Home›Quizzes›Password Security Quiz

Password Security Quiz

Developer Quiz

Test your password security knowledge with 12 questions on brute force, 2FA, salting, and breach risks. Get instant explanations and your score in 3 minutes.

3 min · 12 questions

Question 1 of 12

What makes a password harder to crack via brute force?

Most password advice boils down to a handful of concepts — length, uniqueness, and avoiding reuse — but the reasoning behind each one is often skipped over. This 12-question quiz checks how well you understand brute-force resistance, credential stuffing, 2FA, and how passwords are actually stored securely. It takes about 3 minutes, with an explanation after every answer.

Once you've tested your knowledge, generate a genuinely strong password with the Password Generator, or check an existing one with the Password Strength Validator to see how it holds up.

Frequently Asked Questions

Each of the 12 questions has exactly one correct answer, and your final score is the number you got right out of 12. There's no partial credit, so read each option carefully.
No. The quiz runs entirely in your browser and nothing is sent to a server or stored. Refreshing the page resets your progress.
Eliminating password reuse across sites is generally the highest-leverage change, since it directly prevents credential stuffing — the most common way a breach on one site turns into compromised accounts elsewhere.
The [Password Generator](/password-generator/) creates long, random passwords using a wide character set, removing the temptation to fall back on guessable patterns like birthdates or common words.
The [Password Strength Validator](/password-strength-validator/) evaluates a password's length, character variety, and common patterns to estimate how resistant it is to brute-force and dictionary attacks.
Yes. 2FA protects you even if your password is somehow exposed through a breach, phishing attempt, or malware, since the attacker would also need your second factor to log in.
No. The questions are written for a general audience, covering practical habits and concepts rather than deep cryptography, and every explanation avoids unnecessary jargon.
Yes, any time — it's a good way to confirm concepts like salting and credential stuffing have actually stuck.