For an ordinary person who wants a realistic security baseline across email, finance, social, cloud, and devices. This is defensive hygiene—not hacking—and it prioritizes account recovery, unique credentials, phishing resistance, updates, backups, and a calm incident plan.
Course 11 · Digital course 04
Protect Your Digital Life
Secure the accounts, devices, data, and recovery paths that matter most before a crisis happens.
Before you start
Choose a reputable password manager and update your primary devices.
See everything you’ll needWhat you’ll leave with
A better-protected email account, password manager, stronger sign-in, tested backups, and an incident recovery card.
Start course Start without an account. Sign in to save lesson progress across devices.
Your project
Start with the practice files. Build your project one lesson at a time.
Practice files are free without an account. Sign in to save your project record in My Proof: a description, checklist, and optional work link. Keep the original files in your own app or notebook; saving a project record does not upload them.
- Get your materialsDownload the practice worksheetUse the downloadable worksheet or toolkit alongside the lesson instructions.
- Make your projectView the project checklist Work in your own notebook, document, or software. Use the supplied practice examples when you prefer.
- Keep a private recordSave a project record Sign in to save a description and checklist, then return to update them.
Optional course overview
Watch an introduction.
This overview from Cybersecurity and Infrastructure Security Agency introduces ideas you’ll practice in the lessons.
Watch directly on YouTubeCybersecurity and Infrastructure Security AgencySecure Our WorldYouTube
Course handbook
Know the route before you begin.
Here’s what you’ll need and what you’ll make. You can return to this guide during any lesson.
- Choose a reputable password manager and update your primary devices.
- Gather recovery emails, phone access, device lists, and current backup information.
- Reserve uninterrupted time for email, financial, and identity-provider accounts first.
- If you suspect active compromise, use a clean device and the provider's official recovery path.
Finish with proof you can use.
A personal security file with a critical-account map, unique managed passwords, phishing-resistant or strongest available MFA, secured devices and recovery methods, a tested 3-2-1-style backup plan, and a printed incident checklist.
Save a project record in My ProofSee project checklist and review criteria
- A critical-account map ranked by impact and recovery dependency.
- A password vault with unique credentials for every critical account and a secure recovery kit.
- Strong MFA enabled and tested on every master-key account with offline backup codes.
- A four-step verification rule posted where household or team members can use it.
- Updated and encrypted devices plus a documented, tested backup routine.
- A one-page incident card that can be used even when your main phone and email are unavailable.
Three ideas to help you along the way
Three useful ideas
The rules behind the steps.
Email is the recovery root
Control of primary email often enables password resets elsewhere, so it deserves the strongest protection first.
Unique credentials contain damage
One stolen password should not unlock every account; reuse turns a single breach into a chain reaction.
Recovery is part of security
Updates and MFA prevent many incidents, while tested backups and documented recovery reduce the impact of those that still occur.
What do these words mean?
Key words
Key terms worth knowing.
- MFA
- Authentication requiring more than one factor, ideally something resistant to phishing such as a security key or passkey.
- Passkey
- A cryptographic sign-in credential tied to a device or password manager and designed to resist phishing.
- Phishing
- A deceptive message or site intended to steal credentials, money, or sensitive information or trigger unsafe action.
- Recovery code
- A one-time backup code used when a normal authentication method is unavailable.
- 3-2-1 backup
- A resilience pattern using three data copies, two storage types, and one copy separated from the primary environment.
Your route6 lessons.
6 lessons.
One useful project.
Work in order the first time. Each lesson makes something the next lesson can use.
- 1Up next
Map your critical accounts
Identify the accounts and recovery channels whose loss would cause the most damage.
- 225 min
Move to unique passwords
Stop one breached password from unlocking multiple accounts.
- 323 min
Turn on stronger sign-in
Add a second barrier and secure the fallback paths around it.
- 412 min
Spot and stop phishing
Break the urgency-and-impulse pattern used to steal credentials or money.
- 527 min
Secure devices and backups
Reduce damage from loss, theft, malware, hardware failure, and accidental deletion.
- 618 min
Prepare for an incident
Make the first hour of an account takeover or lost device calmer and faster.
Use the tools
See all tools Tools to help you practice.
Source transparency
Sources and further study.
Explore the references behind the lessons and take your learning further. Source notes explain access and reuse.
Ready when you are
Start lesson one Start with the first useful move.
You’ll always know what to do, what to make, and where to go next.
Open collaboration ideaHelp keep this complete course free.
Potential collaboration: Password managers, security software, backup services
Partner with LifeStarter