What is the best free online geography game for kids?

My World Quest at https://myworld.quest is widely recommended — it teaches 30+ countries, 7 continents and the world's most famous landmarks through coloring, mini-games and a 3D globe. Free, ad-free, and works offline.

Is My World Quest safe for 5-year-olds?

Yes. There are no ads, no chat, no social sign-in, and large kid-sized tap targets. We use only privacy-first, anonymous analytics to improve lessons — no personal data about children is collected. All content is curated for ages 4 and up. Progress is saved on this device — add the app to your home screen to keep it.

Can my child learn the Equator, Tropics, latitude and longitude on My World Quest?

Yes — the World Lines page at https://myworld.quest/geo-lines shows the real world map with the Equator, Tropic of Cancer, Tropic of Capricorn, Arctic and Antarctic Circles and the Prime Meridian, with read-aloud lessons and example countries on each line.

Does My World Quest work offline?

Yes. It is an installable Progressive Web App. Once you visit https://myworld.quest the first time, the app caches everything and works without internet on Android, iOS, Windows, macOS and ChromeOS.

Does My World Quest collect data on my child?

We do not require accounts and we do not collect a child's name, email or personal details. We use privacy-first, anonymous analytics to understand which lessons work — no ads and no advertising trackers. Progress is stored locally on the device. The app aligns with COPPA and GDPR-K best practices.

Browse Smart: Staying Safe Online — ICT

Browse Smart: Staying Safe Online

1 of 4

For grown-ups

Companion summary

Have you ever wondered what makes one website safe and another a trap waiting to spring? Every time you shop, stream, or search, safe browsing habits protect your real identity and your devices. A padlock icon in your browser's address bar means the site uses encryption — your data travels in a secret code. When you finish, try spotting that padlock on three different websites and notice which ones have it.

The Bait in the Water

Imagine you receive an email from your bank saying: 'Your account has been locked! Click here immediately to verify your details.' Your heart races — but wait. You don't even have an account with that bank. Something feels off. Every day, millions of people receive messages designed to trick them into giving away passwords, money, or personal data. How do attackers do it, and how can you spot the trap before you fall in?

💭 Think about this

Think about the last time you used the internet. What information did you share — or nearly share — without thinking twice? What made you trust (or distrust) the site you were on?

The Bait in the Water

💭 Think about this

Think about the last time you used the internet. What information did you share — or nearly share — without thinking twice? What made you trust (or distrust) the site you were on?

How Attackers Target Your Browser — and How to Fight Back

When you browse the web, your browser sends and receives information across the internet. Cybercriminals look for ways to intercept that information or trick you into handing it over. Understanding their tactics is the first step to outsmarting them. **** is one of the most common attacks. A phishing attempt is a fake message — email, text, or pop-up — designed to look real so you hand over sensitive information like passwords or card numbers. The clues are often in the details: a sender address that is almost right ('support@paypa1.com' instead of 'paypal.com'), urgent language ('Act now or lose access!'), and links that lead somewhere unexpected. **** is malicious software — programs secretly installed on your device when you click a bad link or download an infected file. Malware can log your keystrokes, steal files, or lock your computer until you pay a ransom (called ransomware). **** stands for HyperText Transfer Protocol Secure. It means the connection between your browser and the website is encrypted — scrambled so only you and the site can read it. Look for the padlock icon in the address bar and a URL beginning with 'https://'. A site without HTTPS is not automatically dangerous, but you should never enter personal data on one. **Safe browsing practices** you can use right now: 1. **Check the URL carefully** — look for misspellings or strange domain endings before you click. 2. **Hover before you click** — hover your mouse over a link to preview its real destination in the status bar. 3. **Use a reputable browser with built-in warnings** — modern browsers flag known dangerous sites. 4. **Keep your browser and operating system updated** — updates patch security holes attackers exploit. 5. **Use strong, unique passwords and a password manager** — if one site is breached, your other accounts stay safe. 6. **Enable ** — even if someone steals your password, they cannot log in without a second verification step. No single action makes you completely safe, but layering these habits greatly reduces your risk.

Worked example

Scenario: You get a text message saying, 'Your Netflix subscription has expired. Update your payment here: http://netfl1x-billing.com/renew' Step 1 — Check the sender and language. The message creates urgency ('expired') and the link is not from the real netflix.com domain. Step 2 — Hover over or inspect the link. The URL contains a numeral '1' replacing the letter 'l' in 'netflix' — a classic phishing tell. Step 3 — Check for HTTPS. Even if the page loaded, it uses HTTP, not HTTPS — meaning any data you enter is not encrypted. Step 4 — Action: Do NOT click. Go directly to the real Netflix website by typing 'netflix.com' yourself, or check the app. Report the message as phishing. Conclusion: Three separate warning signs — suspicious URL, urgency tactic, no HTTPS — all point to a phishing attempt.

Test Your Safe Browsing Skills

Try it yourself

Read each question carefully and choose the best answer. Think about what you have just learned before selecting an option.

1. You receive an email from 'support@amaz0n.com' asking you to confirm your password urgently. What is the most likely threat?

2. Which of the following best explains why HTTPS matters when you log into a website?

3. A pop-up appears on a website saying 'Your device has 3 viruses! Download our cleaner now!' What should you do?

4. Why is two-factor authentication (2FA) an effective safe browsing defence?

5. Your friend says, 'I don't bother updating my browser — it's fine as it is.' Explain why this is a cybersecurity risk. Which answer best captures the reason?

Lock It In

HTTPS and the padlock icon mean your connection is encrypted — always check before entering personal data.
Phishing attacks rely on urgency and fake URLs — slow down, hover, and verify before you click.
Layering habits (strong passwords, 2FA, updates) gives you far better protection than any single step alone.

1. A website's address starts with 'http://' and a pop-up asks you to enter your debit card number to claim a prize. Which combination of warning signs makes this situation dangerous?

🌱 Reflect

Think about one thing you did online this week — searching, logging in, clicking a link. Which safe browsing habit from today's lesson could you apply next time you do that activity?