Self-assessment
Security Checkup
Twelve quick questions, an honest score, and a fix-first plan. Three minutes, no signup — your answers never leave your browser.
Your privacy on this page
- Scoring happens entirely in your browser. Your answers and your score are never sent to us — your last score is saved only on this device.
Your accounts
Your devices
Your data
Your habits
A few questions are still unanswered — they're highlighted below.
Your result
Your action plan — biggest wins first
Nothing urgent — you're doing everything on our list. Keep it up!
-
A password manager is the single biggest upgrade: it makes every password strong and unique without memorizing anything.
See reputable free password managers → -
Your email can reset every other account, so its password matters most. If it's reused, one leaked site exposes everything.
Check if a password has leaked → -
2FA blocks most account takeovers even when a password leaks. Start with your email, then banking.
How to set up 2FA → -
Knowing which breaches you're in tells you exactly which passwords to change first.
Check your email now (free) → -
An unlocked phone is your email, banking, and 2FA codes in one place. A PIN or biometric lock is two minutes of setup.
-
Most attacks exploit bugs that updates already fixed. Automatic updates close the door without you thinking about it.
-
Built-in protection (Windows Defender, macOS XProtect) is good — it just has to be on. You don't need to buy anything.
See reputable security software → -
Backups turn ransomware and a lost phone from a disaster into an inconvenience. Automatic beats remembering.
See reputable backup tools → -
Those details answer security questions and make impersonation scams convincing. Review what's visible to non-friends.
-
Manufactured urgency is the engine of most scams. The safe move is always: close the message, open the real site or app yourself.
Paste a suspicious text to check it → -
Caller ID is easy to fake and scammers answer verification questions confidently. Only a call YOU place to the official number is safe.
Read how these scams work → -
Avoiding is fine; checking is better. Paste any link into Cactus to see where it really goes before you trust it.
Try the link checker →