Choose a Windows 11 backup test that proves recovery, not just copy completion
Run a small file, account and device-failure drill.
Read this guide
Resources
Understand the risk.
Know your next step.
Practical how-to guides and plain-English definitions. Find an answer, learn what matters, and put it into practice.
Put knowledge into practice.
How-to guides for the things you want to get right.
- Rebuild essential app settings on a new Windows 11 PC methodicallySeparate installer, profile, account and license for each application.
- Reset a Windows 11 PC for sale without confusing Clean data with a certified wipeBack up, remove everything, verify setup and unlink the device.
- Restore File History after the original Windows 11 PC failsRecover user documents on another PC without assuming programs were backed up.
- Encrypt a Windows 11 external backup drive without losing its recovery routeProtect portable files and prove you can unlock the copy elsewhere.
- Check OneDrive online-only files before resetting a Windows 11 PCVerify cloud copies and download what you need offline.
Security glossary
The words behind the warnings, explained simply.
Find a term by its first letter329 definitions to explore
-
A
24 definitions- Account activity auto-delete versus browser history deletion
- Different stores of history need different controls.
- Account recovery versus scam-payment recovery
- Regaining a login and retrieving money are separate workflows.
- Account takeover: what changes after someone signs in as you
- Recognize the traces an intruder may leave behind.
- Advanced Data Protection: encryption with user-owned recovery
- More iCloud categories gain end-to-end protection, with a trade-off.
- Alexa voice-purchase code versus disabling voice purchases
- A code spoken in a room does not stay secret like a device PIN.
- Allow on device versus removing an allowed threat
- An allowance changes future detection, not the trustworthiness of a file.
- Allow this time versus Allow while visiting in Chrome
- One visit and repeat visits create different permission horizons.
- Amazon device deregistration versus factory reset
- Account association and local data are two separate cleanup jobs.
- Amazon order alert versus an order in Your Orders
- The message is a claim; the account record is the first transaction check.
- Amazon seller message versus a new outside payment
- A request for extra money is not automatically part of the original checkout.
- Amazon two-step code versus a support caller's request
- A login code belongs in the sign-in page you opened yourself.
- Android Accessibility service versus an ordinary app permission
- Screen observation and interaction can reach beyond one data type.
- Android Advanced Protection versus Google Account protection
- Device settings and account enrollment can have separate lifetimes.
- Android Identity Check versus a trusted place
- The place is an approximate exception context, not a proof of identity.
- Android notification access versus permission to show notifications
- Receiving content is different from displaying your own alert.
- Android Privacy Dashboard: permission history, not a recording log
- See which app used a sensor without inferring what it captured.
- Android Private Space: a separate profile with a backup gap
- Privacy depends on its lock, account choice and data handling.
- Android Remote Lock versus Find Hub
- A quick phone-number lock is narrower than account-based recovery.
- Anyone with the link: access without a named invite
- A hard-to-guess URL is not the same as a controlled audience.
- Apple recovery contact: help recovering, not shared account access
- A chosen person can assist without knowing your password.
- Apple recovery key versus standard account recovery
- The key changes who can help when normal sign-in fails.
- Apple trusted phone number versus trusted device
- Both help verification, but they are not interchangeable.
- App password: a legacy sign-in key for one application
- Why a mail app can still access an account after you enable MFA.
- Ask to Buy request versus a universal spending lock
- A prompt governs eligible Apple-store actions, with exceptions.
-
B
9 definitions- Backup retention: how long an older copy survives
- A backup from yesterday is useful only if the needed version still exists.
- Base domain versus Host versus Exact autofill matching
- A wider match is convenient but may offer a credential in more places.
- BitLocker recovery key: the emergency unlock for an encrypted drive
- Why the key ID and a separate backup matter during a startup problem.
- Bitwarden emergency View versus Takeover access
- Both are powerful; only one changes control of the vault.
- Bitwarden password-protected export versus account-restricted export
- Two encrypted JSON files can have very different recovery value.
- Blocking a Drive sharer versus removing one shared file
- One acts on an account relationship; the other acts on an item.
- Browser extension's site access
- On click, one website and all websites are different permissions.
- Browser fingerprinting: recognition without a cookie
- Small device details can combine into a distinctive browser profile.
- Business email compromise: a real-looking request to move money
- The mail thread may be genuine while the payment change is not.
-
C
21 definitions- Calendar free-busy access versus event-details access
- Availability can be shared without exposing names, places and descriptions.
