Learn
Cybersecurity Glossary
A
AES-256
Encryption & SecurityAdvanced Encryption Standard with a 256-bit key length. It's the gold standard for encryption, used by governments and security experts worldwide. AES-256 is virtually unbreakable with current technology, making it ideal for protecting sensitive data.
B
Bandwidth
NetworkingThe maximum rate of data transfer across a network connection, typically measured in Mbps (megabits per second) or Gbps. Higher bandwidth means faster downloads and streaming. VPNs may slightly reduce available bandwidth due to encryption overhead.
Botnet
Cyber ThreatsA network of compromised computers (bots or zombies) controlled by an attacker. Used to launch DDoS attacks, send spam, mine cryptocurrency, or commit other cybercrimes at scale without the owners' knowledge.
Browser Fingerprinting
PrivacyA tracking technique that identifies users based on their browser and device characteristics—screen size, installed fonts, plugins, timezone, and more. Creates a unique 'fingerprint' that can track you even without cookies.
C
ChaCha20
Encryption & SecurityA modern stream cipher designed as an alternative to AES. It's used by WireGuard VPN protocol and offers excellent performance on devices without hardware AES acceleration, like many mobile devices.
D
Dark Web
PrivacyA part of the internet not indexed by search engines and only accessible through special software like Tor. While it hosts legitimate privacy tools, it's also used for illegal marketplaces selling stolen data, drugs, and other contraband.
Data Breach
Cyber ThreatsAn incident where sensitive, protected, or confidential data is accessed, stolen, or exposed by unauthorized parties. Can result from hacking, insider threats, or accidental exposure. Major breaches can affect millions of users.
Dedicated IP
GeneralA static IP address assigned exclusively to you by your VPN provider. Unlike shared IPs, a dedicated IP is less likely to be blocked by websites. Useful for accessing IP-restricted services and avoiding captchas.
Deep Packet Inspection
GeneralA method of examining network traffic at a detailed level. Used by ISPs, governments, and network administrators to filter, monitor, and block specific types of traffic—including VPNs. Obfuscation helps evade DPI.
DNS
NetworkingDomain Name System. The internet's phonebook that translates human-readable domain names (like google.com) into IP addresses computers use. DNS requests can reveal your browsing history, which is why DNS leak protection is important for VPNs.
DNS Leak
NetworkingA security flaw where DNS requests bypass your VPN tunnel and go directly to your ISP's DNS servers. This exposes which websites you visit, defeating a major privacy benefit of VPNs. Good VPNs include DNS leak protection.
E
Encryption
Encryption & SecurityThe process of converting readable data (plaintext) into an unreadable format (ciphertext) using a cryptographic algorithm and key. Only someone with the correct key can decrypt and read the data. Essential for VPNs and secure communications.
End-to-End Encryption
Encryption & SecurityA security method where data is encrypted on the sender's device and only decrypted on the recipient's device. No one in between—not even service providers—can read the content. Used by messaging apps like Signal and WhatsApp.
F
Firewall
NetworkingA network security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules. Acts as a barrier between trusted internal networks and untrusted external networks like the internet.
G
Geo-Blocking
GeneralThe practice of restricting access to content based on geographic location. Streaming services use geo-blocking to enforce licensing agreements. VPNs can bypass geo-blocks by making you appear to be in a different location.
I
Identity Theft
Cyber ThreatsThe fraudulent acquisition and use of someone's personal information (name, Social Security number, credit card details) without permission, typically for financial gain. Can lead to damaged credit, financial loss, and legal problems.
IP Address
PrivacyInternet Protocol address. A unique numerical label assigned to every device connected to the internet. Your IP address can reveal your approximate location and internet provider. VPNs hide your real IP by replacing it with the VPN server's IP.
IPsec
ProtocolsInternet Protocol Security. A suite of protocols for securing IP communications by authenticating and encrypting each packet. Often paired with IKEv2 or L2TP. Widely used in enterprise VPNs.
K
Kill Switch
GeneralA VPN feature that blocks all internet traffic if the VPN connection drops unexpectedly. Prevents your real IP address and unencrypted data from being exposed during momentary disconnections. Essential for maintaining continuous privacy.
L
Latency
NetworkingThe time delay between sending a request and receiving a response, measured in milliseconds (ms). Also called 'ping.' Lower latency is better for gaming and video calls. Connecting to distant VPN servers increases latency.
M
Malware
Cyber ThreatsShort for 'malicious software.' Any software designed to harm, exploit, or otherwise compromise a computer, network, or user. Includes viruses, worms, trojans, ransomware, spyware, and adware.
