Don't share passwords or use fresh sites without the padlock in the URL