Skip to main content

Free · no sign-in

Two-minute lessons

Short, free lessons behind every K12 Cyber Forward poster. No sign-in needed.

Bank change? Call back first.Stop vendor bank changes and payroll diversion with one habit: the call-back rule, plus a second approver.Passphrase powerBuild a long, silly passphrase you can remember, keep it secret and use a different one for every account.Check the AI tool before you pasteUse only district-approved AI tools, keep student records out of unapproved services and check every AI answer before it reaches students.Is it really the school?Spot fake school texts and emails about fees, lunch balances, closures and bus changes, and check them the safe way.Free skins are the baitSpot free-currency, trade and 'verify your account' scams in game chat and DMs, and never share a sign-in code.Your code is your keyStop account takeover: unique passphrases, the strongest two-step option you have, private codes and a recovery plan.The first hour of a cyber incidentLead the first hour of a ransomware or extortion incident: who is in the room, what IT may do, what not to touch and how to communicate.A backup you haven't restored is a guessRun a quarterly file restore and an annual full-system restore, time them against the school day and keep a one-page record.Pause. Verify. Report.A three-step habit for unexpected links, payment requests, sign-in codes and attachments, with red flags and a practice scenario.Your login. Your decision.Deny sign-in prompts you did not start, keep one-time codes private, and report unexpected prompts so the account can be secured.One account. One unique password.Use long passphrases, never reuse your school password, let a password manager remember them, and add multifactor sign-in.Share with purpose.Before sharing student information, check who can open it, keep it in district-approved storage and send only what the task requires.New tool? Check first.Before using a new app or AI tool with students or records, confirm district approval and keep data out until approved.A little care. A ready device.Restart for school updates, lock your screen, skip unknown add-ons, and report lost devices or unusual behavior right away.You can ask for help.Something online feels confusing, mean or uncomfortable? Stop, show a trusted adult and decide the next step together.Cybersecurity Awareness MonthA four-week October campaign: passwords and logins; pause, verify, report; privacy and approved tools; device care and a help plan.A message showed up. What next?A student decision map for unexpected links, prizes and sign-in requests: pause, confirm with a trusted adult, then act.New device. Shared plan.Four steps for a new device: update it, protect the accounts, choose boundaries together and practice the help plan.A clean handoff for a new school yearStart from approved roster changes, match access to new roles, save work before device resets, and confirm and record every change.Before you step awayLock screens before leaving, close records before sharing, collect printouts right away and keep passwords and rosters out of sight.Teach with less informationName the learning purpose, collect the smallest useful set, keep it in approved tools, share with named people and follow district retention.Your game name. Your privacy.Use a nickname, check location clues with an adult, keep sign-in codes private and tell a trusted adult when a chat feels wrong.Enjoy the trip. Share thoughtfully.Keep travel dates out of public posts, post photos after you return, turn off location tags and ask before sharing someone else's photo.Keep a route back to your accountsSet up recovery info your family controls for home accounts, use the school route for school accounts, and never share a sign-in code.Every service needs an ownerGive each district service a stated purpose, an accountable owner, access that matches duties and a review date that covers retention and exit.Holiday deals? Check first.Never pay anyone with a gift card, check deliveries on sites you already know, and research charities before you give.W-2 request? Verify first.Verify W-2, staff-data and direct-deposit requests by a known route. The IRS normally makes first contact by mail.

We count visits to this page in aggregate only. No cookies, no accounts, no personal data.