Module 04 Β· Cybersecurity Β· Capstone
πŸ›‘οΈ Capstone Mission

Your Digital Self-Defense Check-Up

You've learned the moves, now it's time to become a cyber-defender! Today, you're not just a student; you're a security expert on a mission. Let's check your digital world for weaknesses and build a super-safety plan to protect your online adventures.

🧐

1. What's a Safety Check-Up?

Think of your online accounts (like email, games, and social media) as houses on your street. A Safety Check-Up is like walking down the street and making sure every door and window is locked! It’s how the pros find weak spots before a digital burglar does.

We'll check for three main things:

πŸšͺ
Locked Doors (Passwords)

Is each "house" locked with a unique, super-strong key? Or are you using the same key for every door on the street?

πŸ””
Super Doorbells (2FA)

Do you have a secret code or a check on your phone that rings when someone tries to get in, even if they have a key?

🀫
Secrets Kept Safe (Privacy)

Are your windows covered? Do you know who you're sharing your information with and how to spot a trickster?

πŸ‘£

Watch: Your Digital Trail

Before we start our check-up, let's see why it's so important! This video shows how our information travels online and why we need to protect it. It's like learning the secret map before you go on an adventure!

βœ…

2. Run Your Check-Up

Review each security area honestly. Click each item to expand it, then choose your status. We're not collecting this data β€” it's just for you to build your own safety plan.

?
πŸ”‘ Passwords: Do you reuse passwords across sites?

Using the same password everywhere means one data breach exposes all your accounts.

βœ… How to fix: Use a password manager (Bitwarden is free and awesome) to generate and store unique passwords for every site. You only need to remember one master password.

?
πŸ“± Two-Factor Authentication: Do your important accounts have 2FA on?

Email, bank, and social media accounts are high-value targets. 2FA adds a second check even if your password is stolen.

βœ… How to fix: Go to Settings β†’ Security β†’ Two-Factor Authentication on Google, Instagram, Roblox, etc. Use an authenticator app (like Google Authenticator) rather than SMS if possible.

Pro Tip: Authenticator apps are safer than SMS because of something called "SIM-swapping," where a hacker tricks your phone company into giving them your phone number. If they have your number, they can get your SMS 2FA codes! An app stays on *your* device.

?
πŸ”Ž Data Breaches: Has your email been exposed in a data breach?

When big companies get hacked, lists of user emails and passwords are often leaked online. It's important to know if your info was in one of those leaks.

βœ… How to fix: With a parent, visit the website Have I Been Pwned?. It's a safe and respected security site run by a pro. You can enter an email address to see if it has ever been part of a major data breach. If it has, that's a HUGE signal to change the passwords on those accounts immediately!

?
πŸ”’ Devices: Is your phone/computer locked with a strong PIN or password?

A phone without a lock screen is an open book β€” all your apps, messages, and saved passwords are accessible to anyone who picks it up.

βœ… How to fix: Set a 6+ digit PIN or use a passphrase. Avoid "pattern unlock" β€” it leaves smudge marks. Enable "auto-lock after 1 minute" of idle time.

?
🌐 Browsing: Do you check for HTTPS before logging into sites?

Entering your password on an unencrypted site (HTTP) is like shouting it across a crowded room.

βœ… How to fix: Always check for the padlock icon πŸ”’ in your browser's address bar. Most modern browsers will warn you automatically, but it's a great habit to check yourself!

?
πŸ“§ Phishing: Do you check emails carefully before clicking links?

Social engineering and phishing are the #1 way attackers get in. One careless click can compromise everything.

βœ… How to fix: Remember the 7 Red Flags from Module 2! When in doubt, go directly to the website instead of clicking the link. Ask yourself: "Did I expect this email? Does the sender look right?"

?
πŸ”„ Updates: Do you keep your devices and apps up to date?

Most software updates include security patches β€” fixes for vulnerabilities hackers actively exploit. Delaying updates leaves known holes open.

βœ… How to fix: Enable automatic updates on your phone and computer. This is one of the single highest-impact security improvements you can make β€” and it requires almost zero effort.

πŸ‘¨β€πŸ‘©β€πŸ‘§

3. Your Family's Super Safety Plan

Talk It Over With a Parent!

Your security score is a great start, but the best way to get safer is to make a plan with your family. Grab a parent and talk about these two things:

  • The #1 Thing to Fix: Based on your check-up, what's the one thing you can do together this week to improve security? (Maybe it's setting up a family password manager or checking everyone's email on HaveIBeenPwned.com!)
  • Phishing Busters: Ask your parent to show you a real email from their inbox. Can you both spot if it's safe or suspicious using what you learned in Module 2?

Making a plan out loud is more powerful than just typing it in a box!

Ready to make your plan official? Fill out your Cyber-Defender Action Plan below. This is your personal mission brief for staying safe online. When you submit it, you'll get a cool, shareable report of your plan!

πŸ› οΈ

4. Go Pro: The Pen-Tester's Toolkit

You've completed the check-up. Ready to try some real-world security pro moves? Here are two challenges to take your skills to the next level.

Challenge 1: Install a Real Password Manager

The single biggest leap you can make. With your parents' permission, install Bitwarden. Create a strong master password. Then, use its generator to create a new, 16+ character password for ONE important account (like your email). Experience what it's like to not have to memorize it. This is how the pros do it.

Challenge 2: Inspect a Login Form

You learned about HTTPS. Now, *see* it in action. Go to a login page. Right-click and choose "Inspect". Go to the "Network" tab. Try logging in. See the "POST" request? Click it and look at the "Payload" or "Request" tab. On a secure HTTPS site, your data is encrypted. On an old HTTP site, you'd see your password in plain text. This is why we check for the πŸ”’ padlock!

πŸ’Ό

5. Future-Proof Your Skills: Cybersecurity Careers

If you enjoyed this module, cybersecurity might be your future! The world needs more digital defenders to protect everything from games to spaceships.

πŸ”΄ Penetration Tester

Companies hire you to legally hack them to find weaknesses. Get a taste of this on sites like TryHackMe (for older teens, with parent permission!).

πŸ”΅ Security Analyst

The digital detective on watch 24/7. You monitor networks for threats, investigate alerts, and are the first line of defense during a breach.

🟒 Ethical Hacker

You hunt for bugs and vulnerabilities in software and get paid for reporting them! See real reports on HackerOne's Hacktivity feed.

πŸ€– Future Roles

The digital world is getting wilder! Future heroes will be AI Guardians training friendly robots to battle tricky AI chameleons, Metaverse Defenders protecting virtual game worlds from thieves, and Quantum Code-Breakers racing to make unbreakable messages. The adventure is just beginning!

πŸ†

Cybersecurity Complete!

You understand passwords, phishing, encryption, and how to audit your own security.

That makes you safer than 90% of internet users. Now go teach someone what you learned. πŸ›‘οΈ