
A spare security key has to be enrolled before it can rescue a login
Buying a spare security key is not enough. Register and test it with each supported account, then store it separately from your everyday key.

Buying a spare security key is not enough. Register and test it with each supported account, then store it separately from your everyday key.

DNS over HTTPS encrypts the lookup between a browser and its DNS resolver. Understand what that protects and what it does not hide about browsing.

DKIM authenticates a signing domain and protected message content. It does not prove that an email’s request is honest or that the named sender authorised it.

Check whether an encrypted archive hides its filenames as well as its contents, and test the recipient’s experience before sending it.

A valid software signature helps establish publisher identity and file integrity. It does not replace checking the download source or trusting the software itself.

An email alias can give you another address without a separate inbox or account. Check sending behaviour and account links before relying on it.

Check an invitation’s named time zone, calendar display and daylight-saving behaviour before manually changing a shared event’s time.

Nearby file sharing has discovery settings as well as transfer prompts. Check who can find your device and restore the setting after a transfer.

Make Windows file extensions visible, distinguish a filename from a file format, and avoid treating a familiar icon as proof that a download is safe.