Trusting the Internet can be one of the silliest things you can do, especially when it comes to private matters. While what you do within the comfort of your own circle deserves to stay within its parameters, sometimes things don’t play that way.

Some celebrities found that out the hard way this week when their “personal” photos were hacked from their iCloud accounts and leaked online. With the world frantically sharing the photos left and right, this has turned all eyes toward Apple and the security of its cloud operation.

By now you’ve probably heard about the avalanche of celebrity nude photos that slammed the Web on Labor Day. But amid the chaos of FBI investigations, celeb denials and Apple PR releases that say basically nothing, understanding how the attackers executed the hack — and how to prevent it from happening to you — hasn’t been so clear.

Apple recommended that all users enable two-step verification “to protect against this type of attack,” but the truth about iCloud’s two-step security is a little more complicated than Apple’s letting on, and turning it on probably wouldn’t have prevented the celebrities’ pics from getting hacked in the first place.

To help sort through the confusing mess, we’ve broken down everything you need to know about iCloud’s security and how you can use two-factor authentication and other security steps to keep some perv named 4chan from blasting your nips all over the Internet.