Phishing

Phishing is a scam message, call or website that pretends to be a company or person you trust in order to steal your password, codes or money.

What it means for you

CISA publishes guidance on recognizing and reporting these messages. A password manager and passkeys help reduce risk, because they will not fill in a fake site.

Guides on this topic

• Password Managers for a Household: Free Options First

  Start with the free built-in managers from Apple and Google, then compare free Bitwarden and Proton Pass plans, plus breach alerts and a weekend plan.

• 2FA, Passkeys and Security Keys for Your Home

  Turn on two-factor sign-in with a free authenticator app, add passkeys where offered, and decide whether a security key is worth it.

• Home Backups: the 3-2-1 Rule, Free Options First

  Back up photos and files with Time Machine or Windows Backup, add an offsite copy and keep one copy offline to help reduce ransomware risk.

Related terms

• Password manager
• Passkey
• Two-factor authentication
• Security key

← All glossary terms · Search all guides for “Phishing”

Definitions are short and general. For model-specific details, check your device maker’s own documentation.