English how-to · updated 2026

Passwords and online safety

A security search parents and students make after every breach headline. This page has 100 important questions and answers. Original explainer for daily search — not a government login or live tracker.

A strong password is long and unique — a passphrase beats “Summer2026!”. Use a password manager so you are not recycling the same string on email, banking, and games. Turn on two-factor authentication (2FA).

Nobody from your bank DMs you for the SMS code. Phishing links copy real logos. If a prize wants your password, it is not a prize.

100 important questions. Quick 10 is a random set; Full set plays every question.

100 questions and answers

Each item is a 4-option MCQ. Open a question, tap A–D. Green is correct, red is wrong. Original explainers — not copied match reports.

1. The official source for “password and online safety” (learn desk, item 17) is

Tap A, B, C or D.

Answer: B) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

2. The official source for “password and online safety” (learn desk, item 18) is

Tap A, B, C or D.

Answer: C) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

3. The official source for “password and online safety” (learn desk, item 19) is

Tap A, B, C or D.

Answer: D) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

4. The official source for “password and online safety” (learn desk, item 20) is

Tap A, B, C or D.

Answer: D) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

5. The official source for “password and online safety” (learn desk, item 21) is

Tap A, B, C or D.

Answer: C) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

6. The official source for “password and online safety” (learn desk, item 22) is

Tap A, B, C or D.

Answer: A) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

7. The official source for “password and online safety” (learn desk, item 23) is

Tap A, B, C or D.

Answer: B) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

8. The official source for “password and online safety” (learn desk, item 24) is

Tap A, B, C or D.

Answer: A) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

9. The official source for “password and online safety” (learn desk, item 25) is

Tap A, B, C or D.

Answer: B) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

10. The official source for “password and online safety” (learn desk, item 26) is

Tap A, B, C or D.

Answer: D) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

11. The official source for “password and online safety” (learn desk, item 27) is

Tap A, B, C or D.

Answer: C) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

12. The official source for “password and online safety” (learn desk, item 28) is

Tap A, B, C or D.

Answer: B) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

13. The official source for “password and online safety” (learn desk, item 29) is

Tap A, B, C or D.

Answer: A) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

14. The official source for “password and online safety” (learn desk, item 30) is

Tap A, B, C or D.

Answer: B) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

15. The official source for “password and online safety” (learn desk, item 31) is

Tap A, B, C or D.

Answer: A) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

16. The official source for “password and online safety” (learn desk, item 32) is

Tap A, B, C or D.

Answer: C) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

17. The official source for “password and online safety” (learn desk, item 33) is

Tap A, B, C or D.

Answer: D) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

18. The official source for “password and online safety” (learn desk, item 34) is

Tap A, B, C or D.

Answer: C) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

19. The official source for “password and online safety” (learn desk, item 35) is

Tap A, B, C or D.

Answer: D) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

20. The official source for “password and online safety” (learn desk, item 36) is

Tap A, B, C or D.

Answer: B) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

21. The official source for “password and online safety” (learn desk, item 37) is

Tap A, B, C or D.

Answer: A) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

22. The official source for “password and online safety” (learn desk, item 38) is

Tap A, B, C or D.

Answer: D) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

23. The official source for “password and online safety” (learn desk, item 39) is

Tap A, B, C or D.

Answer: C) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

24. The official source for “password and online safety” (learn desk, item 40) is

Tap A, B, C or D.

Answer: B) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

25. The official source for “password and online safety” (learn desk, item 41) is

Tap A, B, C or D.

Answer: A) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

26. The official source for “password and online safety” (learn desk, item 42) is

Tap A, B, C or D.

Answer: C) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

27. The official source for “password and online safety” (learn desk, item 43) is

Tap A, B, C or D.

Answer: D) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

28. The official source for “password and online safety” (learn desk, item 44) is

Tap A, B, C or D.

Answer: C) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

29. The official source for “password and online safety” (learn desk, item 45) is

Tap A, B, C or D.

Answer: D) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

30. The official source for “password and online safety” (learn desk, item 46) is

Tap A, B, C or D.

Answer: B) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

31. The official source for “password and online safety” (learn desk, item 47) is

Tap A, B, C or D.

Answer: A) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

32. The official source for “password and online safety” (learn desk, item 48) is

Tap A, B, C or D.

Answer: D) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

33. The official source for “password and online safety” (learn desk, item 49) is

Tap A, B, C or D.

Answer: C) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

34. The official source for “password and online safety” (learn desk, item 50) is

Tap A, B, C or D.

Answer: D) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

35. A good password is

Tap A, B, C or D.

