Why a checkup, not another scanner
Most people who are hacked are not beaten by clever technology. They reuse a password, miss an update, click a convincing link or hand over a code on the phone. None of that shows up in a network or browser test, because it lives in habits and settings you control. This checkup asks about those directly and tells you the few things most worth doing, in order, rather than handing you a long list of everything.
What the questions cover
- Accounts: password habits, two-step verification, breach exposure and recovery details.
- Scams: how you handle calls and links, the moment where most account takeovers begin.
- Devices: updates, screen locks, backups, built-in protection and where apps come from.
- Browser: extensions and site permissions.
- Networks: public Wi-Fi and your home router.
How the plan is prioritised
Each answer that reveals a gap adds an action. Actions are grouped as do today (the changes that stop the most common takeovers, such as two-step verification on email), this week and when you can. Within each group the highest-impact, quickest fixes come first, with a rough time estimate. Impact is our judgement of how much a step reduces common real-world risk, not a measurement. Every action says why it matters and gives concrete steps, and links to a guide or tool when you want more detail. The plan also lists what you already do well, because knowing what is working is part of staying motivated.
What this checkup is not
It is not a security audit and it cannot verify your answers. It does not scan your devices, test your passwords or tell you whether you have been breached. We deliberately never ask for a password or any account detail. The number of habits in place is a count of what you reported, not a rating of how safe you are, and a perfect result would not make anyone immune to a determined attacker.
Who this is for
It is written for ordinary internet users: people who bank on a phone, shop online, use email and social media and want to know which few changes matter most. If you manage servers or company data, you need a different kind of assessment. If you have just fallen for a scam, start with the guide on what to do after clicking a phishing link, then come back here to close the gaps that made it possible.
Privacy
Your answers stay in your browser. They are not uploaded, saved or logged. You can print the plan or save it as a PDF from your browser's print dialog, and nothing is kept once you close the page.
Last reviewed 2026-10-29. Found a mistake? Report a correction (how we handle them).