answer: Examples include address, phone number, ID number or live location.
Explanation: Such information can be misused if shared carelessly.
Q4. What is phishing?
Answer: A deceptive attempt to steal information or access.
Explanation: It often imitates a trusted organisation or person.
Q5. Why is urgency a scam warning sign?
Answer: It pressures people to act without checking.
Explanation: Scammers try to prevent careful verification.
Q6. Should a file be trusted only because a friend sent it?
Answer: No.
Explanation: The friend's account may be compromised.
Q7. What should you do before entering a password on a website?
Answer: Check the address and legitimacy of the site.
Explanation: Look-alike pages can capture credentials.
Q8. What should you do after receiving serious online harassment?
Answer: Save evidence, block, report and tell a trusted adult.
Explanation: Do not handle dangerous situations alone.
Q9. Why avoid posting live location publicly?
Answer: It reveals where you are in real time.
Explanation: This can create privacy and physical-safety risks.
Q10. What is digital responsibility?
Answer: Using technology safely, lawfully and respectfully.
Explanation: Online actions can affect real people and leave lasting records.
Stop–check–confirm
Before following a link or sharing information, use three questions: Who sent this? What are they asking me to do? Can I confirm it another way? A message can look urgent and still be fraudulent, including a message sent from a compromised account belonging to someone you know.
Unexpected login link
Open the service through its known app or typed address instead of the message link.
Request for a code
One-time passwords and recovery codes should not be shared with another person.
Pressure to act immediately
Urgency is a reason to verify, not a reason to skip verification.