This snapshot, taken on 03/06/2007, shows web content selected for preservation by The National Archives. External links, forms and search boxes may not work in archived websites.
The following is a straightforward Q&A that can inform you of basic IT security and privacy issues. It can also help unravel some security jargon and provide other useful information to help protect you, your family or business online.
Is Internet shopping safe?
Yes, provided you take some basic precautions: use sites you know or which have been recommended (or look for the TrustUK logo), get the supplier's postal address and telephone number, look for the padlock symbol on the browser to show your personal details are protected when being sent to the supplier, keep copies of all email correspondence and order forms, be aware of your cooling off rights and remember that you have the same consumer rights when using your credit card as you do in a shop - the law protects you from card fraud. For more information, see the DTI Safe Internet Shopping website.
What are the benefits of Internet shopping?
It's easy and convenient, particularly if you can't easily get out to the shops.
What are the risks of Internet shopping?
When shopping online your normal high street rights apply if the trader is based in the UK, but for auctions and private sales the general rule is 'buyer beware'. Websites that do not use security technology (e.g. SSL, the browser padlock) may leave your personal information open for anyone who intercepts the communication (imagine it as being on a postcard rather than in a sealed envelope).
What if I buy goods on the Internet and something goes wrong?
Normal consumer rights apply. If you buy by credit card and the goods fail to arrive or are faulty, the card company should refund you for any single item costing over £100.
Is it safe to use my credit card?
Yes, look for sites which use SSL (the browser padlock). Within the EU the card company must refund you if your credit or debit card is used fraudulently.
What about cases where credit card details have been made public?
This is rare and usually due to details being sent insecurely (not using SSL) or else the website not being secure. Use familiar or recommended websites if you have concerns.
What is a secure password?
Passwords should always be kept secret and should not be easy to guess. Avoid anything with obvious associations (like a spouse's name) or any dictionary words - both can be easy for a hacker to work out. Ideally a password should be at least 8 characters long and include a mixture of uppercase, lowercase, numerals and other characters e.g. EdunPO20=. One possible way to remember a password is to pick a phrase, perhaps a line from a song, as a starting point. Don't write it down or share it with anyone, including helpline staff who should never have a need to know it. Some passwords are automatically required to be changed after a specified period, but it is good practice to change them every three months. Finally, don't use the same password for everything, just as you have different keys for your house, your car and your office desk.
What is SSL?
SSL, or Secure Socket Layer, is a software tool which ensures that information sent to or from a website cannot be viewed during transmission. It uses a public and private key encryption system.
What does the padlock on the browser mean?
It shows that you are on a site using SSL to encrypt your personal information while it is going from your PC to the website operator's system, so that it cannot be read by anyone intercepting it.
How do I manage the risks of being online?
Be sensible you don't cross a busy road without looking and thinking first, so do the same online. Take reasonable precautions, like using anti-virus software, and shopping from reputable sites. Adjust the security settings on your browser to protect you to the level you require. Don't give out personal information in chatrooms or if you are not sure who is receiving the information. Just as you give your children guidance about not speaking to strangers in the street, give them guidance on sensible Internet practice. Think safety first then you can enjoy all that the Internet offers.
What is a secure web browser?
A browser lets you access the information on the Internet. Common browsers include Microsoft Internet Explorer and Netscape Navigator. A secure web browser supports the technical security protocols (standards) used by some sites to prevent unauthorized people from seeing information sent to or from the sites. You can tell when this is happening by the appearance of a padlock symbol at the bottom of the browser window. Double clicking this symbol will show a 'digital certificate' confirming the authenticity of the site.
How do I know if a website is reputable?
Just as anyone can insert an advertisement in a newspaper, so anyone can set up a website. Check for contact details on the site (a postal address, not just an e-mail address). For shopping use sites which you know or which have been recommended, or look for the TrustUK logo.
What about non-UK websites?
One of the most exciting things about the Internet is being able to get information from all over the world. Use the same common sense you would use for any website, such as checking for postal contact details. But remember that only UK sites have to adhere to UK laws.
How do I know if a website belongs to a UK company?
Web site addresses often include a two-letter country code, e.g. www.direct.gov.uk, at the end of the given address or before the / shown on the browser. Exceptions are for example .com, .net, and .org domains which can be used across the globe. Some UK-based search engines offer the option to search pages from the UK only.
I went to one organisation's website and arrived at another - how?
Very often websites offer useful links to other sites, for example these pages offer suggestions about other websites offering information, such as the DTI Safe Internet Shopping - if you click on the hyperlink then you will be transferred to that site. Additionally, some websites may send to another site temporarily as part of a transaction, such as with the Government Gateway.
How do I know if a website is genuine?
Internet addresses have to be properly registered so most organisations have registered their own names as site names. However, this cannot always be guaranteed, particularly for all available suffixes, so if you are in any doubt it is advisable to check for physical address details.