Websites, secure connections and online accounts
The web can feel invisible because a page appears with a tap. A few basic ideas help you navigate confidently, recognise suspicious destinations and protect your online identity.
How a website reaches your browser
A web browser is an application that requests and displays web pages. When you enter a website address, the browser uses the domain name to locate the relevant internet service, sends a request and receives resources such as page structure, styles, images and scripts.
Read domain names carefully. A misleading address may imitate a familiar organisation while using a different domain. A brand name appearing somewhere inside a long address does not make that address official.
What HTTPS does—and does not—mean
HTTPS protects data in transit between your browser and a website using encryption. The browser checks the site's certificate for the domain shown. This helps protect the connection, but it does not prove that a website is honest, accurate or safe to use. Fraudulent websites can also use HTTPS.
For important services, navigate using a saved official bookmark or an address you have independently verified rather than a link in an unexpected message. Search results and sponsored placements are not endorsements; inspect the destination before sharing information.
Your digital identity is distributed
An online account may contain contact details, messages, files, preferences and purchase history. Your digital identity is therefore spread across many services, not held in one place. Supply optional personal details only when there is a clear reason.
Use a unique password for each important account. A password manager can help create and store strong credentials. Enable multi-factor authentication where available, and never share one-time codes or approve a sign-in prompt you did not initiate.
Inspect an account and its website
- Open a service using its official app or a trusted bookmark.
- Identify the domain shown in the browser and confirm the connection uses HTTPS.
- Review the account's active sessions and connected applications.
- Check whether a stronger sign-in method is available.
What does HTTPS tell you?
HTTPS protects the connection and validates the certificate for the domain. It does not certify the site's intentions or the accuracy of its content.