English how-to · updated 2026

Passwords and online safety

A security search parents and students make after every breach headline. This page has 100 important questions and answers. Original explainer for daily search — not a government login or live tracker.

A strong password is long and unique — a passphrase beats “Summer2026!”. Use a password manager so you are not recycling the same string on email, banking, and games. Turn on two-factor authentication (2FA).

Nobody from your bank DMs you for the SMS code. Phishing links copy real logos. If a prize wants your password, it is not a prize.

100 important questions. Quick 10 is a random set; Full set plays every question.

100 questions and answers

Each item is a 4-option MCQ. Open a question, tap A–D. Green is correct, red is wrong. Original explainers — not copied match reports.

1. A password manager master phrase should be

Tap A, B, C or D.

Answer: B) long and not reused anywhere else

If that vault opens, everything opens.

2. Autofill on a weird lookalike domain can

Tap A, B, C or D.

Answer: A) dump a password into a fake form

Check the host name first.

3. Children accounts still need

Tap A, B, C or D.

Answer: D) unique passwords and privacy settings, not the family dog name

School portals get phished too.

4. A lock screen on a phone stops

Tap A, B, C or D.

Answer: D) a snatched device opening mail at once

Use a long passcode, not 0000.

5. Bank staff will not ask you to

Tap A, B, C or D.

Answer: B) read a one-time SMS code to them on a surprise call

Hang up and call the number on the card.

6. HTTPS on a phishing clone means

Tap A, B, C or D.

Answer: B) the fake site can still have a padlock

The padlock is not a badge of virtue.

7. After a breach email that looks official, first

Tap A, B, C or D.

Answer: A) go to the real site by typing the address, not the link

Then change that password.

8. SMS 2FA is better than nothing but weaker than

Tap A, B, C or D.

Answer: B) an authenticator app or a security key

Prefer app-based codes when the site offers them.

9. Writing passwords on paper can be OK if

Tap A, B, C or D.

Answer: A) the paper is stored privately, not on the monitor

A manager is still easier at scale.

10. A VPN on cafe Wi-Fi helps

Tap A, B, C or D.

Answer: A) stop casual snooping of your traffic; it does not make a fake site real

Still check domains.

11. Social engineering is

Tap A, B, C or D.

Answer: D) tricking a human instead of breaking encryption

Help-desk scams are this.

12. Password hints that say daughter + year

Tap A, B, C or D.

Answer: C) are easy for anyone who knows you

Skip hints or make them nonsense.

13. Browser saved passwords need

Tap A, B, C or D.

Answer: D) a device login that is not blank

Share the laptop, share the vault.

14. Firmware and router default logins should be

Tap A, B, C or D.

Answer: C) changed from admin/admin

Neighbour attacks start there.

15. A breach of a site you used once still means

Tap A, B, C or D.

Answer: C) change that password and any reuse of it

Old forums still leak.

16. Two-factor prompt fatigue (many unexpected pushes) can be

Tap A, B, C or D.

Answer: D) an attacker trying to make you tap Yes

Deny and change the password on a safe device.

17. Incognito mode does not

Tap A, B, C or D.

Answer: D) hide you from the website or your ISP

It is not invisibility.

18. A strong unique email password matters most because

Tap A, B, C or D.

Answer: D) reset links for other sites land there

Protect the mailbox first.

19. Public charging cables or kiosks can

Tap A, B, C or D.

Answer: D) carry juice-jacking risk; use your own brick

A power bank you own is safer.

20. Work documents on a personal free app can

Tap A, B, C or D.

Answer: C) break company policy and leak data

Use the tools IT named.

21. A password of four digits for a long-life email is

Tap A, B, C or D.

Answer: C) far too small a space to guess

PINs are for short local locks, not mail.

22. If a prize wants your password to claim it

Tap A, B, C or D.

Answer: B) it is not a prize

No legitimate lottery needs your bank login.

23. Turning on login alerts (new device mail) helps you

Tap A, B, C or D.

Answer: C) spot a takeover early

Act the same day you see a city you were not in.

24. Sharing a Netflix-style password is a milder risk than sharing

Tap A, B, C or D.

Answer: C) the email that resets your bank

Still against many terms, and reuse spreads.

25. A child using a parent email as the recovery address means

Tap A, B, C or D.

Answer: B) the parent mailbox is now a master key

Protect that parent mailbox.

26. Downloading cracks or free office keys is

Tap A, B, C or D.

Answer: B) a common malware path

Pay or use real free software.

27. A lookalike domain (rn instead of m) is

Tap A, B, C or D.

