Online Privacy and Security - JSS 1 note

ONLINE PRIVACY AND SECURITY

Subject: Digital Technologies
Class: JSS 1 (Basic 7)
Term: Second Term
Week: Week 10
Duration: 80 Minutes (Double Period)
Topic: Online Privacy and Security

1. Introduction

The Internet allows people to communicate, learn, share information and access many online services. However, using the Internet also involves risks when personal information is exposed or online accounts are not properly protected. Online privacy and security help people protect their personal information and prevent unauthorised access to their accounts.

In this lesson, we will learn the meaning of online privacy, how to create and manage strong passwords, and how to recognise and avoid online scams and phishing.

2. Meaning of Online Privacy

Online privacy is the ability to control how personal information is collected, used and shared when using the Internet and digital services.

Personal information is information that identifies or describes a person. Examples include:

• Full name and home address.
• Telephone number and email address.
• Passwords and account login details.
• School name and location.
• Photographs and videos.
• Bank details and other financial information.

People should be careful about the information they share online because it may be copied, stored or shared with others without their permission.

Importance of Online Privacy

1. Protection of personal information: It helps prevent private information from reaching unauthorised people.
2. Prevention of identity theft: It reduces the risk of criminals misusing personal details.
3. Protection of reputation: It helps prevent private photographs and messages from being shared without permission.
4. Prevention of fraud: It reduces the risk of people using personal details to deceive others.
5. Personal safety: It helps prevent strangers from obtaining information that could put someone at risk.

3. Meaning of Online Security

Online security refers to the measures used to protect online accounts, devices and information against unauthorised access, theft and other threats.

Online security involves using protective measures such as strong passwords, safe browsing habits and careful handling of personal information.

Difference Between Online Privacy and Online Security

Online Privacy	Online Security
Deals with how personal information is collected, used and shared.	Deals with protecting accounts, devices and information from threats.
Example: controlling who can see your photographs.	Example: using a strong password to protect your account.
Helps keep personal information private.	Helps prevent unauthorised access to information and accounts.

4. Password Creation

A password is a secret combination of characters used to verify a user's identity and control access to a computer, mobile device or online account.

A strong password makes it more difficult for another person to guess or access an account. Passwords are commonly used for email accounts, social media, school portals and other online services.

Rules for Creating a Strong Password

1. Make it long: Longer passwords or passphrases are generally harder to guess.
2. Avoid personal information: Do not use your name, birthday, telephone number or school name as your password.
3. Avoid common passwords: Passwords such as 12345678 and password are easy to guess.
4. Use a unique password: Create a different password for each important account.
5. Use a memorable passphrase: A long combination of unrelated words can be a good choice when it is unique and not easily associated with you.
6. Follow the website's requirements: Some services require a particular combination of letters, numbers or symbols.

Examples of Password Strength

Password Example	Assessment	Reason
123456	Very weak	A common and predictable sequence.
john123	Weak	Uses a name and a predictable number sequence.
A long, unique passphrase	Better	Length and uniqueness make it harder to guess.

Important: The examples above are for learning only. Do not use passwords copied from a lesson note or website for your personal accounts. Create your own unique passwords and keep them secret.

5. Password Management

Password management means creating, storing, using and updating passwords safely to protect accounts from unauthorised access.

Rules for Managing Passwords

1. Keep passwords secret: Do not share your passwords with friends or strangers.
2. Use different passwords: Avoid using one password for all your online accounts.
3. Store passwords safely: Where appropriate, use a reputable password manager to generate and store unique passwords.
4. Avoid public storage: Do not write passwords where other people can easily see them.
5. Log out of shared devices: Always sign out after using an account on a school computer or cybercafé computer.
6. Change exposed passwords: If you suspect someone has discovered your password, change it promptly using the official service.
7. Use additional protection: Enable two-factor authentication when available. This adds another step to the sign-in process.

Importance of Proper Password Management

• It helps prevent unauthorised access to accounts.
• It protects personal information and private messages.
• It reduces the risk of identity theft.
• It helps protect school, email and social media accounts.
• It reduces the damage that may occur if one account is compromised.

6. Meaning of Online Scams

An online scam is a dishonest scheme carried out through the Internet to trick people into giving away money, personal information or something valuable.

Scammers often pretend to be trusted people or organisations. They may use fake prizes, false job offers, fake shopping websites or messages promising quick financial rewards.

Examples of Online Scams

1. Fake prize messages: A message claims that you have won a prize you never entered to win and asks you to pay a fee.
2. Fake job offers: A person promises employment but requests money or sensitive information before providing a genuine job.
3. Fake shopping websites: A website advertises goods at very low prices but may take payment without delivering the goods.
4. Impersonation scams: Someone pretends to be a friend, relative, teacher or official and requests money or private information.
5. Investment scams: A person promises unusually high or guaranteed profits to persuade people to send money.

7. Meaning of Phishing

Phishing is a form of online fraud in which criminals use fake emails, messages, websites or other communications to trick people into revealing sensitive information or taking unsafe actions.

