Stay Safe Online

Strong passwords

Most accounts are hacked because of weak or reused passwords.

• Use a long passphrase: Jollof-Rice-At-Eight-Tonight! is long and easy to remember, and far stronger than Tunde1234.
• Never reuse the same password on important accounts. If one site is hacked, attackers try it everywhere.
• Use a password manager such as Bitwarden (free) or the one built into Chrome or your phone to remember them for you.

Turn on two-step verification

Two-step verification (2SV or 2FA) asks for a code from your phone as well as your password. Even if someone steals your password, they can't get in.

Turn it on for your email first (email resets every other account), then WhatsApp, Instagram, LinkedIn and your bank app.

Spot phishing

Phishing is a fake message that tries to get your password, money or personal details. Warning signs:

• Urgency or threats: "Your account will be closed in 24 hours."
• Too good to be true: "You've won a scholarship! Pay ₦5,000 to process it."
• Odd links: hover over (or long-press) a link to see where it really goes. unilag-portal.xyz isn't your school.
• Requests for codes, PINs or passwords.
• Messages from friends asking for money out of the blue. Their account may be hacked. Call them to check.

When in doubt, don't click. Go to the website yourself or contact the organisation using details you already trust.

Common scams targeting students

• Fake scholarships or admission offers that ask for a fee.
• Job offers that ask you to pay for training, a uniform or a "registration fee".
• Investment schemes promising big, fast returns.
• Fake accommodation listings that want a deposit before you've seen the room.

Your digital footprint

Everything you post can be seen by future employers and scholarship panels.

• Search your own name on Google and see what comes up.
• Review old posts and privacy settings on each social account.
• Don't post your home address, phone number, exam number or travel plans publicly.

Try it

1. Turn on two-step verification for your main email account.
2. Change one reused password to a long passphrase.
3. Search your name on Google and review your social media privacy settings.
4. Find one suspicious message in your inbox or SMS and list the warning signs in it.