Reference
Security terms, in plain language
22 definitions. Where we have a full article, the term links to it.
#
- 2FA
- Two-factor authentication — a second login step beyond your password, such as an app code or security key.
A
- Authenticator app
- An app that generates time-based login codes offline. Stronger than SMS because it isn't tied to your phone number.
B
- Brute force
- An automated attack that tries huge numbers of password combinations until one works.
C
- Credential stuffing
- Using leaked email-and-password pairs from one breach to break into other accounts where the password was reused.
D
- Data breach
- An incident where a service's user data — often emails and passwords — is stolen and frequently leaked publicly.
E
- Encryption
- Scrambling data so only the intended parties can read it. HTTPS and end-to-end encryption are common examples.
- End-to-end encryption
- Encryption where only the sender and recipient can read a message — not even the platform in between.
- Evil twin
- A fake Wi-Fi hotspot named to look like a legitimate one, used to intercept the traffic of those who connect.
G
- Grooming
- The deliberate process by which a predator builds trust with a minor online to manipulate or exploit them.
H
- HTTPS
- The encrypted version of web traffic, shown by a padlock. Protects content in transit — but not from phishing.
K
- Keylogger
- Spyware that records everything typed on a device, including passwords.
M
- Malware
- Any malicious software — viruses, spyware, ransomware — designed to harm or exploit a device.
- Man-in-the-middle
- An attack that secretly intercepts communication between two parties, often on open Wi-Fi.
P
- Phishing
- Fake messages or pages that trick you into revealing passwords or personal data.
- Port-out PIN
- A secret code your mobile carrier requires before moving your number to a new SIM — blocks SIM swapping.
R
- Ransomware
- Malware that locks your files and demands payment to unlock them.
S
- SIM swapping
- Tricking a carrier into moving your phone number to an attacker's SIM to steal SMS codes.
- Social engineering
- Manipulating people — through trust, urgency or fear — into giving up access or information.
- Spyware
- Software that secretly monitors a device's activity, such as messages, location or keystrokes.
T
- Two-step verification
- WhatsApp's name for a PIN that protects your account even if someone gets your SMS code.
V
- VPN
- A Virtual Private Network encrypts all your traffic and hides your IP address, useful on public Wi-Fi.
Z
- Zero-day
- A software vulnerability unknown to the vendor, with no fix yet available when attackers begin exploiting it.