Answer: C) a classic phishing trick

Read slowly before you type a password.

28. Backups matter in safety because

Tap A, B, C or D.

Answer: D) ransomware and lockouts happen

An offline copy survives a hijacked cloud.

29. The safest habit is

Tap A, B, C or D.

Answer: B) unique long secrets plus 2FA plus a sceptical click finger

No single tip replaces the set.

30. The official source for “password and online safety” (learn desk, item 1) is

Tap A, B, C or D.

Answer: D) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

31. The official source for “password and online safety” (learn desk, item 2) is

Tap A, B, C or D.

Answer: B) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

32. The official source for “password and online safety” (learn desk, item 3) is

Tap A, B, C or D.

Answer: A) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

33. The official source for “password and online safety” (learn desk, item 4) is

Tap A, B, C or D.

Answer: B) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

34. The official source for “password and online safety” (learn desk, item 5) is

Tap A, B, C or D.

Answer: A) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

35. The official source for “password and online safety” (learn desk, item 6) is

Tap A, B, C or D.

Answer: C) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

36. The official source for “password and online safety” (learn desk, item 7) is

Tap A, B, C or D.

Answer: D) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

37. The official source for “password and online safety” (learn desk, item 8) is

Tap A, B, C or D.

Answer: A) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

38. The official source for “password and online safety” (learn desk, item 9) is

Tap A, B, C or D.

Answer: B) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

39. The official source for “password and online safety” (learn desk, item 10) is

Tap A, B, C or D.

Answer: A) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

40. The official source for “password and online safety” (learn desk, item 11) is

Tap A, B, C or D.

Answer: B) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

41. The official source for “password and online safety” (learn desk, item 12) is

Tap A, B, C or D.

Answer: D) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

42. The official source for “password and online safety” (learn desk, item 13) is

Tap A, B, C or D.

Answer: C) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

43. The official source for “password and online safety” (learn desk, item 14) is

Tap A, B, C or D.

Answer: D) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

44. The official source for “password and online safety” (learn desk, item 15) is

Tap A, B, C or D.

Answer: C) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

45. The official source for “password and online safety” (learn desk, item 16) is

Tap A, B, C or D.

Answer: A) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

46. The official source for “password and online safety” (learn desk, item 17) is

Tap A, B, C or D.

Answer: B) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

47. The official source for “password and online safety” (learn desk, item 18) is

Tap A, B, C or D.

Answer: C) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

48. The official source for “password and online safety” (learn desk, item 19) is

Tap A, B, C or D.

Answer: D) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

49. The official source for “password and online safety” (learn desk, item 20) is

Tap A, B, C or D.

Answer: D) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

50. The official source for “password and online safety” (learn desk, item 21) is

Tap A, B, C or D.

Answer: C) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

51. The official source for “password and online safety” (learn desk, item 22) is

Tap A, B, C or D.

Answer: A) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

52. The official source for “password and online safety” (learn desk, item 23) is

Tap A, B, C or D.

Answer: B) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

53. The official source for “password and online safety” (learn desk, item 24) is

Tap A, B, C or D.

Answer: A) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

54. The official source for “password and online safety” (learn desk, item 25) is

Tap A, B, C or D.

Answer: B) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

55. The official source for “password and online safety” (learn desk, item 26) is

Tap A, B, C or D.

Answer: D) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

56. The official source for “password and online safety” (learn desk, item 27) is

Tap A, B, C or D.

Answer: C) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

57. The official source for “password and online safety” (learn desk, item 28) is

Tap A, B, C or D.

Answer: B) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

58. The official source for “password and online safety” (learn desk, item 29) is

Tap A, B, C or D.

Answer: A) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

59. The official source for “password and online safety” (learn desk, item 30) is

Tap A, B, C or D.

Answer: B) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

60. The official source for “password and online safety” (learn desk, item 31) is

Tap A, B, C or D.

Answer: A) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

61. The official source for “password and online safety” (learn desk, item 32) is

Tap A, B, C or D.

Answer: C) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

62. The official source for “password and online safety” (learn desk, item 33) is

Tap A, B, C or D.

Answer: D) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

63. The official source for “password and online safety” (learn desk, item 34) is

Tap A, B, C or D.

Answer: C) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

64. The official source for “password and online safety” (learn desk, item 35) is

Tap A, B, C or D.

Answer: D) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

65. The official source for “password and online safety” (learn desk, item 36) is

Tap A, B, C or D.

Answer: B) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

66. The official source for “password and online safety” (learn desk, item 37) is

Tap A, B, C or D.

Answer: A) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

67. The official source for “password and online safety” (learn desk, item 38) is

Tap A, B, C or D.

