Cybersecurity has its own language, and some of the words can sound much more complicated than they really are. Terms like phishing, encryption, ransomware, authentication, and zero-day vulnerability often appear in news stories, security warnings, banking messages, and workplace emails. This cybersecurity glossary for beginners explains the most important terms in simple English so you can understand what they mean without needing a technical background.
You do not need to memorize every definition. Think of this page as a reference you can return to whenever you see an unfamiliar security term. Understanding these basic ideas makes it easier to recognize online threats, make safer decisions, and understand the security tools you already use every day.
A
Antivirus Software
Antivirus software is a program that looks for harmful software on your computer or phone and tries to block or remove it. Think of it like a security guard checking files and programs before they are allowed inside your device. Modern antivirus tools can also watch for suspicious behavior, not just known viruses.
Authentication
Authentication is the process of proving that you really are who you claim to be. Entering a password, using your fingerprint, scanning your face, or typing a security code are all forms of authentication. It is similar to showing identification before being allowed into a secure building.
Authorization
Authorization decides what you are allowed to do after your identity has been confirmed. For example, an employee may be allowed to read a company file but not delete it. Authentication asks, “Who are you?” while authorization asks, “What are you allowed to access?”
B
Backdoor
A backdoor is a hidden way to enter a computer, app, or network without using the normal login process. Imagine a building with a secret door that bypasses the security desk at the front entrance. Criminals may create backdoors after breaking into a system so they can return later without being noticed.
Botnet
A botnet is a large group of infected computers, phones, routers, or other devices that criminals control remotely. The owners of the devices may not even know their devices are being used. A criminal can command thousands of these devices at the same time to send spam, attack websites, or spread more harmful software.
Brute Force Attack
A brute force attack happens when someone tries many possible passwords until one works. It is like trying every key on a huge keyring until one finally opens the door. Long, unique passwords and login limits make this kind of attack much harder.
C
CAPTCHA
A CAPTCHA is a test websites use to check whether a visitor is probably a real person instead of an automated program. You may be asked to identify pictures, click a checkbox, or complete another simple task. These tests help reduce fake account creation, automated spam, and some types of online abuse.
Cookie
A cookie is a small piece of information a website saves in your browser. Cookies can remember useful things such as whether you are signed in, what is in your shopping cart, or your language preference. Some cookies are also used to track your activity across websites for advertising or analytics.
Credential Stuffing
Credential stuffing happens when criminals take usernames and passwords stolen from one website and try them on many other websites. This works because many people reuse the same password for several accounts. Using a different password for every account is one of the best ways to stop this attack from succeeding.
Cryptography
Cryptography is the use of special methods to protect information so only the intended person can understand or use it. You can think of it as putting a message inside a locked box that only the correct key can open. Cryptography helps protect online banking, private messages, passwords, websites, and many other digital services.
D
Dark Web
The dark web is a part of the internet that is not normally reached through regular search engines or standard browsing. It requires special software to access and can be used for both legal privacy purposes and illegal activity. Stolen passwords, financial information, and other data from breaches are sometimes sold or shared there.
Data Breach
A data breach happens when private or confidential information is exposed to someone who should not have access to it. Imagine a company leaving a filing cabinet full of customer records unlocked and someone copying every page. A breach may expose names, passwords, addresses, payment information, medical records, or other sensitive data.
DDoS Attack (Distributed Denial of Service)
A DDoS attack tries to make a website or online service unavailable by overwhelming it with huge amounts of traffic. Imagine thousands of people crowding into the entrance of a store at the same time so real customers cannot get inside. The traffic often comes from many infected devices controlled together as a botnet.
DNS (Domain Name System)
DNS is the system that helps your device find websites by turning easy-to-remember names into the numerical addresses computers use. It works a little like the contacts list on your phone, where you choose a person's name instead of memorizing their phone number. Without DNS, using the web would be much less convenient.
E
Encryption
Encryption changes readable information into scrambled information that cannot easily be understood without the correct key. It is like locking a letter inside a box before sending it to someone. Encryption helps protect messages, banking information, stored files, passwords, and internet connections.
Endpoint Security
Endpoint security means protecting the devices people use to connect to a network, such as laptops, desktops, phones, and tablets. Each device can act like a doorway into personal or company information. Antivirus software, security updates, screen locks, and device monitoring are common parts of endpoint security.
F
Firewall
A firewall controls which network connections are allowed to enter or leave a device or network. Think of it as a security guard at a gate deciding which traffic can pass through. Firewalls help block unwanted connections while allowing normal activities such as browsing websites and checking email.
H
HTTPS
HTTPS means the connection between your browser and a website is encrypted while information travels between them. You usually see a padlock symbol or security indicator in the browser when HTTPS is being used. HTTPS protects the connection, but it does not guarantee that the website itself is honest or safe.
I
Identity Theft
Identity theft happens when someone uses another person's personal information without permission, usually for financial gain or fraud. A criminal might use stolen information to open an account, apply for credit, make purchases, or pretend to be the victim. Protecting government ID numbers, financial details, passwords, and account recovery information helps reduce the risk.
K
Keylogger
A keylogger is software or hardware that secretly records what someone types. It may capture passwords, messages, search terms, or payment information as they are entered. Some keyloggers have legitimate workplace or troubleshooting uses, but criminals can use them to steal sensitive information.
M
Malware
Malware is a general name for software created to harm, spy on, disrupt, or secretly control a device. Viruses, ransomware, spyware, worms, and some trojans are all forms of malware. The word comes from “malicious software.”