Answer: C) long, unique, and not reused

Managers generate and store them.

36. 2FA means

Tap A, B, C or D.

Answer: A) a second check (app, key, or code) after the password

Authenticator apps beat SMS when you can use them.

37. A phishing email tries to

Tap A, B, C or D.

Answer: B) trick you into giving a password or clicking a fake site

Check the real domain, not the logo.

38. If a site is breached, you should

Tap A, B, C or D.

Answer: C) change that password and any reuse of it

Have I Been Pwned-style checks exist.

39. Public Wi-Fi is riskier for

Tap A, B, C or D.

Answer: D) logging into email and banking without a VPN/care

Use the phone network for money if unsure.

40. A password manager is

Tap A, B, C or D.

Answer: B) an encrypted vault for unique passwords

Protect it with a long master passphrase.

41. Never share

Tap A, B, C or D.

Answer: B) one-time codes or your 2FA prompts

Scammers sit on the phone and ask you to read the SMS.

42. HTTPS in the padlock means

Tap A, B, C or D.

Answer: B) the link to that site is encrypted — not that the site is honest

Still check you are on the real bank domain.

43. Length in a passphrase usually beats

Tap A, B, C or D.

Answer: A) a short mix of symbols you will reuse

Four rare words can be stronger than P@ss1.

44. A unique password per important site stops

Tap A, B, C or D.

Answer: A) one breach opening your email and bank together

Reuse is the silent failure.

45. Store recovery codes for 2FA

Tap A, B, C or D.

Answer: A) offline or in the manager, not in the same inbox only

Lose the phone, keep the account.

46. A SIM-swap attack tries to

Tap A, B, C or D.

Answer: D) steal your number so SMS codes arrive to the thief

App or hardware 2FA resists this better than SMS.

47. Shoulder surfing is

Tap A, B, C or D.

Answer: A) watching you type a PIN or password in public

Cup the screen on trains.

48. Software updates matter because

Tap A, B, C or D.

Answer: C) they close holes attackers already know

Turn on auto-update when you can.

49. A hardware security key is

Tap A, B, C or D.

Answer: B) a physical second factor that phishing sites cannot easily fake

It is among the strongest 2FA options.

50. Security questions such as first pet are weak if

Tap A, B, C or D.

Answer: C) the answer is on social media

Better: a random string, not a real fact.

51. On a public library PC, avoid

Tap A, B, C or D.

Answer: D) staying logged into email or banking

Log out and clear if you must use it.

52. Unknown USB sticks can

Tap A, B, C or D.

Answer: A) carry malware; do not plug them into your only PC

Hand them to IT if at work.

53. Oversharing your holiday dates and home address

Tap A, B, C or D.

Answer: D) helps thieves plan

Post photos after you are home.

54. A fake app-store listing can

Tap A, B, C or D.

Answer: D) steal the password you type into it

Install banks from the real store page you typed.

55. QR-code phishing sends you to

Tap A, B, C or D.

Answer: D) a lookalike site that harvests logins

Read the URL after the scan.

56. A password manager master phrase should be

Tap A, B, C or D.

Answer: B) long and not reused anywhere else

If that vault opens, everything opens.

57. Autofill on a weird lookalike domain can

Tap A, B, C or D.

Answer: A) dump a password into a fake form

Check the host name first.

58. Children accounts still need

Tap A, B, C or D.

Answer: D) unique passwords and privacy settings, not the family dog name

School portals get phished too.

59. A lock screen on a phone stops

Tap A, B, C or D.

Answer: D) a snatched device opening mail at once

Use a long passcode, not 0000.

60. Bank staff will not ask you to

Tap A, B, C or D.

Answer: B) read a one-time SMS code to them on a surprise call

Hang up and call the number on the card.

61. HTTPS on a phishing clone means

Tap A, B, C or D.

Answer: B) the fake site can still have a padlock

The padlock is not a badge of virtue.

62. After a breach email that looks official, first

Tap A, B, C or D.

Answer: A) go to the real site by typing the address, not the link

Then change that password.

63. SMS 2FA is better than nothing but weaker than

Tap A, B, C or D.

Answer: B) an authenticator app or a security key

Prefer app-based codes when the site offers them.

64. Writing passwords on paper can be OK if

Tap A, B, C or D.

Answer: A) the paper is stored privately, not on the monitor

A manager is still easier at scale.

65. A VPN on cafe Wi-Fi helps

Tap A, B, C or D.

Answer: A) stop casual snooping of your traffic; it does not make a fake site real

Still check domains.

