🔒 Lesson 1.3: Staying Safe Online
Now that you can get online and move around, let's make sure you can do it safely. Safety online isn't about fear — it's about a few simple habits, like locking your door or checking who's knocking. In this lesson you'll build strong passwords, learn to spot scams and fake messages, and protect your personal information. These are the seatbelts of the digital world.
📚 What You'll Learn
By the end of this lesson, you will be able to:
- Create a strong password and keep track of it safely
- Recognize the warning signs of a scam or phishing message
- Know what personal information to protect and what's safe to share
- Respond calmly with one rule: when in doubt, stop and check
⏱️ Estimated Time: 50–65 minutes (go at your own pace — there's no clock on you)
🎯 Project: Create one strong password using the method in this lesson, write it somewhere safe, and review one real message on your phone using the scam checklist.
In This Lesson
Safety Is a Habit, Not Fear
You already practice safety in the physical world without thinking twice: you lock your front door, you don't hand your wallet to a stranger, and you're wary of a deal that sounds too good to be true. Online safety is the exact same common sense — just applied to a screen. You don't need to be afraid of the internet any more than you're afraid of your own street. You just stay aware.
Almost all online trouble comes down to two things: someone guessing your password, or someone tricking you into handing over information. Learn to defend against those two, and you've handled the vast majority of the risk. That's what this lesson does.
🧠 Mindset
If a scam has ever fooled you — or someone you love — please hear this clearly: that is not a sign you're foolish. Scammers are professionals who do this all day and design their tricks to fool smart, careful people, often by creating panic. Being targeted is not your fault, and being cautious is not being paranoid — it's being wise. You can absolutely learn to spot these, and today you'll start. 🌱
Strong Passwords Made Easy
A password is the key to an account — your email, your bank, your benefits. A weak password is like a flimsy lock; a strong one keeps the wrong people out. The good news: strong doesn't have to mean complicated to remember.
The secret is length, not a jumble of symbols. The easiest strong password is a passphrase — three or four random words stuck together, with a number or symbol. It's long (hard for a computer to crack) but easy for you to picture.
✅ Build a passphrase
Picture three unrelated things, join them, and add a number: BlueTurtleLamp7 or river-coffee-window22. Long, memorable, and strong. (Don't use these exact ones — make your own.)
✅ Do
- Make it long — 12+ characters (a passphrase does this easily)
- Use a different password for your email and your bank
- Write passwords in a safe private place (a notebook at home is fine)
- Turn on two-step verification where offered (a code texted to you)
❌ Don't
- Use 123456, password, or your birthday
- Use your name, pet, or anything a stranger could guess
- Use the same password everywhere
- Tell anyone your password — no real company ever asks for it
💡 Your email password is the master key
Guard your email password most carefully of all. Because password resets for other accounts get sent to your email, whoever controls your email can reach everything else. Give it your strongest passphrase.
Spotting Scams & Phishing
A scam is a trick to get your money or information. Phishing (said "fishing") is the most common kind: a fake message — by email, text, or call — that pretends to be someone you trust (your bank, the government, a delivery company, even a family member) to get you to click a link, log in, or pay.
The scammers are skilled, but their messages almost always share the same tells. Learn these red flags and you'll spot most scams on sight:
| 🚩 Red flag | What it sounds like |
|---|---|
| Urgency & fear | "Your account will be closed in 24 hours!" "Act now or be arrested." |
| Too good to be true | "You've won a prize!" "Claim your refund of $500." |
| Asks for secrets | "Confirm your password / Social Security number / PIN." |
| Strange payment | "Pay with gift cards / wire transfer / cryptocurrency." |
| Odd sender or link | A misspelled address, a link that doesn't match the real company. |
| Unexpected | A "delivery" you didn't order; a "bank" you don't even use. |
When a message sets off any of these alarms, follow one simple rule:
graph TD
A["A message asks you to click, log in, or pay"] --> B{"Does it rush, scare, or seem too good?"}
B -->|"Yes"| C["STOP. Do not click or reply."]
B -->|"Not sure"| C
C --> D["Contact the company yourself, using a number you already trust"]
D --> E["Confirmed real? Continue. Fake? Delete it."]
B -->|"No, clearly expected and normal"| E
⚠️ The golden rule: they contact you, you verify separately
If a call or message says it's your bank, hang up or don't reply — then contact the bank yourself using the number on the back of your card or their official website. A real bank will never mind. A scammer can't fake the real phone line you dial yourself.
Protecting Your Privacy
Privacy means keeping your personal information in your own hands. Some information is sensitive and should be shared only with trusted, official places (and only when you started the contact). Other information is ordinary and fine to share.
🔒 Keep private
- Social Security number
- Bank account & card numbers, PINs
- Passwords and security codes
- Full birth date paired with your address
🙂 Usually fine
- Your first name
- A general city or area
- Your opinions and interests
- An email address for signing up to things
A few everyday privacy habits go a long way: be thoughtful about what you post publicly, be cautious using public wi-fi for banking (it's shared), and remember that things posted online can be hard to take back. None of this means hiding — it means being the one who decides what to share.
💡 "Log out" on shared devices
If you use a computer at a library, a shared phone, or a friend's device, always log out of your accounts when you finish, and don't let a shared device "remember" your password. On your own private device, staying logged in is fine and convenient.
🔊 Hear It & Read Along — Key Sentences
Press 🔊 Listen on a sentence and follow the words with your eyes. Hearing and seeing a sentence at the same time builds reading fluency and confidence. Play each one as many times as you like.
- A strong password protects my accounts.
- I never share my password with anyone.
- A scam tries to trick me into paying.