- Calendar spam report versus blocking an organizer
- One handles an event; the other can affect future contact across Google.
- Caller-ID spoofing: the displayed number can be false
- Verify a caller through a number you found yourself.
- Camera location versus Google Photos estimated location
- The coordinate source changes what an edit can mean.
- Camera viewer versus camera administrator
- Both can expose video, but their ability to change the system differs.
- Can view versus Can't download in a Teams file link
- Read access and download restrictions are not the same guarantee.
- Captive portal: a Wi-Fi gate, not a certificate of safety
- A hotel login page controls access but does not validate every site.
- Charity registration versus a verified disaster donation
- An organization record is only one part of checking the payment request.
- Checksum versus digital signature: two different file checks
- A matching hash checks sameness; a valid signature checks a signer.
- Chrome reset settings versus uninstalling unwanted software
- A fresh browser preference set cannot remove a persistent installer.
- Chrome Safety Check warning versus a system malware scan
- Browser findings are actionable but narrower than device health.
- Chrome sign-out versus deleting a local profile
- Cloud account access and local browser data are separate.
- Chrome website notification versus a real antivirus warning
- A permitted website can display an alert outside its tab.
- Clearing one site's cookies versus signing out everywhere
- The scope of local deletion determines the disruption.
- Cloud sync versus backup: why one copy can vanish everywhere
- Test whether you can restore an older independent copy.
- Communication Safety warning versus content moderation
- A protective pause is not a complete safety review.
- Compromised password warning versus confirmed account takeover
- A breach signal warrants action without proving a login happened.
- Confidential-mode expiry versus deletion of an email copy
- Removing access is not the same as recovering information already seen.
- Controlled folder access: a write barrier for chosen folders
- Understand why a legitimate app may be blocked from saving a file.
- Controlled folder access allowed app: a write permission with consequences
- The permission follows an executable, not a friendly app label.
- Credential stuffing
- Why a breach at one site can unlock a different account.
-
D
22 definitions- Dangerous download warning versus an uncommon-file warning
- The messages express different reasons to pause, not two levels of proof.
- Data breach versus data exposure: read the notice precisely
- The event, affected records and actual misuse are separate questions.
- Data export archive: a snapshot, not an ongoing backup
- Protect the download and verify what was actually included.
- Data exposed in a breach versus proven identity theft
- Exposure increases risk, while misuse is an additional observed event.
- Defender file exclusion versus process exclusion
- A process rule can cover many files that program opens.
- Deleting one Timeline visit versus deleting a day
- Choose the smallest history change that matches the problem.
- Device-based Google Maps Timeline versus an encrypted backup
- The phone record and optional recovery copy are distinct.
- Device encryption: what it protects if a laptop is lost
- Understand the benefit and the recovery-key responsibility.
- Disappearing message versus a message that cannot be copied
- Automatic removal reduces stored history, not a recipient's ability to retain content.
- Discord Authorized App versus a server bot
- Personal authorization and server installation have different owners.
- Discord backup code versus authenticator code
- One is a stored recovery fallback; the other is generated during sign-in.
- Discord Family Center activity summary versus message contents
- A contact list and call total do not reveal what was said.
- Discord login QR code versus a server invite QR code
- The destination matters more than the square pattern.
- Discord server DM permission versus friend-request permission
- A shared server and an accepted friendship are different contact paths.
- DNS over HTTPS (DoH)
- An encrypted way for a browser to look up domain names.
- Domain versus subdomain: identify the real owner of a login page
- The trusted-looking word may be part of someone else's address.
- Download restriction versus confidentiality of a readable document
- Hidden export buttons cannot stop a person from observing content.
- Dropbox disabled link versus a deleted file
- Revocation and deletion solve different problems.
- Dropbox online-only file versus an independent backup
- A space-saving setting is not a recovery strategy.
- Dropbox Rewind versus file version history
- Use the smaller recovery tool when one file changed.
- Dropbox shared link versus shared-folder membership
- Two independent paths to the same file.
- Dropbox unlink versus remote wipe
- Stopping sync is not the same as erasing an offline computer.
-
E
16 definitions- EBay checkout versus an off-eBay payment
- The payment channel determines what transaction eBay can protect.
- EBay feedback score versus proof of a safe listing
- Seller history is one signal, not a warranty.
- EBay Messages copy versus a convincing account email
- An independent inbox check defeats many spoofed notices.
