Stay Safe Online
New laptop, new uni email, new network to join, freshers week hands you a lot of new accounts at once. Here's what's actually worth doing about it, starting with six things you can finish before your next lecture.
Do these six things today
Get a password manager
One strong password per account, not one password for everything.
Turn on 2FA
Start with your email and anything involving money.
Update your stuff
Phone, laptop, browser. Don't dismiss the update prompt forever.
Slow down before you click
Unexpected link in an email or text? Go to the site yourself instead.
Lock your screen
Every time you step away from a library or campus computer.
Back up your coursework
OneDrive, Google Drive, whatever, just not only on one laptop.
Spot phishing before it spots you
Brunel's IT Security team has flagged a live phishing campaign targeting students this term: messages disguised as training, career or other opportunities, pushing you to click a link, register, or respond quickly. Here's what to actually do about it.
Check the sender, not just the name
A display name can say Brunel IT while the actual address is nothing of the sort. Look at the full email address before you trust anything in the message.
Urgency is the tell, not the emergency
'Register now', 'limited spots', 'respond within 24 hours'. Pressure to act fast is the tactic, not a reason to skip checking.
Hover before you click
On a laptop, hover over a link to see where it actually goes. On your phone, press and hold it. If the destination looks nothing like what the email claims, stop there.
Too good to be true, usually is
Fake job offers, placements and career opportunities are some of the most common scams aimed specifically at students. A real offer will not ask you to pay, log in, or hand over details just to claim it.
Report it, do not just delete it
Use the Report Phishing button in Outlook. It takes seconds, and it helps Brunel IT block the campaign for everyone else too.
Already clicked, or entered details?
Do not sit on it. Contact the Brunel IT Service Desk straight away. The sooner they know, the faster they can help secure your account.
Go deeper
Passwords, properly
What actually makes a password strong, which password manager to pick, and where passkeys fit in. Full write-up: passwords.md →
Two-factor authentication
What it is, which method to use, and how to not get locked out if you lose your phone. Full write-up: two-factor-auth.md →
Spotting phishing and scams
The red flags to watch for, and the scams that specifically target students (fake jobs, fake accommodation, fake IT emails). Full write-up: phishing.md →
Device and browser settings
Screen locks, disk encryption, and the browser permissions worth checking. Full write-up: device-and-browser-settings.md →
Public wifi and eduroam
What's actually risky on public wifi today, why eduroam is worth using, and whether you really need a VPN. Full write-up: public-wifi.md →
Backups and updates
A five-minute monthly habit that prevents most of the "I lost my dissertation" stories. Full write-up: backups-and-updates.md →