Skip to main content
 
SEC

Welcome to the Security Education Companion! SEC is a resource for people teaching digital security to their friends and neighbors.

If you are new to digital security, want tutorials for privacy-protecting tools, or want translated guides in 11 languages, head to Surveillance Self-Defense (SSD).

February 20, 2018

We are iterating on these resources, based on testing with participant in workshops, feedback from beginner teachers, and advice from digital security practitioners.

Check back for updates!

NEW: We added An Overview of Web Browsing Security to Security Education 101.

Lessons

Putting together a lesson plan for a digital security workshop? Check out our beginner-friendly lesson modules.

Social media

Locking Down Social Media

Duration: 1 hour
Beginning
Passwords

Passwords

Duration: 1 hour
Beginning
Phishing

Phishing and Malware

Duration: 1 hour
Beginning

Security News

Want to stay up-to-date with security news? Check out our curated posts from EFF's Deeplinks blog.

The Revolution and Slack

Slack 1

UPDATE (2/16/18): We have corrected this post to more accurately reflect the limits of Slack's encryption of user data at rest. We have also clarified that granular retention settings are only available on paid Slack workspaces.

The revolution will not be televised, but it may be hosted on Slack. Community groups, activists, and workers in the United States are increasingly gravitating toward the popular collaboration tool to communicate and coordinate efforts. But many...

Read More

Let's Encrypt Hits 50 Million Active Certificates and Counting

In yet another milestone on the path to encrypting the web, Let’s Encrypt has now issued over 50 million active certificates. Depending on your definition of “website,” this suggests that Let’s Encrypt is protecting between about 23 million and 66 million websites with HTTPS (more on that below). Whatever the number, it’s growing every day as more and more webmasters and hosting providers use Let’s Encrypt to provide HTTPS on their websites by default.

Read More

How to Assess a Vendor's Data Security

Icon security 2

Perhaps you’re an office manager tasked with setting up a new email system for your nonprofit, or maybe you’re a legal secretary for a small firm and you’ve been asked to choose an app for scanning sensitive documents: you might be wondering how you can even begin to assess a tool as “safe enough to use.” This post will help you think about how to approach the problem and select the right vendor.

As every organization has unique circumstances and needs, we can’t provide definitive...

Read More