- EBay Money Back Guarantee versus a seller return policy
- A seller's 'no returns' line does not settle every problem.
- Edge enhanced security Balanced versus Strict
- Both reduce browser exploit exposure; coverage and compatibility differ.
- Edge Password Monitor alert versus proof of account takeover
- A leaked credential match signals risk, not a completed login.
- Edge scareware blocker versus Microsoft Defender SmartScreen
- Behavior detection and reputation warnings cover different signals.
- Edge sign-out versus removing a local browser profile
- Stopping sync and removing local data are separate actions.
- Edge site camera permission versus Windows camera access
- The browser and operating system each have a gate.
- Edge website notification versus browser pop-up
- A permission-driven system alert can appear after the tab closes.
- Email forwarding rule: a hidden copy of future messages
- Why changing the password may not stop mail from leaving.
- Email mask versus a throwaway inbox
- A forwarding address can remain a long-term login identifier.
- Encrypted WhatsApp backup password versus the account SMS code
- These secrets answer different recovery questions.
- End-of-support router: working hardware without new fixes
- The Wi-Fi can keep working even as vulnerability risk grows.
- Equipment check job scam versus a legitimate reimbursement
- An available bank balance is not a cleared employer payment.
- Exposed password report versus confirmed account breach
- A leaked password string is evidence of risk, not an activity log for your account.
-
F
24 definitions- Facebook Page action button versus a link in a post
- Two public destinations need separate checks.
- Facebook Page full control versus partial control
- Full control includes the power to remove other managers.
- Facebook Page keyword filter versus manual comment removal
- A future pattern rule and a specific moderation action differ.
- Facebook Page recovery versus personal-account recovery
- The person and the business asset may both need securing.
- Facebook Page task access versus Facebook access
- Business tools and switching into the Page are different routes.
- Factory reset versus cloud-account release for a smart device
- A local reset and ownership transfer may be separate steps.
- Failed Windows update versus an update still pending restart
- The next action depends on the actual installation state.
- Fake-check equipment job: provisional funds are not yours
- A visible bank balance can precede a bounced check.
- Fake brand-deal file versus a genuine sponsorship brief
- The attachment's requested behavior matters more than its label.
- Fake invoice: a bill without an authorized purchase
- Check the underlying order, not the invoice's design.
- Fake toll text versus a genuine toll balance
- The debt must be checked in the agency's real account, not on the message page.
- Family location sharing versus Find My device recovery
- A family map audience and a lost-device tool can overlap.
- Family Purchase Sharing versus one person's hidden purchases
- Visibility and who pays are separate controls.
- File History Restore to: recover without overwriting today
- A safer first step for comparing two versions.
- FileVault recovery key: the unlock path that must live elsewhere
- An encryption key stored only on the locked Mac cannot help you.
- Find Hub last-known location: a clue with a timestamp
- Check when a device was seen before acting on its map pin.
- Find My Mac lock: a remote request with prerequisites
- Know what happens when the missing Mac is offline.
- Fine-grained GitHub token versus classic token
- Repository and permission limits change the blast radius.
- Firefox container versus separate browser profile
- One partitions site sessions; the other separates more browser settings.
- Firefox DNS over HTTPS Default versus Max
- Fallback improves availability; strict resolution can expose network breakage.
- Firefox Primary Password versus Mozilla account password
- One unlocks local saved logins; the other signs in to Sync.
- Firefox Strict tracking protection versus a site exception
- Global privacy and a narrow compatibility choice have different reach.
- Firewall app exception versus open port: narrow access matters
- Choose a scoped rule only when the application really needs it.
- Firmware: the software inside a router or camera
- Updates matter even when the device seems to work normally.
-
G
19 definitions- Gatekeeper on Mac: a check before downloaded software runs
- A warning asks you to verify the app, not simply bypass it.
- Gift-card payment demand: why the card number is the money
- The physical card does not protect a balance after its code is shared.
- GitHub OAuth app versus GitHub App
- Both connect services, but their permission models differ.
- GitHub push protection versus token revocation
- A blocked push prevents one exposure path; revocation kills a credential.
- GitHub recovery code versus an active signed-in session
- One is a future recovery credential; the other is present account access.
- GitHub security log versus repository audit trail
- Account events and project changes answer different questions.
- Gmail Last account activity: evidence with location limits
- Access time and type matter more than a city label alone.
