Advice and guidance

1 Download resource

Passwords & Two-Step Verification

This guide explains how to create strong, unique passwords (for example using three random words) and why you should never reuse passwords across accounts. It also introduces Two‑Step Verification (2SV) – also called Two‑Factor Authentication (2FA) – as a vital extra layer of security to protect your accounts even if your password is compromised.

In essence: choose strong and separate passwords for each account, use a password manager if needed, and enable 2SV wherever possible to significantly boost your online safety.

Related resources

DigiKnow – Practical Cyber Resilience

In 2020, Young Scot launched the Digi Know? Champions Award in collaboration with Glasgow Kelvin College. The Award helps young people build the skills and knowledge they need to protect themselves online, whilst gaining an SCQF Level 4 qualification for […]

10 Steps to Cyber Security

This guidance aims to help organisations manage their cyber security risks by breaking down the task of protecting the organisation into 10 components. It is aimed at medium to large organisations that have someone dedicated to managing the organisation’s cyber security.

Cyber Services

The Cyber and Fraud Centre -Scotland provide a comprehensive range of integrated cyber security services that help you assess, build and manage your cyber security capabilities, and respond to incidents and crises. Their services are designed to help you build […]

Active Cyber Defence

The NCSC’s Active Cyber Defence programme aims to reduce the impact of cyber attacks by providing tools and services, free at the point of use, that protect against a range of threats.

Scottish Digital Academy

Helping you to develop digital capability.

Cryptocurrency Scam Guidance

This guide offers a clear overview of how cryptocurrencies function, explains why they are attractive to fraudsters and sets out the common types of scams (such as investment schemes, imposter frauds and romance scams) that misuse crypto‑assets. It includes practical […]