Methodology

How this checkup works

Am I Secure is a no-login personal security checkup for ordinary household accounts and devices — it is guidance, not a certification or a security score.

Answers stay in this browser session. You answer eight self-reported safeguards; this page adds a few modest observations about this browsing context. The output is a security receipt grouped as Fix now, Improve next, Already protected, and Reported in place.

The eight self-reported safeguards

A website cannot safely read these settings, so every answer is labelled self-reported.

1. 01

   Protect your main email

   Is two-factor authentication or a passkey enabled on your primary email?

   Your email can reset the passwords for most of your other accounts.

2. 02

   Stop password reuse

   Do your important accounts use different passwords stored in a password manager?

   One leaked password should not unlock several accounts.

3. 03

   Enable automatic updates

   Do your phone and computer install operating-system and browser updates automatically?

   Updates close known weaknesses that attackers actively reuse.

4. 04

   Lock every device

   Are all your devices protected by a PIN, password, fingerprint, or face unlock?

   A screen lock limits damage if a device is lost or stolen.

5. 05

   Verify unexpected sign-ins

   When a message asks you to sign in, do you open the service yourself instead of using its link?

   Fake login pages are designed to steal passwords and verification codes.

6. 06

   Create a recoverable backup

   Have you tested restoring a backup of the files and photos you could not replace in the last 12 months?

   A backup protects against loss, device failure, and ransomware.

7. 07

   Check your home router

   Have you changed your home router’s administrator password from the default, and is its firmware updated?

   The router is the shared entry point for devices on your home network.

8. 08

   Review breach exposure

   Have you checked whether your main email appeared in a known data breach?

   A breach can expose credentials that are still being reused elsewhere.

How priorities are grouped

Each answered safeguard lands in one receipt group. There is no overall percentage. Question progress is only how much of this checkup you have reviewed.

• Fix now is a No on a high-leverage safeguard:
  • Protect your main email
  • Stop password reuse
  • Enable automatic updates
  • Lock every device
  • Verify unexpected sign-ins
• Improve next is Not sure on any safeguard, or a No on:
  • Create a recoverable backup
  • Check your home router
  • Review breach exposure
• Already protected is Yes on a practice that can be treated as sound enough for now, not that you are fully secure.
• Reported in place is Yes on a self-reported safeguard this page cannot test. That records your answer; it is not verification:
  • Create a recoverable backup
  • Check your home router

Observed in this browser

Automatic observations are limited to this page. We do not claim your browser is up to date, and we do not silently test tracker blocking.

• Encrypted connection — whether this checkup itself is in a secure context. That only describes this page, not your other accounts or devices.
• Public network address — like nearly every website, this site can see a public network address. That is expected. The receipt does not show the raw address unless you choose to reveal a masked version.
• Browser freshness — an explicit Uncertain note. This page cannot confirm that automatic updates are on.

Breach review

If you have not reviewed breach exposure, we send you to Have I Been Pwned (https://haveibeenpwned.com/). This opens Have I Been Pwned, a separate website. Am I Secure does not collect your email or receive the result.

Start the checkup