Phishing messages may pretend to come from a bank, social media platform, school, delivery company or another trusted organisation. They may ask users to reveal passwords, verification codes or financial details.

Signs of a Phishing Message

• It asks for your password or verification code.
• It creates urgency by threatening to close your account immediately.
• It contains suspicious links or unexpected attachments.
• It promises a prize or reward that seems too good to be true.
• The sender's address or website address does not match the genuine organisation.
• It contains unusual requests, spelling errors or unexpected payment instructions.

Example of a Phishing Message

Sample suspicious message:
"Your email account will be closed today! Click this unknown link immediately and enter your password to keep your account active."

Why it is suspicious: It creates fear and urgency, uses an unknown link and requests a password.

8. Difference Between Online Scams and Phishing

Online Scams	Phishing
A broad term for dishonest schemes intended to deceive people.	A particular type of deception used to obtain sensitive information or encourage unsafe actions.
May involve fake investments, shopping, jobs or prizes.	Often involves fake messages, websites or login pages.
The main aim may be to steal money, information or valuable items.	The aim often includes stealing passwords, verification codes or financial details.

Phishing is one type of online scam, but not every online scam is phishing.

9. How to Avoid Online Scams and Phishing

1. Do not trust every message: Treat unexpected prize, job or money offers with caution.
2. Verify the sender: Contact the person or organisation through a known, official channel if a message seems suspicious.
3. Check links carefully: Avoid clicking unknown or unexpected links. Visit the official website directly instead.
4. Never disclose passwords: Do not send passwords or one-time verification codes in response to unexpected messages.
5. Avoid pressure: Be suspicious of messages demanding immediate payment or threatening sudden consequences.
6. Do not pay to claim suspicious prizes: Verify any offer independently before providing money or information.
7. Protect personal information: Do not send sensitive details to unknown people or unverified websites.
8. Report suspicious messages: Use the platform's reporting tools and ask a trusted adult for help when necessary.

Safety rule: If a message asks for a password, verification code or unexpected payment, stop and verify it before taking any action.

10. What to Do If You Fall for a Scam or Phishing Message

If you have clicked a suspicious link or shared information by mistake, take the following steps:

1. Stop responding to the suspicious sender.
2. Tell a trusted adult, parent, guardian or teacher.
3. If you disclosed a password, change it through the official website or application as soon as possible.
4. Secure any other account that uses the same password.
5. Sign out unauthorised sessions and enable two-factor authentication where available.
6. Report the message or account to the relevant platform.
7. If money or financial information is involved, contact the relevant bank or payment provider promptly through its official contact channel.

11. Class Activities

Activity A: Password Creation

Study the following examples and identify the password that is easiest to guess.

• 123456
• mary2012
• A long, unique passphrase made from unrelated words.

Explain three rules for creating and managing passwords safely. Do not write your real password in your exercise book or share it with the class.

Activity B: Identify a Scam

A student receives a message saying, "Congratulations! You have won a new smartphone. Pay a processing fee now and send your email password to receive your prize."

Answer the following questions:

1. Identify two warning signs in the message.
2. Explain why the student should not respond as requested.
3. State two safe actions the student should take.

12. Summary

• Online privacy involves controlling how personal information is collected, used and shared.
• Online security involves protecting accounts and information against unauthorised access and threats.
• A strong password should be long, unique and difficult to guess.
• Password management involves storing and using passwords safely.
• An online scam is a dishonest scheme intended to deceive people.
• Phishing uses deceptive messages or websites to trick people into revealing sensitive information or taking unsafe actions.
• Suspicious messages should be verified, reported and avoided.

13. Evaluation Questions

1. Define online privacy.
2. What is online security?
3. Explain the meaning of a password.
4. State five rules for creating a strong password.
5. Mention five rules for managing passwords safely.
6. What is an online scam?
7. Define phishing.
8. State four warning signs of a phishing message.
9. Explain four ways to avoid online scams and phishing.

14. Assignment

1. Explain the meanings of online privacy and online security.
2. List six rules for creating and managing passwords safely.
3. Differentiate between an online scam and phishing.
4. Write five warning signs of a suspicious online message.
5. Describe what you would do if you received a message asking for your password to claim a prize.

15. Online Quiz

Select one answer for each question and click Check Answers.

1. What is online privacy?

A. Sharing all personal information publicly B. Controlling how personal information is collected, used and shared C. Downloading every available file D. Giving passwords to friends

2. Which is the best password practice?

A. Using your birthday as every password B. Sharing passwords with classmates C. Using long, unique passwords for different accounts D. Using 123456 for every account

3. What is phishing?

A. Using deceptive messages or websites to obtain sensitive information B. Creating a strong password C. Updating a computer D. Printing a document

4. A message asks you to pay money to claim an unexpected prize. What should you do?

A. Pay immediately B. Send your password C. Forward it to everyone D. Treat it as suspicious and verify the offer independently

5. What should you do if you discover that someone may know your password?

A. Ignore the situation B. Change the exposed password and secure the account C. Publish the password online D. Send the password to the person

---

CMPNOTE | Digital Technologies Lesson Notes