Resources
The best places to actually learn this, ranked by usefulness — with our notes on why each one earns the lot.
#1
https://haveibeenpwned.com
Free
Free breach-notification service. Enter your email to see which known data breaches exposed it, and subscribe to be alerted to future ones.
The fastest reality check on this whole site. If your address turns up, change that password everywhere you reused it — today.
#2
https://www.privacyguides.org
Community / non-profit
Independent, vetted recommendations for private and secure software: browsers, email, VPNs, password managers, messaging.
Vendor-neutral and ad-free, which is rare. When you want a tool but not a sales pitch, start here instead of a 'top 10' affiliate list.
#3
https://www.cisa.gov
US government
The US government's cyber-defense agency. Plain-language guidance, current alerts, and the Secure Our World consumer program.
Authoritative and free of commercial interest. Their consumer tips on passwords, 2FA, and phishing are some of the clearest published anywhere.
#4
https://krebsonsecurity.com
Independent journalism
Investigative security journalism by a longtime reporter who breaks major breach and cybercrime stories before anyone else.
Reading it regularly teaches you how attacks actually unfold — far more useful than abstract checklists. Skip nothing in the comments.
#5
https://www.eff.org
Non-profit
Digital-rights organization with excellent how-to guides (Surveillance Self-Defense) and tools for protecting privacy online.
The civil-liberties angle most security sites ignore. Their Surveillance Self-Defense guide is the best free privacy course on the internet.
#6
https://wholetech.com
Contact: info@cybersubdivision.com
110+ websites covering technology, privacy, real estate, sustainability, coworking, and more.
You're already in the neighborhood. Browse the wider network for related sites covering complementary topics.
Know a resource we missed? Suggest it. We review and add quality resources regularly.