CyberNew

Cyber Hygiene Self-Assessment

Ten quick questions on security basics with a score and tailored recommendations. Runs entirely in your browser, nothing is stored.

How this works

Ten quick questions on the basics that stop most attacks. Your score and tips are worked out instantly in your browser.

What we never see

Your answers. They aren't sent, stored or linked to you.

1. Is 2-step verification (MFA) on for email, banking and admin accounts?

2. Do you keep automatic backups, with one copy offline or in a separate account?

3. Are computers, phones and website software updated automatically?

4. Do staff use normal accounts day to day, with admin rights only for IT?

5. Have staff had phishing awareness training in the last year?

6. Is office Wi-Fi WPA2/WPA3 with a strong password and a separate guest network?

7. Does everyone use a password manager with unique passwords?

8. Is antivirus / endpoint protection active on every computer?

9. When someone leaves, is their access removed the same day?

10. Do you have a written plan for what to do if you're hacked?

0 of 10 answered. Answer all for your score.

Need more than a free tool?

Qawex builds, secures and grows websites and systems. Talk to a person.

Related tools

Strong random passwords with a strength meter. Generated on your device, never sent anywhere.

SHA-1, SHA-256, SHA-384 and SHA-512 hashes, computed in your browser.

Read a token's header, payload and expiry. Decode only, nothing leaves your browser.

Check a password against billions of leaked ones. Only a 5-character fingerprint prefix is ever sent.