- Google account recovery signal: familiar device and location
- Consistency can help Google recognize a legitimate owner.
- Google Calendar known sender versus everyone for invitations
- Automatic appearance is a policy choice, not proof an event is legitimate.
- Google Drive folder owner versus owner of files inside
- A parent ownership transfer does not automatically transfer children.
- Google Photos album link versus named invitation
- A forwarded link can widen the audience beyond the people you selected.
- Google Photos Archive versus Trash
- One is an organization view; the other begins deletion.
- Google Photos Free up space: local removal, not library deletion
- Know which copy disappears before tapping the cleanup button.
- Google Photos Locked Folder privacy versus backup
- Hiding an image locally can increase loss risk if backup is off.
- Google Photos transfer versus a tested independent backup
- A destination copy may omit context and will not follow later edits.
- Google Play Protect: an Android app warning layer
- Scanning helps, but it is not a certificate that every app is safe.
- Google Search removal versus removal from the source website
- One hides a result in Search; the other changes the page itself.
- Guest Wi-Fi: a separate name is not enough
- Check whether visitors are actually isolated from local devices.
- Guest Wi-Fi name versus actual device isolation
- A second SSID does not prove two groups cannot reach each other.
-
H
3 definitions- Hide, unsubscribe and delete a Google Calendar
- Only one of these should remove a team calendar for everyone.
- Hide My Email relay versus an account's real recovery address
- A relay masks the address a site sees but can become its login identity.
- HTTPS-Only warning versus a certificate warning in Firefox
- One concerns missing HTTPS; the other concerns trust in an HTTPS connection.
-
I
17 definitions- ICloud Private Relay versus a full-device VPN
- Their traffic coverage and trust models are different.
- IMessage Contact Key Verification versus identity proof
- Matching a cryptographic code still requires knowing whose code it is.
- Infostealer
- Malware that collects account data, often from a browser.
- InPrivate local privacy versus anonymity
- The window changes local retention, not who can observe a connection.
- Instagram backup code versus an authenticator code
- Recovery stock and rotating sign-in code have different risks.
- Instagram login activity versus a login request
- One is a session record; the other asks whether to allow a new sign-in.
- Instagram private account versus private message
- Profile visibility and conversation visibility are different controls.
- Instagram security email versus a support DM
- An in-app communication record is stronger evidence than a sender name.
- Instagram verified badge versus a legitimate offer
- Verification of an account does not verify the deal it proposes.
- Integrated TOTP versus an independent second factor
- Both add a sign-in step, but they do not share the same failure boundary.
- Internet-blocked Office macro versus Enable Editing
- Editing a document and running its code are separate decisions.
- Investment group testimonial versus independently checked evidence
- A screenshot of gains can be produced by someone selling the scheme.
- IPhone Local Network permission versus internet access
- One grant concerns nearby devices; ordinary online use may continue.
- IPhone Lockdown Mode: extra protection with feature limits
- The correct response to a specific sophisticated targeting concern.
- IPhone Lost Mode versus Activation Lock
- One marks and secures a missing device; the other blocks reactivation.
- IPhone management profile: more than a VPN label
- A profile may configure several settings and can remove them together.
- IPhone tracking permission versus app location permission
- They answer different questions about data use.
-
J
0 definitionsNo individual definitions under J yet. Choose another letter to explore more security terms.
-
K
0 definitionsNo individual definitions under K yet. Choose another letter to explore more security terms.
-
L
13 definitions- Leaked password alert versus an Edge data breach
- A password match usually originates outside the browser.
- Least privilege: give an app only the access it needs
- A practical rule for permissions, sharing and admin rights.
- Leaving Family Sharing versus deleting an Apple Account
- Group membership can change without erasing the account.
- LinkedIn active session versus an impersonating profile
- Account access and a copied identity require different fixes.
- LinkedIn public profile versus signed-in member view
- One privacy toggle addresses only part of the audience.
- LinkedIn verified job badge versus a verified offer
- The badge is a poster signal, not a promise about every request.
- Linked WhatsApp device versus a second phone number
- A companion session uses the same account; it is not a new identity.
- Live location sharing versus sending a map pin
- One grants continuing visibility; the other communicates a place once.
- Local-network website permission versus a router firewall rule
- A browser choice controls a web origin, not every route into the device.
- Location sharing label versus actual Android location permission
- A developer statement and a device control answer different questions.
