The dark web explained in plain English: what it actually is, why it keeps coming up after every data breach, and five practical steps you can take today to protect your most important accounts.

You have probably gotten a notification at some point. Your email was found on the dark web. Maybe it popped up from Google or from your iPhone's built-in security check. Maybe you saw a headline about a company breach and wondered if your information was in the mix. Either way, most people are left with one question: should I actually be worried about this?

In this bonus episode, Frank Bravo breaks down the dark web without the drama. He explains exactly what the phrase means, why stolen data ends up there and what it actually sells for, and what a dark web notification does and does not tell you about your personal risk. Then he walks through five practical steps that actually move the needle, starting with a free tool most people have never heard of.

What you will learn in this episode:

• What the dark web actually is and how it fits into the internet as a whole, using the iceberg model to make it immediately clear
• What the deep web is and why most people are already using it dozens of times a day without knowing it
• Why the dark web was not built for crime and who originally developed it
• What actually happens to stolen data after a company gets hacked, including what it sells for on dark web marketplaces
• Exactly what a dark web notification means, and equally important, what it does not mean
• Three common myths about the dark web and the reality behind each one
• Why a leaked login to your county tax portal is a very different problem from a leaked login to your email account or bank
• How to check in about 30 seconds whether your email has appeared in a known data breach, using a free and widely trusted tool
• Why password reuse is how the vast majority of account takeovers actually happen, not sophisticated hacking
• What a password manager is, how it works, and which options Frank recommends from personal experience
• How two-factor authentication and passkeys protect your accounts even when a password has been compromised
• What a credit freeze is, why it is completely free, and why Frank has it turned on for all of his own accounts

Your action checklist from this episode:

• Go to haveibeenpwned.com and check every email address you use regularly
• If any results come back, change the password on every account that used the exposed password
• Stop reusing passwords across multiple sites, especially for email, banking, and financial accounts
• Set up a password manager: LastPass, 1Password, or the built-in manager on your device or browser
• Turn on two-factor authentication for your email, bank, and any financial or medical accounts
• Consider requesting a free credit freeze from all three bureaus: Equifax, Experian, and TransUnion

Related episodes:

• Passwords vs. Passkeys: What's Changing and Why You'll Care -- January 20, 2026

Resources:

• haveibeenpwned.com: free breach lookup tool created by security researcher Troy Hunt
• Credit freeze: Equifax, Experian, TransUnion (all free)
• [email protected]
• YourTechMakeover.com
• BravoITC.com

Support the show: Listeners who contribute $25 or more receive $25 off a one-on-one tech consultation with Frank. Visit YourTechMakeover.com for details.

• (00:00) - Cold open: news headlines, data breaches, and the dark web