PERSONAL CYBERSECURITY FUNDAMENTALS · SELF-PACED · IMMEDIATE ACCESS
The security advice you gave up on wasn't too hard. It was the wrong size.
Personal Cybersecurity Fundamentals is a self-paced course that helps you choose protection that fits your real life — and actually keep using it. Twelve lessons ready the moment you enroll, with new ones publishing weekly through 2026.
Two ways to enroll, from $19/month. Cancel anytime. Immediate access either way.
Plain English, no jargon
Real scenarios, not scary stories
A written plan you walk away with
Recovery built into every module
Taught by Dr. Jennifer Lehtimaki — PhD in cybersecurity, 20+ years in the field.
NINETY SECONDS WITH DR. JEN
Why this course exists
Strong doesn't mean strongest. Strong means you're still using it six months from now.
From $19/month · Cancel anytime · Immediate access
You've probably tried this before.
Most people have already attempted the thing they were told to do. They started a password manager. They meant to turn on multifactor authentication. They downloaded something, got halfway through setup, and stopped.
-> Then it usually goes one of these ways:
-> There wasn't enough time
-> It cost more than it seemed worth
-> It added friction to something you do ten times a day
-> The instructions assumed you already knew things
-> It didn't feel like the risk applied to you
-> You were genuinely worried about locking yourself out
None of those are character flaws. They're design problems.
A protection you abandon may leave you less protected than a smaller one you use every day.
Most people think they're already covered. Usually they're not.
If you have credit monitoring, you have something useful. But look at what it actually does: it tells you after your information has been used. It's an alarm, not a lock.
That was a reasonable place to stop when identity theft mostly targeted wealthy people. It isn't anymore. If you have a phone number, a social media account, or any online presence at all, you're on the list — because criminals now use automated tools and AI to scan enormous volumes of public data, find the easiest targets, and act on what they find. At that scale, nobody is being singled out. You just have to be reachable.
So the question changes. Not "will I find out if something happens?"
but "what have I already done to make it less likely?"
That's the difference between reactive and proactive, and it's what this course is for.
This course starts with a different question.
Not "what's the strongest option?" — but "what will still be running in six months?"
Every choice in this course gets weighed against four pressures:
RISK
What could happen, how serious would it be, and how plausible is it?
COST
What money, time, equipment, or support does it require?
CONVENIENCE
How much friction does it add to normal life?
EFFORT
How hard is it to set up, maintain, and recover?
You'll use that lens on your own accounts, in a guided Playbook, and leave with
a written plan sized to your life — not to a security professional's.
What you'll be able to do
By the end of the course you will be able to:
Name the accounts that would cause the most damage if you lost control of them — and protect those first
Build your own Personal Threat Model: what matters, who might target it, how compromise happens, what the consequences are
Explain why password reuse is the single biggest credential risk, and fix it without memorizing anything
Set up and actually maintain a password manager, including the part most people skip: recovery
Choose the right form of multifactor authentication for each account — and know why two steps aren't always two factors
Recognize a sign-in prompt you didn't start, and know exactly what to do with it
Protect your primary email and recovery channels, the systems that can reset everything else
Have a tested account recovery plan before you need it
From $19/month · Cancel anytime · Immediate access
What's inside — and what's coming
2 MODULES LIVE NOW
8 MODULES PLANNED
NEW LESSONS PUBLISHING WEEKLY
FOUNDING MEMBERS GET ALL OF IT
Module 1
Security Is Risk Management
-> Security Is Risk Management
-> Build Your Personal Threat Model
-> Who Might Target You—and Why?
-> What Information Has Value?
-> What Happens If You Lose an Account?
-> Convenience vs. Security: Build Habits That Last
Available now — 6 lessons
Module 2
Protect Your Accounts and Digital Identity
-> How Account Takeovers Happen
-> Passwords That Actually Protect You
-> Set Up and Use a Password Manager
-> Choose the Right Form of Multifactor Authentication
-> Protect Your Primary Email and Recovery Channels
-> TBD
Available now — 6 lessons
Module 3
Security Is Risk Management
-> Security Is Risk Management
-> Build Your Personal Threat Model
-> Who Might Target You—and Why?
-> What Information Has Value?
-> What Happens If You Lose an Account?
-> Convenience vs. Security: Build Habits That Last
Publishing [month]
Module 4
Secure Your Devices
Publishing [month]
Module 5
Protect Your Home Network and Connections
Publishing [month]
Module 6
Recognize Scams and Social Engineering
Publishing [month]
Module 7
Protect Your Privacy and Public Information
Publishing [month]
Module 8
Respond, Recover, and Build Resilience
Publishing [month]
Six lessons per module, about twelve minutes each — 48 lessons and roughly 9.5 hours of instruction when the course is complete. Twelve lessons are available the moment you enroll, and the rest publish weekly through 2026.
Every lesson includes a Scenario Lab — a realistic situation with more than one defensible answer — a Playbook Activity that produces something you keep, and a Quick Review.
You're enrolling early, and the price reflects that. Modules 1 and 2 are ready today. The remaining six publish weekly through 2026, and they land in your account automatically — no upgrade, no second purchase, no price change for you.
Where you're starting from
These are starting points, not labels. Most people recognize themselves in more than one.
If you're managing your own accounts
Your primary email, your money, your identity.
First priorities: unique passwords, multifactor authentication, a recovery plan that works.
If you're a parent or caregiver
Family accounts, children's identity, shared devices.
First priorities: separate accounts, sensible controls, backups.
If you're a working professional
Client information, work access, your reputation.
First priorities: separating work from personal, stronger authentication where impact is highest.
