100% Free · Cybersecurity education

SMART ONLINE = SAFE OFFLINE

A free cybersecurity programme for teenagers - taught in schools across Bucharest & Ilfov.
My role: I adapted this programme for teenagers and I teach it in schools
Your first firewall isn't your computer - it's your own thinking.
Smart Online = Safe Offline logo

About the programme

Smart Online = Safe Offline is a free cybersecurity education and awareness programme that I run and teach in schools and high schools. Despite its name, it is not a course about computers - it is a course about people. About behaviour, manipulation, trust, and the decisions we make when no one is next to us to tell us what is right.

Most modern attacks do not start by breaking a computer - they start by manipulating a person. A seemingly trivial message, a link, a photo, a promise, a fake relationship, a game, a contest. Teenagers need to learn that, online, the first firewall is not the computer - it is their own critical thinking. The programme builds healthy reflexes, critical thinking and digital responsibility - without cultivating fear.

How it started

The material at the core of the course was originally created by Alexandru Carstoiu, a risk-management and corporate-governance specialist, to train company employees in information security. Over time it became clear that the most vulnerable group was being left out of these programmes entirely: teenagers. I took the original material, adapted it completely for a young audience, reorganised it from a teaching perspective and enriched it with current examples, case studies and real situations teenagers face every day. Today the course is in permanent development - because the world of cyberattacks never takes a break.

By the numbers

3

years of free presentations in Bucharest schools

1 in 5

teenagers (14-17) has lived through an online-violence experience (UNICEF 2026)

91%

of cyberattacks start by manipulating a person, not by breaking a computer

0 €

cost for the institution, regardless of the number of participants

What we cover

Across roughly 6 hours and 200+ slides, every topic is illustrated with concrete examples, case studies and situations inspired by real events:

Cybersecurity fundamentals Phishing, smishing & vishing Malware, ransomware & spyware Strong passwords & 2FA Social-media security Digital identity & data theft Fake news & disinformation AI used in cyberattacks Social engineering & manipulation Online fraud & scams Romance scams & fake profiles Grooming & the Loverboy method Cyberbullying & its effects Sexting & personal images Online games & hidden risks Apps used by teenagers Public Wi-Fi security Mobile device protection Digital protection best practices Careers in cybersecurity

Key terms, in plain language

Half of staying safe online is simply knowing what the words mean. These are the core ideas I explain in every session, in the plainest language I can find.

Phishing

A message that pretends to come from someone you trust - a bank, a game, a friend - to trick you into handing over a password, a code or money. The tell is almost always urgency: do it now, or else.

Social engineering

Hacking the person instead of the device. Rather than break a system, the attacker manipulates emotions - fear, curiosity, the wish to help - so that you open the door yourself.

Malware

Any software built to harm you or spy on you, hidden inside an app, a file or a link. When something free feels too generous, malware is often the real price.

Ransomware

Malware that locks your files and demands payment to release them. The safest defence is a boring one: back up your data, so no one can hold it hostage.

Two-factor authentication

A second lock on your account - a code or a tap on your phone - so that a stolen password alone is not enough to get in. It is the single most useful habit I teach.

Digital footprint

Everything the internet quietly remembers about you: posts, photos, likes, locations. You cannot erase it, but you can choose what you add to it.

A look inside the course

Attack surface, attacker mindset, the cyber-defence pyramid.
Attack surface, attacker mindset, the cyber-defence pyramid.
The invisible battle, where your data lives, think before you click, stronger together.
The invisible battle, where your data lives, think before you click, stronger together.

Who it's for

Students (grades 7-12)

The core audience - teenagers building their digital autonomy, who spend most of their time on social networks, games and apps.

Parents

Often the first to notice a change in behaviour or a warning sign - the course gives them the tools to spot it early and act.

Teachers & counsellors

A practical framework to talk with students about online safety, manipulation and mental health.

The school as a whole

Protecting a teenager is teamwork between the teenager, the family and the school - together, the strongest prevention team.

Logistics

6 h
total duration
200+
slides
VII-XII
grades, plus parents & staff
Bucharest & Ilfov
in person, in your school

One session, in a single day: a large room with a projector, two 15-minute breaks and one 30-minute break, no special equipment or cost, adapted to each institution. Free for schools, high schools and colleges across Bucharest and Ilfov.

What I see when I teach it

After three years of doing this in front of real classrooms, the same pattern keeps coming back: teenagers are not careless, they are unprepared. Nobody ever sat down and explained to them how the manipulation actually works.

The questions I hear most are surprisingly practical - How do I know if a link is fake? What happens if I already clicked? Can someone really see my location? - and the moment that changes a room is never a statistic. It is a real, anonymised example of a trick that almost worked on someone their own age. That is when the phones go down and people lean in.

What surprises students most is that the strongest attacks rarely involve code at all. They involve a fake profile, a flattering message, a prize that does not exist, a sense of urgency. Once they see that the target is their attention and their trust, not their device, the whole subject clicks - and prevention stops feeling like a rule and starts feeling like common sense.

The message

“The most powerful antivirus in the world is an informed person.”

Questions and answers

What is Smart Online = Safe Offline?

It is a free cybersecurity education and awareness programme for teenagers, created and taught by Nicholas Carstoiu in schools across Bucharest and Ilfov. It runs to more than 200 slides and covers phishing, online scams, manipulation, privacy and digital responsibility.

How much does it cost?

Nothing. The programme is free for schools, students, teachers and parents.

Who is it for?

It is built for teenagers, and sessions can also be run for teachers and parents, because online safety at that age is a shared responsibility rather than something a young person handles alone.

How can a school request a session?

Schools in Bucharest and Ilfov can request a dedicated session for students, teachers and parents through the contact form on the site. Nicholas replies personally to every request.

Bring it to your school

If you represent a school, high school or other educational institution in Bucharest or Ilfov, you can request a dedicated session for students, teachers and parents. I reply personally to every request and do my best to bring this programme to as many teenagers as possible.

PDF One-pager (PDF)Everything about the programme on a single page. Download →

The course material was originally created by Alexandru Carstoiu for corporate training and was adapted for teenagers by Nicholas Carstoiu; the programme, its adaptation and all the materials on this page are their intellectual property.
They are shared here so the work can be understood and appreciated, and so that schools and educators can request the programme and benefit from it.
They may not be copied, reproduced or used commercially without written permission.