- If it seems too good to be true, I stop.
- I stay safe by thinking before I click.
Practice & Project
🏋️ Exercise 1: Weak or strong?
Goal: Judge these passwords.
- password1
- Maria1985
- GreenClockPillow8
✅ Answer
password1 — very weak (one of the most common passwords there is). Maria1985 — weak (a name plus a likely birth year, both guessable). GreenClockPillow8 — strong (a long passphrase of unrelated words plus a number).
🏋️ Exercise 2: Scam or safe?
Goal: Spot the red flags.
A text says: "USPS: your package is held. Pay a $1.99 fee in the next 12 hours at this link or it will be returned." Scam or safe? Why?
✅ Answer
Scam. Red flags: urgency ("12 hours"), an unexpected message, a request to pay via a link, and a tiny fee designed to get your card details. Don't tap the link. If you're expecting a package, check the tracking on the carrier's real website yourself.
🎯 Your Project: Lock the Door
Two real, useful safety actions. Do them for yourself.
- (4 min) Create one strong passphrase using the three-words-plus-a-number method. Say it, picture it.
- (2 min) Write it in a safe private place — a home notebook, not a sticky note on the screen.
- (4 min) Open one real message or email on your phone and run it through the red-flag checklist. Does it rush you? Ask for secrets? Come unexpected?
- (3 min) Find the real phone number for one company you use (bank, utility) and save it in your contacts — so you can always verify by calling them.
- (2 min) Note one thing that surprised you for your journal.
✅ Project Completion Checklist
- ☐ I created one strong passphrase
- ☐ I wrote it somewhere safe and private
- ☐ I checked one real message against the red flags
- ☐ I saved a company's real phone number for verifying
👥 Working with a tutor or group?
Share scam stories — most people have received a fake "your account is locked" text. Read a few real examples aloud (with personal details removed) and hunt for the red flags together. Naming the trick out loud, as a group, is one of the best ways to make sure it never works on any of you again.
🎯 Quick Quiz
Question 1: Which makes the strongest password?
Question 2: A text claims to be your bank and asks you to "confirm your PIN at this link, urgently." What should you do?
Tips & Common Mix-Ups
✅ Do's
- Slow down when a message rushes you. Urgency is the scammer's favorite tool; calm is your best defense.
- Verify separately. Contact companies using a number you look up, never the one in a suspicious message.
- Use a passphrase and give your email account the strongest one.
❌ Common Mix-Ups
⚠️ Watch Out
- "It has their logo, so it's real": logos and layouts are trivial to copy. Judge the message by its behavior (does it rush or ask for secrets?), not its looks.
- Caller ID and sender names can be faked: a call can show "IRS" or your bank's name and still be a scammer. Verify separately.
- Gift cards are never a real payment method: no government office or utility will ever ask you to pay a bill or fine with gift cards. That request alone means scam.
✅ Affirmation
Pausing to double-check is not being slow or paranoid — it's the single most powerful safety skill there is. Every time you stop and verify, you win.
📓 Learning Journal
Keep your learning journal going. After this lesson, take five minutes to write down:
- What you learned — a rule, a red flag, a habit
- What clicked for you
- What's still confusing, so you know what to revisit
- Where you'll use it in real life this week
- How you feel about your progress
✍️ This lesson's prompt: Have you or someone you know ever gotten a suspicious message or call? Write down what it said and which red flags you can now spot in it. Turning a past scare into a lesson is how you make sure it never works again.
📝 Lesson Summary
🎓 Key Takeaways
- Online safety is everyday common sense applied to a screen — awareness, not fear.
- Strong passwords are long passphrases (unrelated words + a number); guard your email password most.
- Phishing messages give themselves away: urgency, too-good-to-be-true, asking for secrets, odd payment.
- The golden rule: when in doubt, stop and verify separately using a number you already trust.
🎉 What You've Accomplished
You just put on your digital seatbelt. You can build a password that actually protects you, spot the red flags in a scam message, and keep your private information private. Most importantly, you have one calm, powerful rule — stop and check — that handles almost anything. That confidence is what lets you enjoy everything else the internet offers. Be proud of it. 🎉
❓ Common Questions at This Stage
How can I possibly remember a different password for everything?
You don't have to memorize them all. It's fine to write passwords in a private notebook kept at home. Later, there are free tools called password managers that remember them for you — but a home notebook is a perfectly good start.
I think I already clicked a bad link. What now?
Don't panic. If you entered a password, change that password right away (and your email password too). If you gave card details, call your bank to watch or replace the card. Acting quickly limits any harm — and it happens to lots of careful people.
Is it safe to shop or bank online at all?
Yes, for millions of people every day — as long as you use the real website (type the address or use the app), a strong password, and your own private wi-fi rather than public wi-fi for money matters.
What is "two-step verification"?
It's an extra lock: after your password, the service also sends a short code to your phone that you type in. It means a stolen password alone isn't enough to get in. Turn it on for email and banking when offered — it's one of the best protections there is.
🔭 Looking Ahead
That completes Module 1: Digital Basics — you can use a device, get online, and stay safe. Next, in Lesson 2.1, we start communicating: setting up and using email, the digital address that so much of adult life now runs through.
✅ Before the Next Lesson
- Make sure your most important account (email) has a strong passphrase.
- Spot the red flags in one real message this week — then delete it.
- Write your Learning Journal entry.
🌟 Encouragement for the Journey
You just gained one of the most valuable skills of modern life: the calm confidence to protect yourself online. Scammers count on fear and hurry — and you now have the antidote to both. Carry that quiet "stop and check" with you, and the digital world becomes a place you move through safely and freely. See you in Lesson 2.1! 👋