Highlighted wordsare glossary terms — tap one for a plain-language definition.
CISA's third Upskill module is about the information sitting on your devices right now: find it, copy it somewhere safe, and encrypt it so a lost laptop isn't a Data breachWhat it means: An incident in which protected or private information is accessed, exposed, stolen, or lost.Example: A service emailing to say your password was exposed.What to do: Change that password immediately, and anywhere you reused it, then enable MFA.Important: Watch for “breach support” scams that arrive right after the news.What does this mean?.
Back up like it's already broken
RansomwareWhat it means: Malware that locks or encrypts information and demands payment.Example: Your files renamed and a payment note left on the screen.What to do: Keep a backup that is disconnected or version-protected so you can restore instead of pay.Important: Paying often does not return your files — disconnect and report it.What does this mean?, theft, and dead drives all end the same way if your only copy was on the device.
- Identify the Sensitive informationWhat it means: Information that could cause greater harm if exposed, such as financial, health, identity, or login information.Example: Your national ID number, medical records, or banking logins.What to do: Keep it in an encrypted place and never send it by plain email or text.Important: Legitimate organizations don't ask for full ID numbers or passwords by message.What does this mean? stored locally.
- Keep at least one BackupWhat it means: An additional copy of information that can be restored if the original is lost, damaged, or encrypted.Example: An external drive copy plus a cloud copy of your photos.What to do: Keep one copy disconnected, and test restoring a single file so you know it works.Important: Ransomware encrypts backups that stay permanently connected.What does this mean? you can restore from.
- Disconnect external backup drives when you're not using them.
- Evaluate a cloud-backup provider's security before trusting it.
Encrypt devices, drives, and files
Full-device EncryptionWhat it means: Converting information into a protected form that unauthorized people cannot easily read.Example: The storage on your locked phone, unreadable without the passcode.What to do: Turn on device encryption and use a passcode or biometric lock.Important: Encryption won't help if someone learns your account password.What does this mean? is one setting. Removable drives and individual sensitive files deserve their own.
- Turn on full-device encryption (FileVault, BitLocker, device encryption).
- Encrypt USB sticks and external drives too.
- Encrypt individual highly sensitive files with a strong passphrase.
- Store recovery keys somewhere safe and separate from the device.
Brought to you by NorthBridge
Unfamiliar term? Open the Digital Safety Glossary