Man-in-the-Middle Attack
Cyber ThreatsAn attack where a hacker secretly intercepts and potentially alters communication between two parties who believe they're communicating directly. Common on unsecured public Wi-Fi. VPNs prevent these attacks by encrypting your connection.
Metadata
PrivacyData about data. In communications, metadata includes who you contacted, when, for how long, and from where—but not the content. Metadata can reveal patterns and relationships even when content is encrypted.
Multi-Hop VPN
GeneralA VPN configuration that routes your traffic through two or more VPN servers in different locations. Provides extra privacy and security by making traffic even harder to trace, at the cost of some speed.
N
NAT
NetworkingNetwork Address Translation. A method of remapping IP addresses by modifying packet headers as they pass through a router. Allows multiple devices on a private network to share a single public IP address.
No-Logs Policy
PrivacyA VPN provider's commitment not to record or store users' online activities, connection timestamps, IP addresses, or any data that could identify what users do while connected. Essential for privacy-focused VPN services.
O
Obfuscation
GeneralA technique used by VPNs to disguise VPN traffic as regular HTTPS traffic. Helps bypass VPN blocks and deep packet inspection in restrictive countries or networks. Also called 'stealth mode' or 'camouflage.'
OpenVPN
ProtocolsAn open-source VPN protocol that's been the industry standard for years. Highly configurable and secure, though slower than WireGuard. Can use either TCP or UDP and works on virtually any port, making it effective at bypassing firewalls.
P
Phishing
Cyber ThreatsA cyberattack where criminals impersonate legitimate organizations via email, text, or fake websites to trick victims into revealing sensitive information like passwords, credit card numbers, or personal data. One of the most common cyber threats.
Port
NetworkingA virtual point where network connections start and end. Ports are numbered (0-65535) and help computers direct network traffic to the right applications. For example, web traffic typically uses port 80 (HTTP) or 443 (HTTPS).
Public Key Cryptography
Encryption & SecurityAn encryption system using two mathematically linked keys: a public key for encrypting data and a private key for decrypting it. This allows secure communication without needing to share secret keys in advance.
R
Ransomware
Cyber ThreatsMalicious software that encrypts a victim's files and demands payment (usually in cryptocurrency) for the decryption key. Ransomware attacks can cripple businesses and individuals, with no guarantee of data recovery even after payment.
S
Spear Phishing
Cyber ThreatsA targeted form of phishing aimed at specific individuals or organizations. Unlike generic phishing, attackers research their targets to create highly personalized and convincing messages, making them more dangerous.
Split Tunneling
GeneralA VPN feature that lets you route some traffic through the VPN while other traffic goes directly to the internet. Useful for accessing local devices, improving speeds for certain apps, or using location-dependent services.
Spyware
Cyber ThreatsSoftware that secretly monitors and collects information about a user's activities without their knowledge. Can track keystrokes, capture passwords, record browsing habits, and access personal files.
SSL/TLS
ProtocolsSecure Sockets Layer / Transport Layer Security. Cryptographic protocols that provide secure communication over the internet. TLS is the modern successor to SSL. The 'S' in HTTPS comes from SSL/TLS. Also used by some VPN protocols.
T
Tor
PrivacyThe Onion Router. Free software that enables anonymous communication by routing traffic through multiple servers worldwide, encrypting it at each step. Used for privacy, bypassing censorship, and accessing the dark web.
Two-Factor Authentication
GeneralA security method requiring two different forms of identification to access an account: something you know (password) plus something you have (phone) or something you are (fingerprint). Also called 2FA or MFA (multi-factor authentication).
U
UDP
ProtocolsUser Datagram Protocol. A connectionless protocol that prioritizes speed over reliability. Packets may arrive out of order or not at all. Preferred for VPNs, gaming, and streaming due to lower latency than TCP.
V
VPN
ProtocolsVirtual Private Network. A service that encrypts your internet connection and routes it through a server in another location, hiding your IP address and protecting your data from hackers, ISPs, and surveillance. Essential for privacy and security online.
W
WebRTC Leak
NetworkingWebRTC (Web Real-Time Communication) can reveal your real IP address even when using a VPN. It's a browser feature for video calls and file sharing that can bypass VPN tunnels. Can be tested and disabled in browser settings.
Z
Zero-Day Vulnerability
Cyber ThreatsA software security flaw unknown to the vendor and without a patch. Called 'zero-day' because developers have had zero days to fix it. These vulnerabilities are highly valuable to hackers and can be exploited before any defense is available.
Learn More About Cybersecurity
Explore our guides and tools to protect yourself online.
Social Engineering
Cyber ThreatsPsychological manipulation techniques used to trick people into making security mistakes or giving away sensitive information. Rather than hacking systems, attackers hack humans through deception, urgency, or authority.