How Much Do You Actually Know About Privacy?
Eight questions, marked as you go with the reasoning. Then rate your own habits for an exposure score and a short list of what to fix first.
Part 1 — Knowledge
Question 1 of 8
-
You clear your cookies. Which of these can still recognise your browser?
Fingerprinting stores nothing on your device. It reads traits that are already there — how your GPU renders an image, which fonts are installed, your screen size — so clearing cookies changes none of it.
-
What does a VPN hide from the website you are visiting?
A VPN replaces the address and location the site sees. It does not change your device fingerprint, and it certainly does not hide who you are once you log into an account.
-
Your VPN is connected but DNS queries go to your provider's resolver. What leaks?
A DNS lookup happens before the connection. If it travels outside the tunnel, your provider still learns every hostname you asked for, even though the page contents stay encrypted.
-
Which password is hardest to crack?
Length beats complexity. Five random words is a far larger search space than seven mixed characters, and the other two follow patterns that cracking tools try first.
-
Why is PPTP a bad choice today?
MS-CHAPv2, which PPTP relies on, has been practically defeated for well over a decade. Traffic captured today can be decrypted, so speed is irrelevant.
-
What does a kill switch do when the VPN drops?
It blocks traffic rather than letting it fall back to your normal connection. Without it, a brief reconnect exposes your real address to whatever you had open.
-
A page can read your local network address through which browser feature?
WebRTC gathers candidate network addresses to connect peers, and JavaScript can read them. Modern browsers replace local candidates with randomised .local names to stop this.
-
Which second factor is strongest?
Phone numbers can be taken over and email is often the account being protected. An app or hardware key does not depend on either.
You scored 0 out of 8 —
Part 2 — Your habits
No right answers here — only what you actually do.
-
Do you reuse any password across more than one site?
Reuse is the single failure that turns one breach into many. A password manager plus a generated value per site removes it entirely.
-
Is two-factor authentication on for your main email account?
Email is the account that can reset all the others, so it is the one to protect first.
-
Do you use a VPN on public or shared wifi?
A network does not have to be malicious to be unsafe — a misconfigured one is enough.
-
Do you install operating system updates within a week or so?
Most exploited vulnerabilities already had a fix available. Updating is security work, not housekeeping.
-
Have you reviewed what your browser extensions can read?
An extension with "read all site data" permission can see everything you see, including banking pages.
-
Do you have a backup you have actually restored from at least once?
Recovery you have never tested is a plan, not a backup.
Weighted by how much each habit matters in practice, not by breach statistics — a specific probability would be a number we cannot source.
الأسئلة الشائعة
How is the quiz scored?
Eight questions, one point each, marked immediately with an explanation of why the right answer is right. Nothing is sent anywhere — the scoring happens in your browser and we keep no record of your answers.
Is the exposure score based on statistics about breaches?
No. It is a weighted checklist of habits, and the weights reflect how much each habit matters in practice — password reuse carries the most because one breach then unlocks several accounts. We deliberately avoid quoting breach probabilities, because any specific number would be invented.
Do I need an account to see my result?
No. There is no sign-up, no email required, and no result stored on our servers. Your quiz score counts toward your local progress if you have used other tools on the site, and that progress lives only in your browser.
Are the quiz answers opinions?
They are limited to claims that are uncontested and checkable: how WebRTC and DNS behave, what a VPN does and does not change, why PPTP is unsafe, and why length beats complexity in passwords. Where something genuinely depends on your situation, it belongs in the habits section rather than the quiz.