Free Tool
Privacy Risk Assessment
Privacy is not a switch — it is a set of habits, and most people are strong in some and weak in others. Answer eight honest questions about your passwords, your settings, your sharing and your devices, and this assessment gives you a risk band — low, moderate or high — with the three actions that would help you most. It is educational, not a verdict, and nothing you answer leaves this page.
An educational assessment, not a security verdict. This quiz gives you a risk band based on your answers, so you can see where to focus. It cannot measure your real risk: it does not check your accounts, your devices or the internet, and a good score does not mean you are safe.
What this tool does
Your privacy risk is the sum of many small decisions: whether your passwords are unique, whether two-factor authentication is on, whether your social profiles are public, whether you reuse the same email everywhere, whether your phone's location and your apps' permissions are set thoughtfully. No single one of them decides your safety, and no single fix makes you private — but the combination does, and an assessment that asks about all of them gives you a clearer picture than any one tip.
This assessment asks eight questions across those areas. Each answer is scored, and the total puts you in a band: low, moderate or high exposure. More useful than the band is the list of your top three actions — the three answers where you scored worst, turned into the concrete steps that would help most. A person who reuses one password everywhere will see that first; a person whose social profiles are public will see that instead. The assessment meets you where you are, rather than handing everyone the same list.
The assessment is local-only, like everything on this site. There is no account, no submission and no record. Your answers disappear when you close the page, and the result is yours alone. The privacy guides linked below cover each area in depth — protecting your online identity, your digital footprint, and how websites track you — so the actions the assessment suggests can be followed step by step.
Try it
Answer honestly — the assessment is for you, not for anyone else. Nothing is submitted or stored.
Question 1 of 8
Answer the question to continue.
Score so far: 0 of 8 good habits
How it works
Each question tests one habit, and the scoring is simple: a good habit scores one, a gap scores zero. The eight questions cover the areas that research and the privacy guides on this site treat as highest-impact, in rough order of importance: unique passwords, two-factor authentication on email and banking, social profiles not public, location and permissions reviewed, no reused password on email, a password manager in use, old accounts deleted, and a habit of checking what you share before you share it.
The band is set from the total: six to eight good habits is a low exposure band, three to five is moderate, and zero to two is high. The bands are deliberately broad, because the assessment is a guide to focus, not a measurement — it cannot see your real accounts, and a person can score well on habits and still have an old breach in their past. What matters is not the band but the top three actions, which are the three questions you answered worst, turned into steps: if you scored zero on unique passwords, the action is to install a password manager and change your email password first.
The assessment's design follows an honest principle: ask about behaviour, not about knowledge. Knowing that passwords should be unique is not the same as having unique passwords, and the questions ask what you do, not what you know. That is why the answers are useful even to people who already know the advice — the gap between knowing and doing is where privacy risk lives.
Limitations
This assessment cannot measure your real risk. It asks about eight habits, and it cannot see your accounts, your devices, your breach history, or what the internet already knows about you. A low-exposure result does not mean you are safe, and a high-exposure result does not mean you have been harmed — it means there are habits worth changing. Treat the band as a guide to focus, and the top three actions as a starting list, not a verdict.
- The assessment covers habits you can report honestly. It does not check anything — no accounts, no devices, no breach databases.
- The bands are broad by design. Privacy risk depends on your threat model — who you are, what you do, and who might be interested — and no eight-question quiz can capture that.
- Nothing you answer is submitted or stored. The result is yours alone, and it disappears when you close the page.
Examples
Example 1 — the reused password. You answer no to unique passwords: you use one password for almost everything. Your top action is to install a password manager and change your email password first, then your banking, then the rest — because access to your email lets an attacker reset almost everything else. One change, to one password, removes the biggest single risk.
Example 2 — the public profile. You answer no to social profiles not being public: your phone number and birthday are visible to anyone. Your top action is to change the audience on those fields to friends-only or remove them, and to review your old posts for anything that gives away where you live or work.
Example 3 — the good habits, the old accounts. You score well on passwords, two-factor authentication and settings — but no on deleting old accounts. Your top action is the digital footprint checklist on this site, which walks you through finding and closing the accounts you no longer use, each of which holds a copy of your data and a possible way in.
Frequently asked questions
What is a privacy risk assessment?
A set of questions about your habits — passwords, settings, sharing, devices — that gives you a risk band and a short list of the actions that would help you most. It is educational, not a verdict: it guides your focus, it does not measure your real risk.
Is my privacy risk high if I reuse one password?
It is the single biggest gap for most people. A reused password means one breach compromises every account that shares it. Fix it first: install a password manager, and change your email password before anything else.
Does this assessment store my answers?
No. There is no account, no submission and no storage. Your answers stay in this page and disappear when you close it.
What is the most important privacy habit?
Unique passwords with two-factor authentication on your email and banking. That combination protects the accounts that protect all the others, and it is the highest-impact change for most people.
Can a quiz tell me if I am being tracked?
No. Tracking is invisible by design — this assessment asks about your habits, not about what trackers know. The browser fingerprint demo and the how-websites-track-you guide on this site explain what tracking actually collects.