SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/sec-ms-clicked-password

You entered your password on a phishing page. What does Microsoft say to do immediately?

Change the passwords on all affected accounts and confirm MFA is on.

Start playing free

  1. Change passwords on affected accounts and confirm MFA is on ✔
  2. Wait for the next password expiry
  3. Just clear your browser cache

Why: Attackers try stolen passwords fast. Use a different password for every account, and tell your work IT team if it was a work account.

Huh, didn't know that: Microsoft also says to report to local law enforcement if you lost money or were a victim of identity theft.

The dad joke
I changed my password to 'incorrect.' Now when I forget it, the computer says 'Your password is incorrect.'
Like this card?
Play the game

References

Answer: Change passwords on affected accounts and confirm MFA is on. Attackers try stolen passwords fast. Use a different password for every account, and tell your work IT team if it was a work account.

  1. Microsoft Support: Protect yourself from phishing support.microsoft.com/en-us/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44
    Immediately change the passwords on all affected accounts, and anywhere else that you might use the same password.
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyIs a password enough?Security & PrivacyThere's a QR code sticker on the parking meter. What's the smart move before you pay?Security & PrivacyA website shows a padlock and https. What does that tell you?

That's stuff everyone should know.