If you're an executive or public figure
Targeted fraud, impersonation, travel exposure.
First priorities: phishing-resistant methods where supported, plus travel and recovery protocols.
Who this isn't for: People looking for a technical certification, or for a tool that removes risk entirely. Security is risk management. This course teaches you to manage it well, not to eliminate it.
How it works
1
Enroll and get in today.
Access is immediate. No waiting for a cohort to open.
2
Work at your pace.
Short lessons. Watch in order or jump to the account keeping you up at night.
3
Fill in the Playbook as you go.
Guided pages that turn each lesson into a decision you've actually made.
4
Leave with a plan, not a to-do list.
One sustainable improvement at a time, in an order that protects your recovery options first.
Security Tip:
The Playbook never asks you to write down a password, recovery code, or account number. Not once. You record categories only. That's a deliberate design choice, and it's how the whole course is built.
Hi, I'm Dr. Jen.
PhD, CYBERSECURITY · 20+ YEARS IN CYBERSECURITY AND RISK MANAGEMENT · CONSULTANT · TEACHER · FRIEND
I've spent two decades in cybersecurity and risk management, with a doctorate in the field. For most of that time I worked on the part most people don't think about until it's too late — protecting identity and personal information.
Then I shifted my focus to prevention and education. Identity theft is too common and too disruptive to be something you only react to.
I built this course for the same reason I built my practice: everyone deserves the same level of protection that businesses invest in. Big-business protection, for real life.
— Dr. Jennifer Lehtimaki, Founder, Leaf Hill Cyber
"An unused security key protects nothing. An abandoned password manager protects nothing. A recovery plan you cannot access is not a recovery plan."
Hear the short version first. Dr. Jen on Real Money Talks with Loral Langemeier — "Identity Theft Prevention Is Required For Everyone."
From $19/month · Cancel anytime · Immediate access
BEFORE YOU DECIDE
What actually happens when you enroll
No jargon. No scare stories. Plain English, start to finish.
Two ways to enroll
Modules 1 and 2 are ready today. The remaining six publish weekly through 2026 and land in your account automatically, at no extra cost.
One payment
Founding-member offer
$97
once · 6 months of access
-> Immediate access to everything published so far
-> Every module released during your 6 months, all eight are complete by December 31, 2026
-> Complete Playbook
-> One payment, no subscription to manage
Monthly
$19
per month · cancel anytime
-> Full course, immediate access
-> Every lesson published while you're enrolled — new content weeklynthrough 2026
-> Complete Playbook
-> No deadline. Take one lesson a week if that's what fits. Stay as long as it's useful, cancel the moment it isn't.
-> New modules land in your account as they publish
Founding-member pricing, while the course is still being built out. Secure checkout via Stripe. Because this is a digital course with immediate access, enrollments are non-refundable — the monthly option is there so you can start small and cancel anytime.
FAQ
I don't have much time. How long does this take?
Lessons are short and self-contained. Most people work through one in a sitting. On the monthly plan there's no deadline at all — one lesson a week is a perfectly reasonable pace, and finishing one lesson and acting on it is worth more than starting all of them.
Which plan should I pick?
If you want the whole course as it publishes and would rather not manage a subscription, take the $97 option — one payment, six months, and every module is complete inside that window. If you'd rather start small or go slowly, take the $19/month option: no deadline, cancel in one click whenever you're done.
Only two modules are ready. Why enroll now?
Because the price is lower now than it will be, and because the two modules that are ready are the foundation — everything after them builds on the decisions you make in Module 1. New lessons publish weekly and appear in your account automatically. If you'd rather wait for the full course, that's a completely reasonable choice; the monthly option is there if you'd rather start now and see how it goes.
How do I cancel the monthly plan?
One click, from your account, any time. No email, no phone call, no reason required.
Can I get a refund?
No — because access to the full course is immediate, enrollments aren't refundable. That's why the $19/month option exists: you can start small, see whether it's right for you, and cancel anytime.
I'm worried I'll lock myself out.
That's a reasonable fear, and it's the most common reason people abandon security tools. It's also why recovery is built into every module rather than saved for the end. You'll set up a fallback before you change anything important, and you'll test it.
Is this too technical for me?
No prior background is assumed. Terminology is explained in plain language before it's used. If a lesson needs a technical term, you'll get the idea first and the word second.
I'm not sure any of this applies to me.
That's the first thing the course addresses — and it's worth knowing that the answer has changed. Identity theft used to concentrate on wealthy targets. Now automated tools scan public data at a scale where being reachable is enough to put you in scope. Module 1 is about working out which of those risks genuinely fit your life, so you're not spending time or money on protection you don't need.
I already have credit monitoring. Isn't that enough?
Monitoring is useful, but it's an alarm, not a lock — it tells you after your information has been used. This course is about the part that comes before that: reducing the chance it gets used at all, and knowing exactly what to do if it is.
Do I need to buy anything else?
No. Some lessons mention paid tools where they're relevant, and you'll always be shown what the free or already-included option is.
What does 'content added weekly' mean for me?
The course is live now and growing through 2026. New lessons appear in your account as they publish, at no additional cost while you're enrolled.
Do I have to write my passwords into the Playbook?
Never. The Playbook is built so that you never record a password, code, or account number anywhere in it.
Start with one improvement you'll keep.
Not a perfect setup. Not everything at once. One protection, sized to your life, with recovery in place — and then the next one.
From $19/month · Cancel anytime · Immediate access · Founding-member pricing
Personal security isn't about living in fear. It's about living with confidence.
Ready to get started?
© 2026 Leaf Hill Cyber LLC. All rights reserved.