Answer: D) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

68. The official source for “password and online safety” (learn desk, item 39) is

Tap A, B, C or D.

Answer: C) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

69. The official source for “password and online safety” (learn desk, item 40) is

Tap A, B, C or D.

Answer: B) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

70. The official source for “password and online safety” (learn desk, item 41) is

Tap A, B, C or D.

Answer: A) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

71. The official source for “password and online safety” (learn desk, item 42) is

Tap A, B, C or D.

Answer: C) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

72. The official source for “password and online safety” (learn desk, item 43) is

Tap A, B, C or D.

Answer: D) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

73. The official source for “password and online safety” (learn desk, item 44) is

Tap A, B, C or D.

Answer: C) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

74. The official source for “password and online safety” (learn desk, item 45) is

Tap A, B, C or D.

Answer: D) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

75. The official source for “password and online safety” (learn desk, item 46) is

Tap A, B, C or D.

Answer: B) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

76. The official source for “password and online safety” (learn desk, item 47) is

Tap A, B, C or D.

Answer: A) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

77. The official source for “password and online safety” (learn desk, item 48) is

Tap A, B, C or D.

Answer: D) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

78. The official source for “password and online safety” (learn desk, item 49) is

Tap A, B, C or D.

Answer: C) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

79. The official source for “password and online safety” (learn desk, item 50) is

Tap A, B, C or D.

Answer: D) the authority or standard named on this page’s explainer

GKSchools English practice is original — not an official script.

80. A good password is

Tap A, B, C or D.

Answer: C) long, unique, and not reused

Managers generate and store them.

81. 2FA means

Tap A, B, C or D.

Answer: A) a second check (app, key, or code) after the password

Authenticator apps beat SMS when you can use them.

82. A phishing email tries to

Tap A, B, C or D.

Answer: B) trick you into giving a password or clicking a fake site

Check the real domain, not the logo.

83. If a site is breached, you should

Tap A, B, C or D.

Answer: C) change that password and any reuse of it

Have I Been Pwned-style checks exist.

84. Public Wi-Fi is riskier for

Tap A, B, C or D.

Answer: D) logging into email and banking without a VPN/care

Use the phone network for money if unsure.

85. A password manager is

Tap A, B, C or D.

Answer: B) an encrypted vault for unique passwords

Protect it with a long master passphrase.

86. Never share

Tap A, B, C or D.

Answer: B) one-time codes or your 2FA prompts

Scammers sit on the phone and ask you to read the SMS.

87. HTTPS in the padlock means

Tap A, B, C or D.

Answer: B) the link to that site is encrypted — not that the site is honest

Still check you are on the real bank domain.

88. Length in a passphrase usually beats

Tap A, B, C or D.

Answer: A) a short mix of symbols you will reuse

Four rare words can be stronger than P@ss1.

89. A unique password per important site stops

Tap A, B, C or D.

Answer: A) one breach opening your email and bank together

Reuse is the silent failure.

90. Store recovery codes for 2FA

Tap A, B, C or D.

Answer: A) offline or in the manager, not in the same inbox only

Lose the phone, keep the account.

91. A SIM-swap attack tries to

Tap A, B, C or D.

Answer: D) steal your number so SMS codes arrive to the thief

App or hardware 2FA resists this better than SMS.

92. Shoulder surfing is

Tap A, B, C or D.

Answer: A) watching you type a PIN or password in public

Cup the screen on trains.

93. Software updates matter because

Tap A, B, C or D.

Answer: C) they close holes attackers already know

Turn on auto-update when you can.

94. A hardware security key is

Tap A, B, C or D.

Answer: B) a physical second factor that phishing sites cannot easily fake

It is among the strongest 2FA options.

95. Security questions such as first pet are weak if

Tap A, B, C or D.

Answer: C) the answer is on social media

Better: a random string, not a real fact.

96. On a public library PC, avoid

Tap A, B, C or D.

Answer: D) staying logged into email or banking

Log out and clear if you must use it.

97. Unknown USB sticks can

Tap A, B, C or D.

Answer: A) carry malware; do not plug them into your only PC

Hand them to IT if at work.

98. Oversharing your holiday dates and home address

Tap A, B, C or D.

Answer: D) helps thieves plan

Post photos after you are home.

99. A fake app-store listing can

Tap A, B, C or D.

Answer: D) steal the password you type into it

Install banks from the real store page you typed.

100. QR-code phishing sends you to

Tap A, B, C or D.

Answer: D) a lookalike site that harvests logins

Read the URL after the scan.

Read next