About the game
One Seal guards the truth. The others guard lies.
Sealbreaker is a free cyber security game you play right here in your browser. You're a wizard on a quest through six realms, from the Phishing Fen to the Impostor's Citadel. Every level asks one security question and locks each possible answer inside its own fort. Work out which answer is true, then spend your limited hand of spells to break open that fort and destroy its Seal.
Not sure of the answer? Professor Owlgorithm's lessons teach the idea behind every question without naming the answer, and they never cost you a point. Break a false Seal, or run out of attack spells, and the level comes back with your spells restored and the forts reshuffled, your score intact and the true answer still hidden, so a retry still tests what you know. Every fifth level brings a villain, from Old Barbel the Angler to the Impostor Queen, who meddles after every cast but treats every fort alike, so a villain can never give the truth away.
- Genre
- Turn-based strategy
- Play time
- About 20 minutes for the full campaign, over as many sittings as you like
- Levels
- 30, each with its own lesson
- Villains
- 6, one every fifth level
- Languages
- 72, pick at the start
- Price
- Free, no sign-up
How to play
Read, cast, break the Seal
- Press Play, then Begin the quest. The map shows your next level and its topic; choose Enter when you're ready. If this browser holds a saved run, you'll see Continue instead, with New game beside it.
- Read the question. Every possible answer is locked inside its own fort. If you're not sure, ask the Professor: the button beside the question opens a short lesson.
- Aim and cast. Point near the wizard to aim, then click to cast. On a touch screen, drag near the wizard to aim and let go to cast. The dotted ring is full power, and the trail of your last cast stays on screen so you can correct the next one. Hover over a block to see what it's weak to: timber burns, frost shatters crystal and lightning fries iron.
- Break the true Seal. You win the level, and the game shows you the true answer and why it's right. Break a false Seal, or run out of attack spells, and you try the level again for fewer points, with the answer you broke marked "Proven false".
- Outwit the villains. Every fifth level, a villain repairs walls, locks your spells or raises firewalls after each cast. Win all 30 levels to save the realm, then claim your spot on the leaderboard.
How your score adds up
Each level you win scores 1,000 points for breaking the true Seal on your first try, 500 on your second and 250 after that, plus 250 for every spell you have left, 300 if you touched no false fort, and a streak bonus of up to 500 for first-try wins in a row. A run you end early with End run keeps half its score.
Seal broken: 1,000, 500 or 250+
250 × spells left+
300 clean break+
Streak bonus up to 500=
Your score
Controls
- Point near the wizardAim
- ClickCast
- Touch: drag, let goAim and cast
- 1 to 7Pick a spell
- ←↑↓→Aim
- SpaceCast
Pro tip: Every spell you don't use is worth 250 points, so study a fort before you cast. There's no clock on your turns, and failing a level never ends your run. Close game saves your run in this browser with no penalty, but a run you pick up in a later visit can't reach the leaderboard, so play one sitting if you're chasing a top spot. End run, offered from level 10 on, keeps only half your score.
What you'll learn
30 levels, from everyday habits to modern attacks
Every level is one question, and the questions get harder as you go: the first realms cover everyday habits and the last ones how modern attacks really work. When you win a level, the game shows you the true answer and why it's right.
Phishing and scams
Emails, texts and QR codes
- Check the full address behind a sender's name
- Report a suspicious message instead of clicking
- Track a delivery in the carrier's own app
- Hand a found USB stick to IT, unplugged
Passwords and sign-in
Accounts, codes and passkeys
- A long, random password for every account
- Change a leaked password everywhere you used it
- Deny a sign-in prompt you didn't start and tell IT
- Never read out a one-time code to a caller
Software and ransomware
Updates, downloads and backups
- Get software from its maker, or ask IT
- Never run a command a website tells you to paste
- Disconnect and call IT at the first sign of ransomware
- Keep a backup offline, out of an attacker's reach
Money, data and AI
Payments, deepfakes and AI tools
- Call a supplier on a known number before changing bank details
- Confirm an unusual request through a trusted channel, even on a video call
- Keep confidential data out of free AI tools
- Report data sent to the wrong person, even if it feels minor
FAQ
Sealbreaker questions
Is Sealbreaker free to play?
Yes. It is completely free and runs in your web browser, with no download, account or sign-up. You only pick a gamer alias if you want to put a top score on the public leaderboard. Organizations that use CanIPhish can also assign it to employees as security awareness training, with a private company leaderboard.
What does Sealbreaker teach?
Everyday security habits first, then how modern attacks really work, one question a level across six realms. You start with phishing emails, scam texts and QR codes, move on to passwords and multi-factor sign-in, then software updates, fake 'verify you are human' pages, ransomware and backups, and finish with changed bank details, deepfake video calls, AI tools and passkeys. If you are unsure, Professor Owlgorithm's lessons teach the idea behind each question without naming the answer, and they never cost you a point. Win the level and the game shows you the true answer and why it is right.
How is my score calculated?
Breaking the true Seal scores 1,000 points on your first try, 500 on your second and 250 after that. Every spell you have left adds 250, leaving every false fort untouched adds 300, and first-try wins in a row add a streak bonus that climbs from 100 to 500 a level. Failing a level never ends your run: you keep your score and try the level again. From level 10 on you can end a run early with End run and keep half your score so far. Break the Seal on all 30 levels to win. Your best score can go on the leaderboard, which lists the top 50 players of all time.
How long does a game of Sealbreaker take?
The full campaign of 30 levels takes about 20 minutes, and it is built to be played over several sittings. There is no clock on your turns, and Close game saves your run in this browser with no penalty, so you can come back later and carry on from the first level you have not won. A run you carry on in a later visit still plays to the end, but its score can't reach the leaderboard: to compete for a spot, play a run in one sitting or start a new game.
What devices and languages does it support?
It runs in any modern browser on desktops, laptops and tablets, and on phones held sideways, although a larger screen with a mouse makes aiming easier. Point near the wizard to aim and click to cast, or on a touch screen drag near the wizard and let go to cast. You can also press 1 to 7 to pick a spell, the arrow keys to aim and Space to cast. You can play in 72 languages: choose yours from the language picker on the title screen.
Using Sealbreaker for security awareness training at work? Bring it to your team or start a free CanIPhish account.