Man-in-the-Middle Attack
A man-in-the-middle attack happens when someone secretly places themselves between two parties that believe they are communicating directly. Imagine giving a private letter to a trusted messenger, but another person secretly reads or changes it before it reaches the recipient. Secure encrypted connections help make this kind of attack more difficult.
Multi-Factor Authentication (MFA)
Multi-factor authentication requires more than one type of proof before giving access to an account. For example, you may enter a password and then approve a notification on your phone. Even if someone steals your password, the second security step can make it much harder for them to sign in.
P
Password Manager
A password manager is an app that securely stores your passwords so you do not have to remember all of them. Think of it as a protected keychain for your digital keys. It can also create long, unique passwords for every account, which helps prevent password reuse.
Patch
A patch is an update designed to fix a problem in software. Many patches repair security weaknesses that criminals could otherwise use to attack a device or account. Installing operating system and app updates quickly is one of the simplest ways to improve your security.
Pharming
Pharming is an attack that secretly redirects you from the website you intended to visit to a fake website. You might type the correct address but still be sent somewhere dangerous if part of the system that directs internet traffic has been changed. The fake page may then try to steal your login information or payment details.
Phishing
Phishing is a scam where someone pretends to be a trusted company, person, or organization to trick you into giving away information or taking an unsafe action. A phishing message might pretend to come from your bank and ask you to sign in through a fake link. The safest response to an unexpected message is often to visit the real service directly instead of clicking the link.
R
Ransomware
Ransomware is harmful software that blocks access to files or systems and demands money to restore them. Modern ransomware criminals may also steal copies of data before locking the original files and threaten to publish them. Regular backups can greatly reduce the damage caused by this type of attack.
S
Social Engineering
Social engineering means manipulating a person into giving away information or performing an action that helps an attacker. Instead of breaking through computer security, the criminal tries to trick the human being. Fake support calls, urgent payment requests, and messages asking for verification codes are common examples.
Spear Phishing
Spear phishing is a more targeted form of phishing aimed at a specific person or organization. The attacker may research the victim first and include real names, job titles, projects, or coworkers in the message. Because the message feels personal and believable, it can be harder to recognize than ordinary phishing.
Spyware
Spyware is software that secretly watches what you do and collects information without your clear permission. It may track browsing, location, messages, passwords, or other activity. Keeping devices updated and avoiding unknown downloads helps reduce the risk of spyware infection.
SSL and TLS
SSL and TLS are technologies used to protect information as it travels across the internet. TLS is the modern version, although people still often use the older term SSL when talking about website security certificates. These technologies help create the encrypted connection used by HTTPS websites.
T
Trojan Horse
A trojan horse is harmful software disguised as something useful or harmless. The name comes from the ancient story of the wooden horse that secretly carried soldiers inside a protected city. A fake game, document, update, or utility may appear legitimate but install harmful software after you open it.
Two-Factor Authentication (2FA)
Two-factor authentication is a type of multi-factor authentication that uses exactly two security steps. You might enter your password and then provide a code from an authenticator app or approve a login on your phone. This means a stolen password alone is usually not enough to enter the account.
V
VPN (Virtual Private Network)
A VPN creates an encrypted connection between your device and a VPN server before your traffic continues to the internet. Think of it as using a private tunnel while everyone else travels on an open highway. A VPN can improve privacy on shared networks and hide your normal internet address from websites, but it does not make you completely anonymous.
Virus
A computer virus is a type of harmful software that attaches itself to files or programs and can spread when those files are opened or shared. It is called a virus because it can copy itself in a way that resembles how biological viruses spread between hosts. Not all malware is a virus, even though people often use the words as if they mean the same thing.
Vulnerability
A vulnerability is a weakness in software, hardware, settings, or security practices that could be used by an attacker. Think of it like a broken lock on a door that still looks normal from the outside. Software updates often repair vulnerabilities before criminals can take advantage of them.
W
Whaling
Whaling is a phishing attack aimed at senior executives, business owners, or other important people inside an organization. Attackers may pretend to be lawyers, investors, suppliers, or other executives and ask for payments or confidential information. These attacks are often carefully researched because the potential reward can be much larger.
Worm
A worm is harmful software that can copy itself and spread between computers or networks without someone manually sending each copy. Imagine an infection moving automatically from house to house whenever it finds an unlocked door. Worms can spread very quickly when many devices have the same unpatched security weakness.
Z
Zero-Day Vulnerability
A zero-day vulnerability is a software weakness that attackers may know about before the software maker has released a fix. The name means defenders have had zero days to prepare a patch when the weakness becomes known or starts being used. Keeping automatic updates enabled helps you receive the fix quickly once one becomes available.
Zero Trust Security
Zero Trust is a security approach based on the idea that nobody should automatically be trusted just because they are already inside a network. Users and devices may need to prove who they are and have their access checked repeatedly. It is similar to a secure building where having entered the front door does not automatically give you access to every room.
How to Use This Glossary
You do not need to learn all of these cybersecurity terms in one sitting. Bookmark this glossary and return whenever you see a word you do not recognize in a security alert, news story, bank message, workplace email, or software setting. Over time, terms such as phishing, encryption, malware, MFA, and data breach will begin to feel familiar instead of confusing.
Understanding cybersecurity language is one of the first steps toward protecting yourself online. When you understand what a threat is, it becomes easier to recognize warning signs and choose the right response. You do not need to become a cybersecurity expert; learning a few basic concepts can already help you make much safer decisions with your accounts, devices, personal information, and money.