- Staying safe online
- Why do cyber criminals target students?
- Protect your passwords
- Need help?
- Keep your devices, software and apps up to date
- Avoid using third‑party VPNs or unsupported browsers
- Avoid unsafe websites offering free content
- Protect your online profile
- Stay alert during busy periods
- How to report a scam or cyber attack
Staying safe online
Cybercriminals often target students with phishing emails, fake websites, social media scams and fraudulent offers.
Follow the guidance on this page to help protect your University account, personal information, money and devices.
Why do scammers target students?
Students are often targeted because they may be:
- New to university systems and processes
- Busy or under pressure
- Expecting messages about student finance, visas, accommodation or enrolment
Scammers use realistic emails, texts and websites to gain trust and steal personal information.
If you're unsure
- Stop before you click, reply or pay.
- If something feels suspicious, report it.
- Acting quickly can reduce the impact if something goes wrong.
If something goes wrong - Report it quickly. See Cybercrime reporting and support.
Protect your passwords
Your password protects your University account and personal data.
Good password practice
- Use a strong password or passphrase that is difficult to guess.
- Avoid birthdays, names and common words.
- Use a different password for each account.
- Never share your password.
- Lock your screen when you leave your device.
- Change default passwords on routers and smart devices.
Guidance for setting up your university password
Important
The University will never ask for your password. Anyone requesting it is likely attempting a scam.
If you think your password has been compromised
- Change it immediately at pss.herts.ac.uk
- Report the issue to the account provider.
- Monitor your accounts for unusual activity.
Protect yourself
- Use your digital security tools correctly.
- Stay aware of common warning signs.
- Staying aware helps protect your money, data and identity.
Need help?
Library and Computing Services Helpdesk
- Phone: +44 (0)1707 284678 (24/7)
- Email: helpdesk@herts.ac.uk
See Fraudulent emails, spam and phishing attacks.
Keep your device, software, and apps up to date
Keep your devices, software and apps up to date
Keeping your device updated helps protect against security risks and cyber threats.
Keep your devices secure
- Update your operating system and apps regularly.
- Avoid using devices that are no longer supported by the manufacturer.
Use secure Wi-Fi
- Use eduroam when on campus.
- Be cautious when using public Wi-Fi networks.
Use security tools
- Install antivirus and firewall protection.
- Turn on two-factor authentication (2FA) or multi-factor authentication (MFA) wherever available.
- Consider using a hardware security key if supported.
MFA is required for your University account
All University accounts must use Multi-Factor Authentication (MFA).
Avoid using third‑party VPNs or unsupported browsers
Third-party VPNs and unsupported browsers can cause account access issues and trigger additional security checks.
To avoid problems:
- Turn off non-University VPNs before accessing University services.
- Use the official Ivanti VPN if required.
- Use a supported browser such as Chrome, Edge, Firefox, Safari or Opera.
Students outside the UK who need VPN access should use the Ivanti VPN.
Avoid unsafe websites offering free content
Some websites offering free films, music, software or study materials may:
- Contain malware
- Steal login details
- Put your personal data at risk
Legal and academic risks
Using these services may:
- Breach copyright law
- Breach University academic integrity regulations
Safer alternatives
Access University e-books and journals through the Online Library in StudyNet.
If you need support:
- Herts SU Advice and Support
- Student Funding and Financial Support Team - financial-support@herts.ac.uk or phone +44 01707 284800
- University Financial Assistance Fund (UFAF)
Find out more about assessment offences and academic misconduct
Protect your online profile
Information shared online can be collected and used by cybercriminals.
Check your privacy settings
- Review who can see your information.
- Limit the personal details you share publicly.
- Be cautious about what you post online.
See Protect your money, data and identity from scammers.
Stay alert during busy periods
Scammers often target students when they are stressed, distracted or expecting important communications.
Common high-risk periods include:
- Starting university
- Student finance and accommodation arrangements
- Black Friday and major sales events
- Holiday periods
- Exam season
Remember:
- If an offer seems too good to be true, it probably is.
- Take time to verify emails, texts, websites and payment requests.
- Be aware of money mule scams.
See our advice on how to spot a scam email, text, message or call.
How to report a scam or cyber attack
Don't be embarrassed
Anyone can be targeted by scammers.
Reporting scams helps protect other students and staff.
If your University account may be compromised
Contact the Helpdesk immediately:
- Phone: +44 (0)1707 284678
- Email: helpdesk@herts.ac.uk
Further support
- Herts SU Advice and Support Centre
- Victim Support
- Report fraud (National Fraud and Cyber Crime Reporting Centre)
- Citizens Advice
If the incident has affected your wellbeing
Support is available through: