Plain-language dictionary

Glossary

Every confusing bit of jargon, explained simply. No prior knowledge assumed.

Backup

A saved copy of your data kept somewhere safe, so you don't lose it to theft, damage, or ransomware.

Read article

Cookie

A small file websites store in your browser. Some remember your login; 'third-party' ones track you across different sites for advertising.

Read article

Credential stuffing

When attackers take passwords leaked from one site and try them on your other accounts — which works if you reuse passwords.

Read article

Data breach

When a company's systems are broken into and customer data — emails, passwords, card numbers — is stolen or exposed.

Read article

Data broker

A company that collects and sells personal information about people, usually without any direct relationship with them.

Read article

Digital footprint

The trail of data you leave online — both what you share deliberately and what's collected about you automatically.

Read article

Encryption

Scrambling information so only someone with the right key can read it. It protects data on your devices and as it travels online.

Read article

End-to-end encryption

A way of scrambling messages so only you and the person you're talking to can read them — not the app company or anyone in between.

Read article

GDPR

The European Union / UK data-protection law giving people strong rights over their personal data, such as access and deletion.

Read article

HTTPS

The secure version of a web connection, shown by a padlock in your browser. It encrypts data between you and the website.

Read article

Identity theft

When someone uses your personal details — name, ID numbers, bank details — to impersonate you, open accounts, or commit fraud in your name.

Read article

Malware

Malicious software — viruses, spyware, ransomware — that harms your device or steals your data, often installed by a bad download or link.

Read article

Metadata

Data about your data — for example, who you messaged and when, even if the message content itself is encrypted and private.

Read article

Passkey

A modern, phishing-resistant replacement for passwords that uses your device — often with your fingerprint or face — to prove it's really you.

Read article

Passphrase

A password made of several random words strung together — long, hard to crack, and easy to remember.

Read article

Password manager

A secure app that creates and stores a unique strong password for every account, so you only remember one master password.

Read article

Phishing

A scam message pretending to be someone you trust, designed to trick you into revealing passwords, paying money, or clicking a harmful link.

Read article

Ransomware

Malware that locks your files and demands payment to unlock them. Regular backups are the best defence.

Read article

Sextortion

A scam where someone threatens to share intimate images unless paid. Victims should not pay, should save evidence, and should seek help.

Read article

SIM swapping

A scam where a criminal tricks your phone company into moving your number to their SIM, so they receive your calls and security codes.

Read article

Smishing

Phishing carried out by SMS text message rather than email.

Read article

Social engineering

Manipulating people — rather than hacking machines — into giving up information or access, using trust, fear, or urgency.

Read article

Spoofing

Faking a sender's identity — a phone number, email address, or website — so a scam appears to come from someone you trust.

Read article

Tor Browser

A free browser that anonymises your web activity by routing it through multiple relays. Used by people who need strong privacy.

Read article

Tracker

Hidden code on websites and in apps that records what you do and reports it back to advertising or analytics companies.

Read article

Two-factor authentication (2FA)

A second step when logging in — usually a code from your phone — so a stolen password alone can't get someone into your account.

Read article

VPN (Virtual Private Network)

A tool that encrypts your internet connection and hides your browsing from the local network and your internet provider.

Read article