Everyday Digital Security
DNSSEC checks DNS authenticity without hiding the query
DNSSEC checks the authenticity and integrity of signed DNS data. Learn why that protection differs from encrypting DNS traffic or securing a website connection.
ACCOUNTS · DEVICES · PRIVACY
Security starts with a setup you understand.
Clear explanations for protecting accounts, managing devices and making everyday digital choices with fewer unanswered questions.
Review your recovery options →
Build your everyday defences
Browse articles →
Practical Computing
An SD card’s lock tab asks the reader to block writes
Understand what an SD card’s lock slider can do, why the reader matters, and how it differs from file permissions, encryption and a forensic write blocker.
Account Security
A spare security key has to be enrolled before it can rescue a login
Buying a spare security key is not enough. Register and test it with each supported account, then store it separately from your everyday key.
Account Security
Encrypted DNS protects one part of a browser request, not every detail
DNS over HTTPS encrypts the lookup between a browser and its DNS resolver. Understand what that protects and what it does not hide about browsing.
Account Security
A DKIM signature does not make every email request trustworthy
DKIM authenticates a signing domain and protected message content. It does not prove that an email’s request is honest or that the named sender authorised it.
Practical Privacy
An encrypted archive can still reveal its filenames
Check whether an encrypted archive hides its filenames as well as its contents, and test the recipient’s experience before sending it.