Cyber Audit

Secure your digital life. Progress is saved automatically.

Secured

Sender Verification

I verify the actual email address (e.g. @amazon.com) before clicking.

Why: Phishing is the #1 cause of breaches. Hackers can spoof names ("Amazon Support"), but they can't easily spoof the actual domain without you noticing if you look closely.

Auto-Lock Enabled

My device locks automatically after 5 minutes of inactivity.

Why: Physical access equals total access. If you walk away for coffee, anyone can insert a malicious USB or steal data in seconds.

Zero Trust for SMS

I never click links in text messages from unknown numbers.

Why: "Smishing" (SMS Phishing) is harder to detect than email phishing because mobile interfaces hide URL details.

Long Passwords

My passwords are at least 12 characters long.

Why: An 8-character password can be cracked instantly. A 12+ character password takes centuries. Length beats complexity.

Active Antivirus

Windows Defender (or equivalent) is running and green.

Why: Even careful users make mistakes. AV is your safety net against drive-by downloads and known malware signatures.

Password Manager

I use Bitwarden, 1Password, or similar. I don't know my passwords.

Why: Humans are bad at randomness. Managers generate unique, complex passwords for every site, preventing "Credential Stuffing" attacks.

App-Based 2FA

I use Authenticator apps (Google/Authy) instead of SMS codes.

Why: SIM Swapping is real. Hackers can steal your phone number and intercept SMS codes. App-based codes live on your device only.

Software Updates

I install OS and Browser updates within 24 hours.

Why: Updates usually contain security patches for vulnerabilities hackers are already exploiting. Delaying updates leaves the door open.

Hardware Key (YubiKey)

My email and bank require a physical USB key to login.

Why: This is Phishing-Proof. Even if you give a hacker your password, they cannot login without physically stealing your USB key.

Data Removal

I actively scrub my info from "People Search" sites.

Why: Social Engineers use public data (your address, relatives, phone) to craft convincing scams to trick you or your company.

Full Disk Encryption

BitLocker or FileVault is active on my laptop.

Why: If your laptop is stolen, encryption ensures the thief gets a paperweight, not your personal files and tax returns.

Current Security Level Vulnerable

Select items to analyze your risk profile.

Clear all progress

MRichard333

Personal Cyber Security Checklist & Online Safety Health Check