Scutoria

Tools

How secure is our sign-in?

Eight questions on passwords, second factor and access. At the end a level and the three steps that bring the most. No sign-up, no email address; nothing is stored.

The problem

How easily does a stranger get into our accounts?

One password for everything, the second factor only for online banking, the account of the colleague who left still active: that is how it looks in many small businesses, not out of carelessness but because nobody is responsible for it.

What the check does: The check asks eight questions about passwords, second factor, administrator accounts and people who have left. At the end a level and the three steps that bring the most and can be done without an IT department.

What it does not do: It names no standard and no rule and tests no technology; it places what you say about your accounts.

Start the check · 3 min · free

What is a second factor?

Something you have in addition to the password: an app on the phone, a key, a code. A stolen password alone is then not enough.

I have no password manager. Is that bad?

The check asks about it and explains at the answer what it brings. The level does not hang on one point alone.

How long do the three steps take?

Each step comes with a rough duration; most are done in an afternoon.

Question 1 of 8Does every service have its own password that is used nowhere else?
Question 2 of 8Is a password manager in use, so that nobody has to remember or write down passwords?
Question 3 of 8Is a second factor switched on for the email account (app, key or code)?Whoever has the mailbox can reset almost every other password.
Question 4 of 8Does the second factor also apply to bank, payment service, shop admin and cloud admin?
Question 5 of 8Do only the people who need admin rights for their work have them?
Question 6 of 8Is access of people who leave revoked on their last day, including cloud services and shared accounts?
Question 7 of 8Are there accounts that several people use with the same password?
Question 8 of 8Are the backup codes and recovery routes for the second factor stored safely?That is, not on the device that can get lost.

The check names no standard and no regulation. It reads what you say about your own access and names hands-on steps that small businesses without an IT department can do themselves.