Security
Checking whether something has been compromised, and telling a real site from an imitation.
3 guides
Was My Email Actually Hacked? How to Check, and What to Do First
How to read your account's own security log, and the recovery order that actually locks an attacker out.
Is This Website a Scam? Six Checks That Take Two Minutes
The padlock means nothing. Here are the checks that actually work.
Passkeys vs. Passwords: What Changed, and What You Should Do
How passkeys actually work, where they beat passwords, and the recovery trap to avoid.
How we handle Security
- What these guides cover
- Checking whether an account has actually been compromised, and telling a real site from an imitation, using first-party evidence.
- Where we stop
- We do not link to password checkers that ask for your password, and we never ask you to enter credentials anywhere except the official site itself.
- Safety line
- Where an article describes a scam, it describes how to recognise it — never how to run one. If money has already left, the article says who to contact first and how quickly.
- What we check against
- CISA, the FIDO Alliance, and the account providers' own security logs.