Free Tool
Online Safety Assessment
Online safety is mostly a set of small habits: pausing before you click, checking a sender, keeping your software updated, never sharing a password. Answer eight honest questions about what you actually do, and this assessment gives you a safety band — and the three fixes that would help you most. Nothing you answer leaves this page.
An educational assessment, not a security verdict. This quiz gives you a safety band based on your answers, so you can see where to focus. It cannot check your devices or your accounts, and a good score does not mean you are safe.
What this tool does
Most online harm does not need a sophisticated attack. It needs one click on a link in a message, one password reused across accounts, one download from a site that was not what it claimed to be, or one phone call from someone pretending to be a bank. The habits that stop those things are small and learnable, and the difference between people who get caught and people who do not is usually not knowledge — it is whether the habit is automatic when the message arrives.
This assessment asks eight questions about what you actually do, not what you know: do you pause before clicking a link, do you check the sender, do you keep your software updated, do you use unique passwords with a second factor, do you download only from official sources, do you back up your files, do you know what to do if you clicked a suspicious link, and do you talk to your family about scams? Each answer is scored, and the result is a band — strong, mixed, or needs work — with your top three fixes, drawn from the answers where you scored worst.
The assessment is local-only, like everything on this site. There is no account, no submission and no record, and your answers disappear when you close the page. The safety guides linked below — how to avoid online scams, how to spot phishing, and what to do if you clicked a phishing link — cover each habit in depth, so the fixes the assessment suggests can be followed step by step.
Try it
Answer honestly — the assessment is for you, not for anyone else. Nothing is submitted or stored.
Question 1 of 8
Answer the question to continue.
Score so far: 0 of 8 safe habits
How it works
Each question tests one habit, and the scoring is simple: a safe habit scores one, a gap scores zero. The eight questions cover the habits that the safety guides on this site treat as highest-impact: pausing before clicking, checking the sender, updating software, unique passwords with two-factor authentication, downloading from official sources only, keeping backups, knowing the post-click steps, and talking about scams with family. The order is roughly the order of importance, but the assessment does not weight them — a gap anywhere is a gap worth fixing.
The band is set from the total: six to eight safe habits is a strong band, three to five is mixed, and zero to two needs work. The bands are deliberately broad, because the assessment is a guide to focus, not a measurement. What matters is the top three fixes, which are the three questions you answered worst, turned into concrete steps. A person who never updates their software will see that first; a person who does not know the post-click steps will see the triage tool instead.
The assessment asks about behaviour, not knowledge, because the gap between knowing and doing is where safety fails. Knowing that you should pause before clicking is not the same as pausing when a message says your account will close in an hour. The questions are written to catch that gap honestly, and the feedback after each answer explains the habit in one sentence, so the assessment teaches as it goes rather than only scoring at the end.
Limitations
This assessment cannot measure your real safety. It asks about eight habits, and it cannot see your devices, your accounts, whether your software is genuinely up to date, or whether you have already been targeted. A strong result does not mean you are safe, and a result that needs work does not mean you have been harmed — it means there are habits worth changing. Treat the band as a guide to focus, and the top three fixes as a starting list.
- The assessment covers habits you can report honestly. It does not check anything — no devices, no accounts, no breach history.
- The bands are broad by design. Real risk depends on who you are and what you do online, and no eight-question quiz can capture that.
- Nothing you answer is submitted or stored. The result is yours alone, and it disappears when you close the page.
Examples
Example 1 — the un-updated phone. You answer no to keeping software updated: your phone has been asking to install an update for weeks, and you keep dismissing it. Your top fix is to install updates promptly, because most updates fix security flaws that attackers already know about — and a phone that is months behind is an open door, whatever your other habits are.
Example 2 — the unknown post-click steps. You answer no to knowing what to do after clicking a suspicious link. Your top fix is the clicked-a-phishing-link triage tool on this site, which walks you through the steps in order: close the page, change the password if you entered one, call the bank if you entered card details, and report the message. Knowing those steps before you need them is worth more than knowing them afterwards.
Example 3 — the family conversation. You score well on your own habits but no on talking about scams with your family. Your top fix is the family safety quiz and the pause-before-you-click checklist on this site — because the most vulnerable person in a household is often not you, and a short conversation about the grandchild scam or the bank call is what protects them.
Frequently asked questions
What is an online safety assessment?
A set of questions about your everyday habits — clicking, senders, updates, passwords, downloads, backups — that gives you a safety band and a short list of the fixes that would help you most. It is educational, not a verdict.
What is the most important online safety habit?
Pausing before you click. Most harm starts with one click on a link in a message, and a minute of checking — was I expecting this, does the sender match, does the link go where it claims — catches most of it.
Does this assessment store my answers?
No. There is no account, no submission and no storage. Your answers stay in this page and disappear when you close it.
What should I do if I clicked a suspicious link?
Close the page and do not enter anything. If you entered a password, change it on the real site and everywhere it was reused, starting with your email. If you entered card details, call your bank now. The triage tool on this site walks you through it in order.
Is updating my software really that important?
Yes — it is one of the highest-impact habits. Most updates fix security flaws that attackers already know about, and a device that is months behind on updates is an open door, whatever your other habits are.