Click each item you've already done. Your security score updates in real time. Everything runs locally in your browser — no data is sent anywhere.
I have 2FA turned on for my primary email account using an authenticator app or hardware key.
My email password is not used on any other website or service.
I use a password manager to generate and store my passwords securely.
I've checked my email forwarding and filter settings for suspicious rules set up by attackers.
My backup/recovery email address is up to date and I still have access to it.
I've checked my email provider's security dashboard for unfamiliar logins in the last 30 days.
I know the 10 red flags of phishing emails and can identify suspicious messages.
I've set up passkeys for accounts that support them, replacing password-only login.
I've signed out of email sessions on devices I no longer use or don't recognize.
I've checked my email address against a breach database (like Have I Been Pwned) in the last 6 months.
Need help completing any of these? Our guides walk you through every step.
Browse Security Guides