Module 2 – IT Security

Lesson 4 – Secure Web Use

Secure browsing is essential for protecting personal information, avoiding scams and ensuring safe online behaviour. This lesson explains HTTPS, website certificates, phishing, browser security tools, cookies, privacy settings and how to recognise unsafe websites.

1. Secure Websites (HTTPS)

A secure website protects the information you send and receive.

• http:// – Not secure; information can be intercepted.
• https:// – Secure; uses SSL/TLS encryption.
• Look for the padlock symbol in the browser address bar.
• Avoid entering passwords or card details on websites marked “Not Secure”.

Why HTTPS matters

• Protects login information.
• Prevents data interception (man-in-the-middle attacks).
• Confirms you are communicating with the intended website.

2. Certificates and Trust

Websites use digital certificates to prove their identity and secure the connection.

• Issued by Certificate Authorities (CAs).
• Verify the organisation or company owning the website.
• Browsers warn if certificates are expired, invalid or misconfigured.

Rule: If a certificate warning appears, do not continue to the site.

3. Browser Security Features

Modern browsers include tools to improve online security.

• Pop-up blocker – blocks unwanted or harmful pop-ups.
• Safe Browsing / SmartScreen – warns about dangerous or fake websites.
• Private Browsing / Incognito – reduces tracking and does not save history.
• Password Manager – stores passwords securely.
• Automatic updates – ensures the browser stays secure.

4. Phishing Attacks

Phishing attempts to trick people into revealing personal information.

Common phishing signs

• Unexpected emails asking for login or payment details.
• Urgent or threatening messages: “Your account will close today!”.
• Poor spelling, grammar or suspicious email addresses.
• Links to fake login pages.
• Unexpected attachments.

Types of phishing

• Spear phishing – targeted at specific individuals.
• Smishing – phishing by SMS.
• Vishing – phishing by voice call.

5. Safe Browsing Habits

Good habits help protect your accounts and devices.

• Do not click unknown links or open unexpected attachments.
• Use strong, unique passwords.
• Enable two-factor authentication (2FA).
• Use bookmarks for banking or important accounts.
• Do not download files from untrusted websites.
• Use a pop-up blocker.
• Keep your browser and plugins updated.

6. Social Engineering

Social engineering tricks users into revealing confidential information.

• Pretending to be IT support or a trusted organisation.
• Asking directly for passwords or access.
• Impersonating colleagues or managers.
• Using personal information (from social media) to gain trust.

7. Cookies and Privacy

Cookies store information about your online activity.

Types of cookies

• Essential cookies – required for basic website functions.
• Functional cookies – save settings such as language.
• Tracking cookies – used for advertising and analytics.

User privacy options

• Clear cookies and browsing history regularly.
• Use private browsing modes.
• Disable third-party cookies.
• Review cookie consent banners.

8. Additional Safety Topics

• Avoid auto-connecting to Wi-Fi networks.
• Check URLs carefully – attackers create realistic fake domains.
• Never store passwords in plain text.
• Always sign out of online accounts on shared computers.
• Be cautious of shortened links (e.g., bit.ly).
• Do not give apps unnecessary permissions (location, camera, contacts).

9. Practical Activity

• Visit a secure website and view its certificate details.
• Identify the padlock and HTTPS in your browser.
• Search online for example phishing emails and list warning signs.
• Enable 2FA on one of your accounts.
• Clear cookies and review privacy settings in your browser.