Security, Privacy & Access Tools Used-For Guides

What Security, Privacy & Access Tools covers

This section covers the technical protections that sit behind everyday computing: encryption including AES, firewalls, and related privacy and access tools.

These are the things that get named in security advice and news coverage without ever being explained. The guides here define them in plain terms and, importantly, are honest about what each one does not do — because overestimating them is how people end up less safe rather than more.

Encryption scrambles data so that only someone with the key can read it. It protects data in two situations: while it travels across a network, and while it sits stored on a device or server. AES is the widely used standard doing that work in most modern systems, from HTTPS connections to encrypted phone storage.

What encryption does not do is protect you from being persuaded. If you type your password into a convincing fake page, the connection to that page may well be encrypted — encryption faithfully protects the delivery of your credentials to a criminal. This is why the overwhelming majority of real-world losses come from phishing rather than from broken cryptography.

A firewall controls which network traffic is allowed in and out. It is a gatekeeper for connections, not an inspector of intent, and it will not stop you downloading something harmful or entering details on a fraudulent site.

Browse individual used-for guides

Most searched questions in this topic

How the guides in this section differ

Protecting data or controlling access. Encryption makes data unreadable without a key. A firewall decides what may connect. Different jobs, often confused.

In transit or at rest. Encryption in transit protects data crossing a network — the padlock in your browser. Encryption at rest protects stored data if a device is lost or a server is breached. A service can do one and not the other.

End-to-end or not. In end-to-end encryption only the participants can read the content; the provider cannot. In transport encryption the provider can. This distinction decides what a company can be compelled to hand over, and it varies by product and by mode.

Tool	What it protects against	What it does not stop
Encryption in transit	Interception on the network	A fake site you willingly use
Encryption at rest	A lost device or breached storage	Someone who has your password
End-to-end encryption	The provider reading content	Screenshots by the other participant
Firewall	Unwanted network connections	Phishing, downloads you approve
Device passcode	Physical access to your phone	Remote account compromise

Safety, accuracy and next-step checks

These guides follow official documentation and reputable security guidance.

Points worth carrying:

Encryption does not protect you from deception. A phishing site can have a perfectly valid certificate and a padlock. The padlock means the connection is private, not that the site is honest.
The padlock is not a trust signal. Check the domain name itself, character by character where it matters. Look-alike domains are the standard technique.
Turn on device encryption, which is default on modern phones and available on computers. It is what makes a lost device a nuisance rather than a data breach.
Keep the firewall enabled. The built-in firewall on Windows and macOS is on by default; disabling it to fix a connection problem and forgetting is a common mistake.
Update everything. Most real compromises exploit known flaws that were patched months earlier.
A password manager does more for your security than any tool here, because it makes unique passwords practical, and reuse is what turns one breach into many.
Back up before you encrypt. Losing an encryption key or passphrase means losing the data permanently, with no recovery route.
Be sceptical of “military-grade encryption” marketing. AES is standard and widely used; the phrase signals marketing rather than a meaningful difference.

If you take one practical step from this section, make it a password manager with two-factor authentication on the account itself. Encryption and firewalls are working quietly in the background already, on every modern device, and there is little you need to do about them beyond leaving them enabled and installing updates. Password reuse is the gap that is genuinely yours to close, and it is the one that turns a single breach at a company you barely remember using into access to your email, your bank and everything those can reset.

Frequently asked questions

What is encryption used for? Making data unreadable without the key — protecting it as it crosses a network and while it is stored on a device or server.

What is AES? A widely adopted encryption standard used in most modern systems, including secure web connections and encrypted device storage.

Does a firewall stop viruses? Not directly. It controls network connections. It will not stop you downloading and running something harmful, which is what antivirus and caution are for.

If a site has a padlock, is it safe? No. The padlock means the connection is encrypted, not that the site is legitimate. Phishing sites routinely have valid certificates.

Is end-to-end encryption always on in messaging apps? No. It varies by app and sometimes by mode within an app. Check the specific product rather than assuming.