- Locked iPhone app versus hidden iPhone app
- One requires authentication; the other also changes where the icon appears.
- Locked Private Browsing versus anonymous browsing
- A local screen lock does not hide network or account identity.
- Lookalike domain: a familiar name with a hidden difference
- A swapped character or extra word can point to another site.
-
M
12 definitions- Mac app notarization: a known-malware check, not a guarantee
- Read the claim precisely before trusting an installer.
- Mac configuration profile: settings delivered as one package
- Useful for managed devices; suspicious when unexpected on a personal Mac.
- Mailbox delegate: another person with controlled inbox access
- Delegation is more than sharing a folder or forwarding a copy.
- Mail tracking pixel versus an email link click
- Remote image loading and voluntary navigation expose different signals.
- Malicious browser notifications: an alert from a website, not your PC
- Learn to trace the sender before acting on a scary popup.
- Maps search history versus a Timeline visit
- Looking up a place and physically visiting it are separate records.
- Memory integrity (HVCI): an isolated check on low-level code
- Why one outdated device driver can block a Windows protection.
- MFA fatigue or push bombing
- Repeated approval prompts designed to make you accept one.
- Microsoft alias sign-in preference: one account, several names
- Blocking an alias from sign-in is not deleting its mailbox.
- Microsoft recovery form: ownership evidence, not a 2FA override
- The form has a hard limit when every second factor is gone.
- Mozilla connected-service sign-out versus a device wipe
- A revoked sync session does not erase files already on a computer.
- Multifactor authentication (MFA)
- More than one kind of proof to sign in.
-
N
0 definitionsNo individual definitions under N yet. Choose another letter to explore more security terms.
-
O
11 definitions- OAuth consent: what a connected app can do without your password
- Read the requested access before you approve a sign-in screen.
- Official-looking arrest warrant versus a verified court notice
- A PDF or caller ID can be forged; court records require independent checking.
- Offline backup: a copy a compromised computer cannot edit
- Disconnecting a backup limits what ransomware can reach.
- Offline Device Lock versus airplane mode
- The control is triggered by being offline while unlocked, not by the icon alone.
- OneDrive link expiration versus revoked access
- A date on one link does not remove every permission to the file.
- OneDrive online-only versus always-available file
- The icons tell you whether an offline copy is deliberately kept.
- OneDrive Personal Vault versus an independent backup
- An extra unlock step protects access; it does not create a second copy.
- OneDrive ransomware detection versus removal of the malware
- A cloud warning identifies damaged files; the infected device must still be cleaned.
- OneDrive shared-folder shortcut versus a copied folder
- One keeps working in the owner's space; the other is a separate snapshot.
- Out-of-band verification: confirm through a separate route
- A reply in the same suspicious thread is not independent evidence.
- Outlook suspicious-link warning: signal, not a complete verdict
- A blocked link deserves a separate route to the claimed service.
-
P
20 definitions- Paid search bill-pay result versus the biller's official portal
- Ranking is advertising, not authority to collect a bill.
- Parking QR overlay: a physical route to a fake payment page
- A genuine-looking meter can carry a substituted destination.
- Passkey
- A device-based sign-in method that replaces a typed password.
- Password-vault emergency access: view and takeover are different
- Choose the least access a trusted contact actually needs.
- Password spraying: one guess against many accounts
- Why a company can see many failed logins at once.
- Paused unused app: automatic permission revocation on Android
- A dormant app can lose grants and notifications without being deleted.
- Payment screenshot versus settled marketplace transaction
- An image does not give a seller control over funds.
- PayPal automatic-payment agreement versus canceling a subscription
- Stopping one funding route may leave the service contract active.
- PayPal Friends and Family versus Goods and Services
- A purchase is not a personal transfer just because a seller wants lower fees.
- PayPal money request versus a completed payment
- The request asks you to act; it does not prove funds have left.
- PayPal passkey versus an active signed-in session
- Removing a login key does not automatically undo everything a device saw.
- Phishing
- A deceptive message that asks you to click, open or disclose.
- Phone camera and microphone indicators: what a colored dot proves
- Use the signal to investigate, not to conclude that a phone is hacked.
- Photo location metadata: coordinates you cannot see in the image
- The scene and the file can disclose different kinds of location.
- Potentially unwanted app: the grey area below malware
- An installer can be unwanted even without a classic virus signature.
- Private browsing: what disappears and what remains
- Closing the window clears local session data, not your online identity.