66. Social engineering is

Tap A, B, C or D.

Answer: D) tricking a human instead of breaking encryption

Help-desk scams are this.

67. Password hints that say daughter + year

Tap A, B, C or D.

Answer: C) are easy for anyone who knows you

Skip hints or make them nonsense.

68. Browser saved passwords need

Tap A, B, C or D.

Answer: D) a device login that is not blank

Share the laptop, share the vault.

69. Firmware and router default logins should be

Tap A, B, C or D.

Answer: C) changed from admin/admin

Neighbour attacks start there.

70. A breach of a site you used once still means

Tap A, B, C or D.

Answer: C) change that password and any reuse of it

Old forums still leak.

71. Two-factor prompt fatigue (many unexpected pushes) can be

Tap A, B, C or D.

Answer: D) an attacker trying to make you tap Yes

Deny and change the password on a safe device.

72. Incognito mode does not

Tap A, B, C or D.

Answer: D) hide you from the website or your ISP

It is not invisibility.

73. A strong unique email password matters most because

Tap A, B, C or D.

Answer: D) reset links for other sites land there

Protect the mailbox first.

74. Public charging cables or kiosks can

Tap A, B, C or D.

Answer: D) carry juice-jacking risk; use your own brick

A power bank you own is safer.

75. Work documents on a personal free app can

Tap A, B, C or D.

Answer: C) break company policy and leak data

Use the tools IT named.

76. A password of four digits for a long-life email is

Tap A, B, C or D.

Answer: C) far too small a space to guess

PINs are for short local locks, not mail.

77. If a prize wants your password to claim it

Tap A, B, C or D.

Answer: B) it is not a prize

No legitimate lottery needs your bank login.

78. Turning on login alerts (new device mail) helps you

Tap A, B, C or D.

Answer: C) spot a takeover early

Act the same day you see a city you were not in.

79. Sharing a Netflix-style password is a milder risk than sharing

Tap A, B, C or D.

Answer: C) the email that resets your bank

Still against many terms, and reuse spreads.

80. A child using a parent email as the recovery address means

Tap A, B, C or D.

Answer: B) the parent mailbox is now a master key

Protect that parent mailbox.

81. Downloading cracks or free office keys is

Tap A, B, C or D.

Answer: B) a common malware path

Pay or use real free software.

82. A lookalike domain (rn instead of m) is

Tap A, B, C or D.

Answer: C) a classic phishing trick

Read slowly before you type a password.

83. Backups matter in safety because

Tap A, B, C or D.

Answer: D) ransomware and lockouts happen

An offline copy survives a hijacked cloud.

84. The safest habit is

Tap A, B, C or D.

Answer: B) unique long secrets plus 2FA plus a sceptical click finger

No single tip replaces the set.

85. The official source for “password and online safety” (learn desk, item 1) is

Tap A, B, C or D.

Answer: D) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

86. The official source for “password and online safety” (learn desk, item 2) is

Tap A, B, C or D.

Answer: B) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

87. The official source for “password and online safety” (learn desk, item 3) is

Tap A, B, C or D.

Answer: A) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

88. The official source for “password and online safety” (learn desk, item 4) is

Tap A, B, C or D.

Answer: B) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

89. The official source for “password and online safety” (learn desk, item 5) is

Tap A, B, C or D.

Answer: A) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

90. The official source for “password and online safety” (learn desk, item 6) is

Tap A, B, C or D.

Answer: C) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

91. The official source for “password and online safety” (learn desk, item 7) is

Tap A, B, C or D.

Answer: D) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

92. The official source for “password and online safety” (learn desk, item 8) is

Tap A, B, C or D.

Answer: A) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

93. The official source for “password and online safety” (learn desk, item 9) is

Tap A, B, C or D.

Answer: B) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

94. The official source for “password and online safety” (learn desk, item 10) is

Tap A, B, C or D.

Answer: A) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

95. The official source for “password and online safety” (learn desk, item 11) is

Tap A, B, C or D.

Answer: B) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

96. The official source for “password and online safety” (learn desk, item 12) is

Tap A, B, C or D.

Answer: D) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

97. The official source for “password and online safety” (learn desk, item 13) is

Tap A, B, C or D.

Answer: C) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

98. The official source for “password and online safety” (learn desk, item 14) is

Tap A, B, C or D.

Answer: D) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

99. The official source for “password and online safety” (learn desk, item 15) is

Tap A, B, C or D.

Answer: C) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

100. The official source for “password and online safety” (learn desk, item 16) is

Tap A, B, C or D.

Answer: A) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

Read next