If you came across an online forum that offered free Dashlane for life, and all you had to do to claim the offer was enter your Dashlane email and Dashlane Master Password, would you try it?

If this scenario raises your eyebrows, you’d be right to be skeptical.

Recently, a scammer on Reddit was trying this exact phishing scheme. This isn’t the first time it’s happened to Dashlane, and it won’t be the last. We want to remind you to never share your Master Password with anyone—including Dashlane employees. (Our support team will never ask you for your Master Password.)

In order to help you avoid phishing scams like this in the future, here are some tips, as well as an incredible quiz from Google to sharpen your eye.

Let us know how you score on the quiz in the comments below!

How can you avoid phishing?

What is phishing? Phishing is when someone tries to trick you into giving away your sensitive personal information, payment information, or passwords. These scams are typically carried out over email, but can also happen on websites and message boards—like the Reddit thread we mentioned earlier—or over the phone.

Tips to avoid phishing scams:

  • Validate that the “from” address on a suspicious email is legitimate
  • Hover your mouse over any link in an email before clicking, and make sure the address looks like it leads to where it’s supposed to
  • Don’t open attachments from people or companies you don’t know
  • Never send plaintext passwords or payment information in email or direct messages

Are you ready to test your knowledge? This new quiz from Google tests whether you can spot a phishing email and teaches you what to look for to determine legitimacy. When you take the quiz, we highly recommend using a random name and email address to practice with—just to be extra cautious.

Phishing Test from Google