Free Security Awareness Training for Employees
Six short lessons on phishing, passwords and multi-factor sign-in, scam calls and texts, protecting business information, devices and reporting. Free for any business or individual, with no card required.
Certificate of completion. Not continuing-education (CE) credit.
- 6 lessons · about 45 min
- Short lessons. Progress saves as they go.
- Free
- No card needed.
- English and Spanish
- Every lesson and quiz, in either language. Each learner chooses.
- Verifiable certificate
- Certificate of completion. Not continuing-education (CE) credit.
- Last reviewed October 4, 2026
- We update this page when the rules change.
Before you buy: what’s included, and what your office adds
How it works: self-paced online lessons with short videos and a quiz after each lesson. There is no live class or instructor. Learners can send a question to our trainers from any lesson (we answer within 2 business days) or call (916) 770-4050, Monday to Friday, 8am to 6pm Pacific. Each person who passes gets a dated certificate of completion. It is not continuing-education (CE) credit.
Tell staff exactly how to report a suspicious email, text or call in your office, and who to contact (for example your IT provider).
Who it’s for
- Any business that wants a quick, free baseline of cyber hygiene for its staff.
- Individuals who want a verifiable certificate for a résumé or a new job.
- Healthcare practices that want to try the format before buying HIPAA training.
Is this training required by law?
For most businesses, no specific law requires general security awareness training; it is simply good practice. Some contracts, customers or insurance applications may ask whether you train your staff, and a dated certificate answers that question.
If you are a HIPAA covered entity or business associate, the HIPAA Security Rule does require a security awareness and training program (45 CFR §164.308(a)(5)). For that, use our HIPAA Security Awareness program, which is written around the rule.
What’s covered
6 lessons · about 45 min. Each lesson ends with a short quiz.
| # | Lesson | Minutes |
|---|---|---|
| 1 | Phishing and Email Threats: What to Watch For | 8 |
| 2 | Passwords, Logins and Multi-Factor Authentication | 7 |
| 3 | The Call, Text or Message That Is Not What It Seems | 7 |
| 4 | Protecting Business and Customer Information Day to Day | 7 |
| 5 | Devices, Remote Work and Physical Security | 7 |
| 6 | When Something Goes Wrong: Reporting and Response | 7 |
| Total | about 45 min |
A dated certificate anyone can verify
Dated, with a serial number
Each person who passes gets a certificate showing their name, practice, program, lessons completed, score and date. Lessons end with a short quiz; the pass mark is 80%.
Anyone can check it
An auditor, inspector or employer can confirm a certificate is genuine at hipaa.comodotechnology.com/verify, with no account and without contacting us.
Not CE credit
It is a certificate of completion: proof the training happened. It is not continuing-education credit and not an accreditation or license.
Price and how to buy
Create a free account with your email. No password and no card.
Security Awareness
Free for any business or individual. No card needed. Sign up and start right away.