- Private DNS hostname versus a website address
- A resolver configuration is not a browser destination.
- Private event versus private calendar in Google Calendar
- An event flag works within its calendar's sharing rules.
- Private Google Maps list versus shared list link
- A private label can become a forwarded audience when linked.
- Protected View versus a trusted Office document
- A read-only safety boundary is not an authenticity certificate.
-
Q
2 definitions- QR phishing: when a code hides the destination
- Inspect the destination before you enter a password or pay.
- Quarantine: contained is different from deleted
- A detected file can remain on disk without being available to run.
-
R
29 definitions- Ransomware
- Malware that makes data unavailable and demands payment.
- Ransomware double extortion: when backups solve only half the problem
- An attacker may steal data as well as encrypt files.
- Recently Deleted on iPhone: a 30-day recovery window
- A short grace period, not a permanent photo archive.
- Recovery code
- An emergency sign-in route when your normal MFA method is unavailable.
- Recovery email: an account that can unlock your other accounts
- Protect the recovery route as carefully as a primary password.
- Recovery point: how much recent work you could lose
- The last usable copy matters more than the backup toggle.
- Recovery scam: the second fraud aimed at an earlier victim
- Knowledge of your first loss does not make the caller legitimate.
- Reddit account activity versus proof of a hack
- Use several signals rather than one IP address.
- Reddit chat request versus an established conversation
- Requests can be screened before engagement.
- Reddit profile curation versus deleting a post
- Hiding profile history leaves the original community post.
- Reddit report versus block
- Review by the platform and personal contact control are different.
- Reddit two-factor backup code versus authenticator code
- One is a stored fallback; the other rotates.
- Registration lock: a barrier to reusing your phone number
- Protect account registration without mistaking a PIN for a message backup.
- Remote-access app: useful support tool or unwanted control
- Judge who started the session and what permissions they received.
- Remote Desktop host versus Remote Desktop client
- Receiving a connection is different from connecting outward.
- Renewal notice versus a confirmed card charge
- An invoice-looking email can be a lure even when no payment occurred.
- Rental property's existence versus advertiser's authority
- A real apartment can be advertised by someone who cannot rent it.
- Report an eBay seller versus open an order case
- Policy enforcement and purchase resolution use different controls.
- Report phishing versus block sender in email
- One trains or alerts a system; the other changes what reaches your inbox.
- Restore point versus file backup: two different recoveries
- A rollback of Windows settings does not replace your documents.
- Restore test: the backup check that matters
- Prove you can open recovered data without erasing the original.
- Restore this version versus make a copy in Google Docs
- One changes the live document; the other preserves a separate candidate.
- Restricted Maps profile versus a private review
- Public place content remains public even when discovery narrows.
- Restricted settings on Android: a deliberate extra step
- A sensitive permission should match the app's real purpose.
- Revoked Telegram invite link versus removed group member
- One closes a door; the other removes an account already inside.
- Router client list: an inventory clue, not proof of an intruder
- Device labels and Wi-Fi addresses need context.
- Router DNS setting versus encrypted DNS
- Choosing a resolver and encrypting queries solve different problems.
- Router firmware version: the update evidence to record
- A successful reboot is not proof that a patch installed.
- Router remote management: access to the admin page from outside
- Do not confuse administering the router with using a cloud camera.
-
S
30 definitions- 'Safe account' transfer versus a bank-initiated account lock
- One moves your money to a new destination; the other controls access to your existing account.
- Safari cross-site tracking prevention versus site permissions
- The first limits third-party data; the second controls device features.
- Safari extension website access: which pages an add-on can read
- Restrict broad access when a useful extension needs only a few sites.
- Safe Browsing warning: a risk signal, not a verdict
- What a browser warning can and cannot establish about a download.
- Safety Check on iPhone: a sharing review, not a universal reset
- Know what Emergency Reset changes and what stays outside Apple.
- Saved camera permission versus active camera use
- A grant and a recording are different states.
- Saved LinkedIn resume versus an application already sent
- Deleting a reusable file cannot retract a submitted copy.
- Secure Boot enabled versus Secure Boot capable
- Hardware support does not mean the feature is currently active.
- Security key: a physical sign-in method that can resist fake sites
- Understand what a FIDO security key changes and what it does not.
- Security patch: a fix you should verify, not just click
- Why updates matter and how to spot a fake update prompt.
- Session cookie
- A sign-in token that can keep a browser authenticated.
