Introduction to Cybersecurity
For everyone, tech or not. Learn how attacks really reach people, lock down your accounts and devices, spot scams before they land, and see how security work happens: the roles, the hats and the law.
- 10 modules, 65 lessons
- About 35 hours
- 10 projects and a capstone
- Module 1 is open now, and free
Aligned to the NIST Cybersecurity Framework 2.0 and CISA Secure Our World · Lessons save for offline
Module 1 is open. The other modules are being written and reviewed by our instructors, and each one opens as it’s ready.
By the end, you’ll be able to
- Explain what cybersecurity protects (confidentiality, integrity and availability) and judge a risk by its likelihood and impact.
- Secure your accounts with passphrases, a password manager, two-factor sign-in and passkeys.
- Recognise phishing, social engineering and common scams, wherever they arrive, and report them.
- Keep devices and software safe, and explain what each kind of malware does.
- Browse and connect safely, and explain what HTTPS and VPNs do and don't protect.
- Manage your privacy and digital footprint, and use your rights under data protection law.
- Respond calmly and in the right order when an account, a device or your data is compromised.
- Follow good security practice at work, including with AI tools.
- Describe the main roles in cybersecurity, the "hats" and teams, and the law and ethics that separate security work from crime.
The syllabus
Tap a module to see its lessons
1Why security matters to you6 lessons · about 1 hourFree
What security protects, who attacks and why, and how to think about risk.
- What cybersecurity protects
- Confidentiality, integrity and availability
- Threats, vulnerabilities and risk
- Who attacks, and why
- How attacks reach ordinary people
- Thinking in risk: likelihood and impact
Project: Your personal risk map: what you'd lose, and how likely it is
2Passwords and signing in7 lessons plannedComing soon
How passwords get stolen, and the sign-in habits that stop it.
- How passwords get stolen
- Passphrases beat complexity
- Password managers
- Two-factor sign-in
- Passkeys
- Security questions and account recovery
- Your password plan
Project: Secure three practice accounts from scratch
3Phishing and social engineering7 lessons plannedComing soon
The messages and calls designed to trick you, and how to read them before you act.
- What phishing is
- Reading a link before you tap
- Lookalike addresses and domains
- Text, call and QR code phishing
- Pressure tricks: urgency, fear and authority
- Pretexting and impersonation
- Reporting a phish
Project: Sort a simulated inbox: real, phishing or suspicious
4Scams and fraud7 lessons plannedComing soon
The scams that take people’s money, from fake alerts to AI-cloned voices.
- How scams work
- Shopping and payment-alert scams
- SIM swaps
- Investment and crypto scams
- Romance and job scams
- Tech-support scams
- AI voice and video fakes
Project: A scam warning card for someone you care about
5Devices and software7 lessons plannedComing soon
Updates, malware and app permissions, and what to do when a phone goes missing.
- Updates close doors
- Malware: viruses, worms and trojans
- Ransomware and spyware
- Why antivirus isn't enough
- App permissions
- Downloading safely
- Lost or stolen phones
Project: A security check-up of a practice phone
6Safe browsing and networks6 lessons plannedComing soon
What the padlock really means, public Wi-Fi, VPNs and your home router.
- What the padlock means
- Public Wi-Fi
- What a VPN does and doesn't do
- Your home router
- Browser extensions
- Cookies and tracking
Project: Harden a practice home network
7Privacy and your data6 lessons plannedComing soon
Your digital footprint, who tracks you, and the rights the law gives you.
- Your digital footprint
- Social media settings
- Tracking and data brokers
- Your data rights
- Oversharing and doxxing
- Keeping children safe online
Project: A privacy clean-up plan for your own accounts
8When things go wrong6 lessons plannedComing soon
Backups, ransomware, and exactly what to do in the first hour after a hack.
- The 3-2-1 backup rule
- Ransomware: prepare, don't pay
- Your first hour after a hack
- Recovering an account
- When your data is in a breach
- Reporting and getting help
Project: An incident plan for a family or small shop
9Security at work6 lessons plannedComing soon
Why attackers target workplaces, and the habits that protect you and your colleagues.
- Why attackers target workplaces
- Least privilege
- Policies that protect people
- Personal devices at work
- AI tools and data leaks
- Insider risk and reporting
Project: A one-page security guide for new staff
10The world of cybersecurity7 lessons plannedComing soon
The hats, the teams, the law, and what people in security actually do.
- Hackers: white, black and grey hats
- Red, blue and purple teams
- The law and ethics of hacking
- Bug bounties and responsible disclosure
- Roles in cybersecurity
- Myths about working in security
- Where to go next
Project: A profile of one security role, from real job descriptions
Some of what you’ll build
Module 3 · Coming soon
Sort a simulated inbox: real, phishing or suspicious
Module 8 · Coming soon
An incident plan for a family or small shop
Module 10 · Coming soon
A profile of one security role, from real job descriptions