Cybersecurity / Glossary
Cybersecurity glossary
Plain-language definitions of Cybersecurity terms, each linked to a short visual lesson.
- 3-2-1 backup
- A 3-2-1 backup means three copies of your data, on two different kinds of storage, with one copy kept offline or offsite.
- Botnet
- A botnet is a network of hijacked computers and devices that criminals control remotely, often without the owners noticing.
- Credential stuffing
- Credential stuffing is when attackers take usernames and passwords leaked from one site and automatically try them on many other sites.
- Dark web
- The dark web is a part of the internet that needs special software to reach and hides who runs its sites. Criminal marketplaces there trade stolen data.
- Infostealer
- An infostealer is malware that grabs the passwords, cookies, card details and crypto wallets saved on a device and sends them to criminals.
- Internet of Things (IoT)
- The Internet of Things (IoT) means everyday objects connected to the internet, such as cameras, smart plugs, doorbells, TVs and speakers.
- Malware
- Malware (malicious software) is any program designed to harm a device or its user, for example by stealing data, spying, or locking files.
- Multi-factor authentication (MFA)
- Multi-factor authentication (MFA) asks for a second proof of identity, such as an app code, a push approval or a security key, on top of your password.
- Passkey
- A passkey is a password replacement: a cryptographic key stored on your device that you unlock with your fingerprint, face or PIN.
- Password manager
- A password manager is an app that creates, stores and fills in a long, unique password for every account, so you only need to remember one.
- Phishing
- Phishing is a message that pretends to come from someone you trust, to trick you into clicking a link, opening a file, or handing over passwords or money.
- Ransomware
- Ransomware is malware that encrypts your files or systems and demands payment to unlock them, often while threatening to publish stolen data.
- Router
- A router is the box that connects your home devices to the internet and to each other. It is the front door of your home network.
- Smishing
- Smishing is phishing by text message (SMS): a text that tricks you into tapping a link, calling a number or sending money.
- Social engineering
- Social engineering means manipulating people, rather than hacking computers, so they hand over information, access or money.
- Spoofing
- Spoofing is faking an identity online, such as a sender name, email address, phone number or website, so a message seems to come from someone you trust.
- Spyware
- Spyware is malware that secretly watches what you do on a device, such as your messages, location, keystrokes or browsing, and sends it to someone else.
- Trojan horse
- A trojan horse is malware disguised as something useful, such as a free app, a game crack or a fake update, that you install yourself.
- Typosquatting
- Typosquatting is registering a misspelled or lookalike version of a well-known domain to catch people who mistype it or don't look closely.
- Vishing
- Vishing is voice phishing: a phone call in which a scammer poses as a bank, the police, tech support or a colleague to get money, codes or access.