Notes

Plain-language notes from MELKEM INC. on keeping your accounts and your information private and secure.

Articles

  • Why a code in an app beats a code by text message

    A text-message code can be stolen in a SIM swap. An authenticator app calculates its code on your iPhone. Here is the difference, and a 30-second fix.

  • How to check an app before you download it

    Five quick checks before you install an iPhone app: the seller, the privacy label, the permissions, the price, and where the link to the app came from.

  • Which apps and websites work with an authenticator app?

    Which services accept an authenticator app, where the setting is and how to turn it on, each checked against that service's own official help page.

  • How to lock or hide any app on your iPhone

    Apple lets you lock an iPhone app behind Face ID or hide it in a Hidden folder. Here are the steps, how to undo them, and what to know first.

  • Never share your 6-digit code

    Anyone who asks you to read out a sign-in code is after your account. How scammers ask, what the Canadian Anti-Fraud Centre says, and what to do.

  • Lost your phone? How to get back into your accounts

    Use the backup codes or recovery options you saved before the phone was lost. What to do right away, and how backup codes and recovery keys work.

  • What is two-factor authentication?

    Two-factor authentication means proving who you are in two different ways to sign in. The three kinds of proof, the second step, and where to start.

  • Passkeys vs authenticator codes

    A passkey is stronger where a service offers one, but authenticator codes still matter. Here is where each is better, and how they can work together.

  • What is ML-KEM? And where the name MELKEM comes from

    ML-KEM is a NIST standard for agreeing on a secret key, built to resist quantum computers. What it is, why it exists, and where the name MELKEM comes from.

  • How to see which apps on your iPhone use the internet

    Turn on App Privacy Report in Settings to see which domains your apps contact. Steps and limits from Apple, and what we saw when we checked our own app.

  • Watch a 2FA code being made

    Watch a 2FA code being worked out from the clock and a public demo key, step by step, in your browser. Nothing is sent anywhere.

  • Someone made a fake image of me. What do I do?

    It is not your fault. Where to get help today, and how to get a fake or AI-made image of you taken down, with steps from Canadian services.

  • What is encryption?

    What encryption is, at rest and in transit, end-to-end, and why future quantum computers matter. From the Canadian Centre for Cyber Security and NIST.

Service guides

Service guides

Ask MELKEM