Read the padlock honestly
What the padlock proves, and — more usefully — what it does not.
HTTPS encrypts the connection between your browser and that website. Your browser may show a padlock or a site-controls icon; the symbol varies.
Key points
- HTTPS encrypts the connection; it does not prove that the site is trustworthy
- A familiar name in a web address is not enough to identify a genuine site
What to remember
- Use a known official app or address to check a sensitive request. Familiar words in a web address do not prove who runs the site.
- The padlock seals the envelope. It says nothing about who opens it.
Try this
For a sensitive task, open a trusted official app or type an official address you already know. Do not enter passwords or payment details into an unfamiliar page to test whether it is genuine.
Practice: Read the padlock honestly. Your first lesson is free, with no account or card; the rest are part of a Lantern plan. Interactive lessons require JavaScript.