Phishing
A deceptive message, page or prompt designed to make a person reveal credentials, approve access, send money or open harmful content.
The useful mental model.
Start with the part that changes what you actually do or expect when you meet this concept in everyday digital life.
What it protects
Understand which layer this control actually protects: the account, the device, the browser session, a permission, or the network.
What it does not mean
Digital security features are easy to overestimate. The useful question is where the protection stops and which risks remain outside it.
What connects to this?
Digital life is a system. Follow the neighboring identity, data, design, security or business layer instead of stopping at one definition.
Password
A secret used to prove control of an account, most safely treated as unique to that account rather than reused across services.
Understand it →authentication conceptPasskey
A sign-in credential based on public-key cryptography that lets a device prove account access without sending a reusable password to the service.
Understand it →security threatQR Code Scam
A scam that uses a QR code to hide or simplify a destination, making it easy to send someone to a deceptive website or payment request.
Understand it →security threatSocial Engineering
Manipulating people rather than directly breaking technical controls, often by exploiting trust, urgency, fear or routine.
Understand it →Check the underlying references.
G7 prioritizes primary technical documentation, public-interest institutions and strong research. Product-specific behavior can change, so current service documentation remains important.