- Shared-password group removal versus password rotation
- Revoking membership cannot erase a secret someone already learned.
- Shared drive ownership: team files survive a member's departure
- File location affects who keeps control after an account is removed.
- Signal PIN versus message-history backup
- One protects selected account data; the other preserves chat content.
- Signal safety number versus a verified human identity
- The number is a channel check whose value depends on how it was compared.
- SIM swap: when someone takes over your phone number
- Why lost service can be an account-security warning.
- SIM swap versus an ordinary carrier outage
- Both can remove service; only one transfers control of your number.
- Site permission: a browser grant you can take back
- Camera, microphone and location access should match a current need.
- Smart App Control Evaluation versus On versus Off
- The same feature can observe, block or be unavailable.
- SmartScreen: reputation checks are a warning layer
- A known-bad site and a low-reputation file can trigger different warnings.
- Smishing: a phishing message sent by text
- The safe check happens outside the message thread.
- Spare security key: an independent second way back in
- Registration must happen before the original key is lost.
- Steam false-report message versus a real account restriction
- A chat story cannot impose a Steam ban.
- Steam Family adult role versus child purchase request
- Administrative authority and one purchase approval are not the same.
- Steam Guard deauthorization versus changing your password
- One removes remembered devices; the other changes the secret.
- Steam item verification trade versus an ordinary trade
- Sending an item away for inspection is still a transfer of ownership.
- Steam trade offer versus mobile confirmation
- The second screen is the last chance to inspect a transfer.
- Stolen Device Protection: security after a passcode is exposed
- An extra biometric check can slow account takeover after phone theft.
- Stopping Google Photos partner sharing versus recalling saved photos
- The future sharing stream and past copies are separate.
- Synced passkey versus a key tied to one device
- Know where a credential lives before relying on it for recovery.
-
T
26 definitions- Task scam balance: displayed earnings are not withdrawable wages
- A dashboard can be part of the deception.
- Teams chat attachment versus channel file
- They can live in different Microsoft 365 locations.
- Teams guest account versus external meeting attendee
- Persistent workspace membership is a different access decision.
- Teams lobby bypass: a meeting-entry rule, not identity proof
- An admitted display name still needs context.
- Teams meeting chat versus a file permission
- Conversation visibility does not define every attachment's audience.
- Teams recording versus transcript access
- The video and its text record need their own review.
- Telegram active session versus an account contact
- A signed-in device can read cloud chats; a contact cannot by default.
- Telegram Cloud Chat versus Secret Chat
- Multi-device sync and end-to-end encryption are different designs.
- Telegram login code versus Two-Step Verification password
- Two different secrets protect different steps of sign-in.
- Telegram phone-number visibility versus account discoverability
- Hiding digits does not make a profile impossible to find.
- Temporary card lock versus reported lost card
- A reversible app switch may buy time; an issuer report starts formal handling.
- Theft Detection Lock versus Remote Lock on Android
- Automatic motion response and owner-requested lock solve different moments.
- Third-party cookie: a cross-site identifier with limits
- Understand tracking without treating every cookie as malware.
- Ticket screenshot versus a live ticket transfer
- An image is easy to copy; ownership must follow the issuer's rules.
- TikTok Family Pairing versus a teen's private account
- Guardian controls and post audience are separate layers.
- TikTok keyword comment filter versus Filter all comments
- One targets matches; the other creates a full approval queue.
- TikTok message request versus an accepted chat
- The inbox route changes after a request is accepted.
- TikTok private account versus disabled downloads
- Audience control and saving permission solve different problems.
- TikTok trusted device versus two-step verification
- Remembered access and a new-login challenge are different safeguards.
- Time Machine backup password: a second recovery dependency
- An encrypted backup is useful only if you can unlock it later.
- Time Machine local snapshot: a recovery copy on the same Mac
- Convenient for a recent mistake, weak against disk loss.
- Total Cookie Protection versus clearing site cookies
- Partitioning future storage and deleting existing state solve different problems.
- Trusted Apple phone number versus trusted Apple device
- Both aid sign-in, but a number and signed-in device carry different risks.
- Trusted device versus linked device: why the labels matter
- A device that can approve sign-in is not always a device that can read your chats.
- Trusted places for Extend Unlock versus Identity Check
- The same saved area can affect convenience and added verification.
- Turning off Edge sync versus removing local browser data
- Stopping future transfer does not undo data already copied.
