# secure (10-secure.com)

People say secure when they want something safe from harm, theft, or snooping. They might mean a locked door, a password-protected account, or just a feeling of safety.

## What a model may hear
- TLS/SSL encryption (web protocols and networking): assume HTTPS is required, add certificates, or refuse plain HTTP connections
- access control and authentication (operating systems and application security): require logins, permissions checks, or role-based restrictions
- secure boot or trusted execution (hardware and firmware): enable verified boot chains or hardware security modules
- secure erase or storage (data management and compliance): apply cryptographic wiping or encrypted-at-rest requirements

## Where people and models part ways
- Says: "make this secure"
  Means: add a password or lock it down generally
  May be taken as: implement full TLS mutual auth, disable all non-encrypted paths, or break existing workflows
  Say instead: "add password protection and encrypt data in transit with HTTPS"
- Says: "is this secure?"
  Means: is my data safe from hackers?
  May be taken as: run a full security audit, demand CVE scans, or report theoretical protocol vulnerabilities
  Say instead: "does this protect my data from unauthorized access?"
- Says: "secure the file"
  Means: stop others from opening it
  May be taken as: apply military-grade encryption, set complex ACLs, or move it to a hardware security module
  Say instead: "password-protect the file so only I can open it"
- Says: "secure connection"
  Means: private and not eavesdropped
  May be taken as: require client certificates, specific cipher suites, or VPN tunneling
  Say instead: "encrypted connection that hides data from network snooping"

## Tips
- say what you are securing against: thieves, snoops, or accidents
- mention passwords, encryption, or locks explicitly if that is what you want
- say who should have access, not just that access should be limited
- specify if you need legal compliance or just practical protection
- ask for the simplest method first, then add layers if needed

## Often confused with
- safe: broader, includes physical harm not just data
- private: hides who did what, not just protects from attack
- encrypted: specific technical method, not the general goal
- authenticated: proves identity, does not alone protect data
- hardened: removes features to reduce attack surface, more extreme
- locked: often means password only, no encryption