Digital Inclusion Series — Collection 2

Staying Safe
Online

Six short videos covering passwords, secure connections, common scams, phishing, and what to do if you think you have been hacked.

6 Short Videos · ~1–3 min each Safety focused Beginner friendly Subtitles available

Welcome to Collection 2

An overview of what this collection covers and why online safety matters

Introduction video coming soon — YouTube link will appear here

Staying Safe in the Digital World

Now that you have the basics from Collection 1, it is time to learn how to protect yourself online. The internet is a wonderful tool, but just like in the real world, there are a few things to watch out for.

These five short videos will teach you practical, everyday safety skills — from creating strong passwords to spotting scams and knowing exactly what to do if something goes wrong.

Each video uses plain English, is just a few minutes long, and you can rewatch any time. There is no test and no pressure — just useful knowledge to help you feel confident and safe.

Why does this matter? Scams and online fraud affect millions of people every year in the UK. The good news is that a few simple habits can protect you from the vast majority of threats.

You do not need to be a computer expert. If you can lock your front door, you can learn to lock your online accounts too.

What’s in This Collection

Click any topic below to jump straight to that video.

1

Safe Password Practice

Learn how to create strong passwords and keep your accounts secure

2

Secure vs. Unsecure Connections

How to tell if a website is safe before entering personal information

3

Recognising Common Scams

How to spot online scams and protect yourself from fraud

4

Spotting Phishing Attempts

How to recognise fake messages designed to steal your information

5

What to Do if You Think You’ve Been Hacked

Step-by-step actions to take if your account has been compromised

1

Safe Password Practice

Learn how to create strong passwords and keep your accounts secure

Video coming soon

What You Will Learn

What Makes a Strong Password

At least 12 characters long, mixing capitals, lowercase, numbers, and symbols. Never use your name, birthday, or “password.”

The Three Random Words Trick

Pick three unrelated words and combine them — for example, “PurpleBicycleSunshine.” Long, hard to guess, but easy to remember.

Two-Step Verification

An extra layer of safety — a code is sent to your phone after you enter your password. Turn it on for email and banking especially.

Helpful Tips

Use a different password for each account. If one is discovered, all your accounts could be at risk.
Write passwords down and keep them somewhere private and safe, like a locked drawer. Never on a sticky note on your computer.
Consider a password manager app — it stores all your passwords securely behind one main password. Many are free.
If you get a message saying your password has been in a data breach, change it straight away.
2

Secure vs. Unsecure Connections

How to tell if a website is safe before entering personal information

Video coming soon

What You Will Learn

The Padlock Icon

A small padlock in your browser’s address bar means the connection is encrypted — your information is scrambled so nobody else can read it.

HTTPS vs. HTTP

Secure websites start with https:// (the “s” stands for secure). If it only says http:// without the “s,” the connection is not secure.

Public Wi-Fi Caution

Be extra careful when using public Wi-Fi in cafés, libraries, or trains. Avoid entering bank details or passwords on public networks.

Helpful Tips

Padlock + https = secure. No padlock + http = not secure. Check before entering personal details.
A padlock means the connection is encrypted, but always check the web address is correct too — scammers can create secure-looking fake sites.
If a website asks for personal details and there is no padlock, do not enter your information.
For banking and shopping, use your own internet connection at home rather than public Wi-Fi where possible.
3

Recognising Common Scams

How to spot online scams and protect yourself from fraud

Video coming soon

Common Types of Scam

Fake Emails & Texts

Pretend to be from your bank, HMRC, or Royal Mail with urgent messages demanding you click a link or share details.

Phone Scams & Fake Websites

Callers claim to be from your bank, police, or tech companies. Fake websites look almost identical to real ones — always check the address carefully.

Prize, Lottery & Romance Scams

You have not won a prize you never entered. And if someone you have only met online asks for money, be very cautious.

Golden Rules to Stay Safe

Stop and Think. If something feels urgent or too good to be true — pause before you act.
Do Not Click. Do not click links in messages you were not expecting.
Never Share. Never share passwords or bank details with unexpected contacts.
Report it. Forward scam emails to report@phishing.gov.uk · Forward scam texts to 7726 · Report calls to Action Fraud.
4

Spotting Phishing Attempts

How to recognise fake messages designed to steal your information

Video coming soon

How to Spot Phishing

Strange Sender Address

Check the email address carefully — not just the display name. A phishing email might come from something like “your-bank@randomsite.com.”

Urgent Language & Generic Greetings

“Your account will be closed” or “act now” — real organisations rarely pressure you. Watch for “Dear Customer” instead of your actual name.

Suspicious Links & Attachments

Hover over links to see where they really go before clicking. Be cautious about opening files you were not expecting.

What to Do

If you receive a phishing message: Do not click any links or attachments. Do not reply. Forward emails to report@phishing.gov.uk. Forward texts to 7726. Delete the message.
If you have already clicked: Do not panic. Contact your bank if you shared financial details. Change passwords for affected accounts. Report to Action Fraud.
If in doubt, contact the organisation directly using a phone number you trust — not one from the suspicious message.
Hover over links before clicking to check where they really go — on a phone, press and hold the link.
5

What to Do if You Think You’ve Been Hacked

Step-by-step actions to take if your account has been compromised

Video coming soon

Signs You May Have Been Hacked

Warning Signs

Password change emails you did not request. Messages sent from your accounts that you did not write. Locked out of an account. Unknown bank transactions.

Steps 1–3: Immediate Actions

Change your passwords immediately. Turn on two-step verification. Check your email settings for forwarding rules you did not set up.

Steps 4–6: Get Help

Contact the service provider for account recovery. Alert your bank if financial details may be at risk. Report to Action Fraud (or Police Scotland).

Remember

Do not panic. Being hacked can happen to anyone. The important thing is to act quickly and calmly.
Act quickly: change passwords, contact your bank, and report to Action Fraud.
Monitor your accounts for a few weeks afterwards. Watch for any unusual activity.
This is the end of Collection 2. Next up: Collection 3 — Understanding AI.

Where to Report & Get Help

Key organisations and services to help you stay safe online and report problems.

Action Fraud

The UK’s national fraud and cybercrime reporting centre. Report online or by phone if you have been scammed or hacked.

actionfraud.police.uk →

Report Phishing Emails

Forward suspicious emails to the National Cyber Security Centre. They investigate and take down fraudulent sites.

report@phishing.gov.uk →

Report Scam Texts

Forward scam text messages to 7726 (spells “SPAM” on your keypad). Your mobile provider will investigate.

NCSC Cyber Aware

Free guidance from the National Cyber Security Centre on how to stay secure online, with practical tips for individuals.

ncsc.gov.uk/cyberaware →

Get Safe Online

A UK government-backed website with plain-English advice on protecting yourself, your family, and your devices online.

getsafeonline.org →

Have I Been Pwned?

A free service to check if your email address has appeared in a data breach. If it has, change your passwords straight away.

haveibeenpwned.com →

Take It With You — Download the Offline Pack

Everything from this collection in one printable PDF. Key points, safety tips, reporting contacts, and space for your own notes — so you can stay safe even without the internet.

Download Offline Pack (PDF)

PDF · A4 · Print-friendly

All 6 video summaries Safety tips & key points Reporting contacts Scam warning signs