TechnologyThe BestieBeginner
Everyday Cybersecurity, a free technology course on Tomo

Everyday Cybersecurity

Learn to think like an attacker to protect your digital life. Master the core defensive habits that eliminate the vast majority of online threats, from credential theft to sophisticated social engineering.

Like Duolingo, but for Everyday Cybersecurity. Tomo turns the whole topic into a game you play five minutes a day, until it actually sticks.

A short one: 11 levels across 2 sections, about 22 minutes end to end, roughly 4 days at five minutes a day. It moves through Outsmarting Direct Attacks and Hardening Your Environment. It starts from scratch.

11 bite-size levelsAbout 5 minutes each

Free forever · No credit card · iPhone & Android

Cy the Cyber Cat, the guide who teaches the Everyday Cybersecurity course
Everyday Cybersecurity
with Cy the Cyber Cat
11
Levels
2
Sections
5
Min/day
What you'll learn

Key ideas in Everyday Cybersecurity

  • Attackers buy or download large databases of usernames and passwords leaked from past data breaches
  • Automated tools quickly test leaked username and password pairs across hundreds of popular websites, a process called credential stuffing
  • Reusing a password anywhere means a breach at one minor service puts your critical accounts at risk
  • Each added character dramatically multiplies the number of combinations an automated cracking program must test
  • Predictable symbol substitutions like replacing 's' with '$' or 'a' with '@' are already pre-programmed into automated cracking dictionaries
  • A long passphrase composed of several random, unrelated words creates a vast search space while remaining easy for a human to type
  • Password managers generate and securely store unique, long, random passwords for every website you use
  • Because the software fills passwords automatically, you never need to remember, see, or reuse them
  • The user only needs to memorize a single, robust master password to unlock the encrypted vault
  • Multi-factor authentication requires a second piece of evidence, such as a prompt or code on a physical device you possess
  • Even if an attacker possesses the correct password, they cannot complete the login without that second factor
  • MFA turns a stolen password from an immediate breach into an unsuccessful attempt
  • Passkeys use cryptographic keys stored locally on your device hardware rather than a shared secret stored on the website's servers
  • Because the private key stays on your device and only responds to the genuine website domain, passkeys cannot be stolen by phishing sites or server database breaches
  • Authentication is unlocked locally on your device using a fingerprint, face scan, or device PIN
  • Phishing attacks often create a false emergency, like a strict countdown or severe penalty, to rush you into reacting without checking details
Why not just Google it

You've tried the other tabs

Wikipedia

Thirty open tabs. Four facts you actually kept.

YouTube

You watched. You nodded. By Sunday it was gone.

ChatGPT

One answer, then back to scrolling.

Online courses

Eight weeks. You meant to finish. You didn't.

Tomo gives Everyday Cybersecurity the Duolingo treatment: levels, streaks, and quick quizzes that test what you just learned. That game loop is what the tabs above never had, so it's the one you actually finish.

Try a question

Here's what playing it feels like

A real question from this course. Take your best guess.

Building Stronger Passwords That Last

What happens during an attack known as credential stuffing?

Get it right to open this lesson and 10 more in the app.

Course map

How to learn Everyday Cybersecurity, step by step

Go in order. 11 short levels across 2 sections, about 22 minutes in all, five minutes a day.

  1. 1

    Outsmarting Direct Attacks

    • Hardening Your Credentials
    • Spotting Social Engineering
  2. 2

    Hardening Your Environment

    • Securing Devices and Networks
    • Containing the Blast Radius

2 sections · 4 units · 11 levels. Built to play, not to enroll.

Questions

Questions about Everyday Cybersecurity

  1. How do I learn Everyday Cybersecurity?

    Go in order: start with Outsmarting Direct Attacks, then Hardening Your Environment. On Tomo that's 11 short levels, about 22 minutes in all, played five minutes a day. Start free and play the first level in under a minute.

  2. Is there a Duolingo-style app for Everyday Cybersecurity?

    Yes. Tomo works like Duolingo: short daily lessons, streaks and quick quizzes. Everyday Cybersecurity is one of its free courses, and you can type any other topic to get a course of your own.

  3. Is the Everyday Cybersecurity course free?

    Yes. Everyday Cybersecurity is playable on Tomo's free plan, which doesn't expire. No credit card, no waitlist. Download the app and start your first lesson.

  4. How long does it take to learn Everyday Cybersecurity?

    11 levels across 2 sections, about 22 minutes of play in total. It's built for five minutes a day, so you finish it a little at a time instead of all at once.

  5. Do I need any background to start Everyday Cybersecurity?

    No. It's pitched at a beginner level, so it starts where you are and builds up. If you can tap a phone, you can start.

New

Tomo is in ChatGPT

Tomo is also a ChatGPT plugin: the same playable courses, built and played inside your chat.

Add Tomo to ChatGPT
How it's taught

You pick the voice

This course
The Bestie

Everyday Cybersecurity is taught in the Bestie style: your friend who just gets it. Want a different feel? In the app you can spin up the same topic in any of Tomo's teaching styles. Same facts, totally different vibe.

Keep going

More Technology on Tomo

Start free

Start Everyday Cybersecurity today.

Download Tomo, search Everyday Cybersecurity, and play your first lesson in under a minute.