Account Security Score Checker
Answer 10 questions and get your personal security score with specific gaps. Takes 2 minutes. Nothing is stored.
Loading quiz…
Why Your Security Score Matters
Most account breaches happen not through sophisticated hacking but through predictable, preventable gaps: reused passwords, no 2FA, no backup codes. This score shows you exactly which gaps you have and how to close them.
A score of 10/10 means that even if an attacker has your password from a data breach, they still cannot access your accounts.
Frequently Asked Questions
How is my score calculated?
Each question you answer Yes adds one point, giving a final score out of 10. Anything you answered No is listed as a gap with a specific fix. The questions are ordered so the most critical controls — 2FA on email, 2FA on financial accounts, and unique passwords — are evaluated first.
Is 10/10 a guarantee that I will never be hacked?
No score can guarantee that. The quiz measures your security habits against the most common attack patterns: credential stuffing, phishing, and SIM swap. A perfect score means you have the right protections in place, but no account is completely immune — stay alert to phishing emails and keep software updated.
What should I fix first if my score is low?
Start with the highest-impact items: enable 2FA on your email account first, because email controls password resets for everything else. Next, set up a password manager with unique passwords per site, save your backup codes, and switch any SMS 2FA to an authenticator app.
How often should I retake the quiz?
Retake it whenever you make a security change, and at least once a year. It is also worth re-running after a data breach affects you, after changing phones (to confirm backup codes still work), or when a service you rely on introduces passkey or hardware key support.
How to use the Account Security Score Checker
- Answer each question honestly. Click Yes or No for all ten questions. There are no right-answer traps and no personal data is collected — you are the only person who sees the result, so accuracy helps more than a flattering score.
- Understand what each question covers. The quiz walks down the attack ladder one control at a time: 2FA on your email, 2FA on financial accounts, authenticator apps versus SMS, a password manager, unique passwords, saved backup codes, hardware keys or passkeys, breach monitoring, password length, and phishing awareness.
- Read your final score and label. You get a score out of 10 with a coloured verdict: green for well protected (8+), amber for needs improvement (5-7), red for high risk (below 5). The bar shows your percentage at a glance.
- Work through the gaps list. Every question you answered No appears as a concrete action item. Do not try to fix everything at once — handle the items at the top of the list first.
- Apply the fixes, then retake. Click Retake quiz after you have enabled 2FA, switched to a password manager, or saved backup codes, and watch the score climb as each habit locks in.
What the score measures — and its limits
Your score is a composite heuristic: it turns ten self-reported security habits into a single number so you can see, at a glance, where you stand. The factors were chosen because they are the controls that actually stop the world's most common account-takeover paths. Credential stuffing — trying stolen username and password pairs on site after site — is defeated by unique passwords from a manager. Phishing is defeated by 2FA, and more firmly by authenticator apps, hardware keys, and passkeys. SIM-swap attacks are defeated by moving 2FA off SMS. Backup codes keep you from locking yourself out, breach checks warn you early, and length and uniqueness make brute-force attacks impractical.
No single metric is definitive, and an honest quiz should say so. This score summarises your security habits, not your absolute risk: it cannot inspect your actual passwords, cannot confirm whether a site hashes them properly, and relies on your own answers for phishing awareness. Two people with the same score can face very different threats — one may use a brand-new email address, the other an address leaked in a dozen breaches. That is why the gaps list matters more than the number: each item is a concrete, verifiable action you can take today, and taking them all is what turns a good score into genuinely good protection.
Treat the score as a checklist in disguise. Work from the top: secure your email with 2FA, then your financial accounts, then standardise on a password manager with a long master passphrase, save backup codes, and switch every SMS code to an authenticator app where the service allows it. Retake the quiz after each change. The value of the tool is not the number itself but the sequence of concrete upgrades it walks you through — and the quiet confidence that comes from knowing exactly which of your accounts would survive a credential leak tomorrow.