-
U
6 definitions- U.S. credit freeze versus fraud alert
- One restricts credit-report access; the other asks creditors to verify identity.
- Unauthorized PayPal charge versus Item Not Received
- The first disputes consent; the second disputes fulfillment.
- Unknown tracker alert versus a manual scan on Android
- One suggests movement with you; the other checks nearby devices now.
- UPnP on a router: automatic requests for open ports
- Convenience for games and apps can create unexpected exposure.
- User consent versus admin consent for a work app
- Who granted access determines who can revoke it.
- User consent versus admin consent for a work application
- The scope and authority of the grant matter more than the button label.
-
V
5 definitions- Vault Lock versus Log out in Bitwarden
- The two timeout actions leave different recovery requirements.
- Verification-code scam: making you authorize their action
- Read what the code says it is for before doing anything.
- Version history: undo an overwrite without undoing everything
- Recover one older file instead of restoring an entire account.
- Voice assistant wake word versus physical microphone mute
- One is a software trigger; the other can stop new audio capture at the device.
- Voice clone versus proof of a family emergency
- A familiar sound is an identity cue, not an independent confirmation.
-
W
10 definitions- Website notification versus browser popup in Edge
- The same scary wording may come from two different browser mechanisms.
- Whole-OneDrive restore versus one-file version history
- The scope of recovery determines how much newer work moves.
- Windows Hello passkey versus Windows Hello PIN
- The PIN unlocks a local key; the site receives a cryptographic proof.
- Windows phishing warning versus full credential monitoring
- A warning covers a specific typed secret, not every account you own.
- Windows PUA Block apps versus Block downloads
- One catches software on the device; the other targets Edge downloads.
- Windows quality update versus feature update
- Identify what changed before blaming the latest patch.
- Windows Sandbox: disposable desktop, not a trust verdict
- A temporary environment helps testing but cannot certify a file.
- Working smart-device feature versus active security support
- Operational availability is not a patch commitment.
- WPA3 and WPA2: Wi-Fi encryption is not website trust
- Choose current network protection without assuming every page is safe.
- WPS: a Wi-Fi joining shortcut separate from your password
- Button or PIN enrollment can stay active when you do not use it.
-
X
1 definition- XProtect on Mac: built-in malware detection and remediation
- Understand the layer without treating it as a clean bill of health.
-
Y
4 definitions- YouTube channel permission versus a shared Google password
- Assign a role to a person instead of sharing your identity.
- YouTube channel takeover versus Google Account takeover
- The channel and its sign-in account are linked but not identical.
- YouTube Held comment versus a published comment
- Moderation queues and public pages have different audiences.
- YouTube Hide user from channel versus report spam
- Local moderation and platform review have different purposes.
-
Z
5 definitions- Zoom authenticated participant versus invited participant
- Being sent a link is not the same as satisfying an account rule.
- Zoom cloud-recording link versus a downloaded copy
- Revoking the URL cannot recall a file someone already saved.
- Zoom Host only sharing versus muting a participant
- Content control and audio control are separate meeting settings.
- Zoom invite link versus an official software update
- A meeting URL and a software installer require different verification.
- Zoom Waiting Room versus meeting passcode
- A code permits an attempt; a host-controlled room screens admission.
Follow your curiosity.
Explore the rest of the library by subject.
The complete libraryExplore the full collection.
Run a small file, account and device-failure drill.
Separate installer, profile, account and license for each application.
Back up, remove everything, verify setup and unlink the device.
Recover user documents on another PC without assuming programs were backed up.
Protect portable files and prove you can unlock the copy elsewhere.
Verify cloud copies and download what you need offline.
Preview, choose a date and restore to a separate location first.
Include custom libraries and verify the external drive actually receives versions.
Check 2026 eligibility and transfer exclusions before pairing.
Check sync status and missing app data before retiring the old machine.
Choose a supported dump type and protect its sensitive contents.
Compare committed memory, workload and free disk before changing virtual memory.
Choose Classic or Enhanced deliberately before rebuilding the index.
Separate device wake permission from scheduled timers and failed sleep.
First confirm Modern Standby support, then inspect a real sleep interval.
Compare design capacity, full charge capacity and usage history.
Identify persistence without deleting legitimate services blindly.
Capture a short filtered trace rather than millions of events.
Measure CPU, memory, disk and context under a repeatable workload.
A diagnostic experiment must end with all services restored.