Writing

Articles

Straight answers to the questions I actually get asked, written for people who don't work in security. No jargon left unexplained, no scare tactics, and no pretending something is simple when it isn't.

Scams 27 August 2026

How to tell if an email is a scam

The advice you've been given — check for typos, hover over links — is incomplete and occasionally wrong. Here's what I actually look at, in the order I look at it.

9 min read

What's coming

Roughly in the order I plan to write them. Sign up below if you'd rather not check back.

Do you actually need a password manager?
What to do first if you've clicked something you shouldn't have
Two-factor authentication: which type, and why it matters
Why "my account was hacked" usually isn't what happened
Reading a data breach notification without panicking

Stay in the loop

Occasional updates when there's something genuinely worth reading. That's it.

Your email address and the date you gave it — that's everything stored, and it's only ever used to send you these updates. Never shared, never sold. Unsubscribe any time by replying or emailing me. Full privacy policy.