How hackable are you?
Eleven honest questions, two minutes, a score out of 100 — and your personal fix list, biggest impact first. Nothing you answer leaves your browser.
The threat is industrializing
AI removed the old tells. Scams that used to need skill now need software — which means volume, and volume means you, not just companies.
of audio can be enough to clone a voice convincingly (McAfee research)
growth in deepfake fraud attempts on financial institutions over three years (Signicat)
of organizations hit by a deepfake attack in the prior 12 months (Gartner, 2025)
The five moves that actually matter
Password manager
Unique passwords everywhere. Leaked-password replay is still the most common way in.
2FA on your email
Email resets everything else. App or passkey — not SMS.
Passkeys
No secret to type = nothing to phish. Turn them on wherever offered.
Verify, don't trust
Urgent request? Open the app yourself. Call back on the known number. Code word for family.
Auto-everything
Auto-updates kill most malware. Auto-backups kill ransomware leverage. Set once, forget.
None of this needs technical skill. All of it is free or nearly free.
The kit
Password manager
The afternoon project that fixes half this list.
Hardware security key
Phishing-proof 2FA for email and money accounts.
Your phone's hotspot
The free VPN you already own for café banking.
One backup drive or cloud plan
Turns disasters into inconveniences.
// gear categories, not endorsements — partner links may appear here later, and will be labeled when they do.
// statistics paraphrased from published research by McAfee, Signicat and Gartner, checked 2026-07-17. The check itself is an educational self-assessment, not a security audit.