Can I learn cybersecurity online?

Online cybersecurity education is the dominant path for new entrants. ISC2's 2024 Cybersecurity Workforce Study reports that more than half of practitioners cite self-directed online study and vendor training as their primary skill-building channel, ahead of formal degrees. The shift is not pandemic-era residue. It reflects a real change in how the field credentials practical skill.

Foundational coursework. The Google Cybersecurity Certificate on Coursera (eight courses, roughly six months at five hours per week) sits at the most-accessible end of the funnel. SANS Cyber Aces (free) covers networking, Linux, Windows, and systems administration at depth. The Open University's Introduction to Cybersecurity on FutureLearn is free and maps to common Security+ exam objectives. None of these replace lab work, but they build the vocabulary before you sit hands-on platforms.

Hands-on platforms matter more than video courses alone. TryHackMe runs guided learning paths from pre-security through SOC Level 2 and offensive tracks, with paid tier at $14 per month (TryHackMe, April 2026 pricing). Hack The Box's Academy ranges from beginner to OSCP-adjacent depth. CyberDefenders focuses on blue team scenarios (DFIR, log analysis, malware triage) and is free to register. Pico CTF (free, run by Carnegie Mellon) is the standard starting CTF for absolute beginners.

Certification exams themselves can be taken remotely. CompTIA, ISC2, ISACA, and EC-Council all offer online proctored exam options through Pearson VUE OnVUE or PSI. CompTIA Security+ (SY0-701) costs $404 per CompTIA, April 2026 pricing. The proctoring software locks your machine, requires a 360-degree room scan, and prohibits any second device. Test from a dedicated quiet space, not a shared kitchen table.

Concrete 16-week plan that has worked for hundreds of career changers. Weeks 1 to 4: Professor Messer's Network+ playlist on YouTube plus the OverTheWire Bandit wargame. Weeks 5 to 12: Security+ syllabus alongside TryHackMe SOC Level 1 path, sitting Jason Dion practice tests at week 10. Weeks 13 to 16: schedule the exam, finish three CyberDefenders blue-team challenges, write up two of them publicly on a free Hugo or Astro site. Sit Security+ at week 16. Most candidates pass the exam at that pace.

Decision logic on which platforms to pay for. Pick TryHackMe over Hack The Box if you are new to the command line and want guided rails. Pick Hack The Box if you have one year of operational experience and want to push toward OSCP. Pick CyberDefenders if you are targeting SOC or DFIR roles where blue team artifact analysis is the test. Pay for one platform at a time, work it through to completion, then rotate. Stacking three subscriptions guarantees you finish none.

Tradeoffs to acknowledge. Online study works for disciplined adults who can study consistently without external structure. ISC2 (2024 Cybersecurity Workforce Study) notes that practitioners who pair online study with a local user group or ISSA chapter advance noticeably faster than fully solo learners, because feedback loops matter. If you struggle to study alone, plan to add a meetup or community piece. The technology is not the bottleneck. The accountability is.

For role-specific online learning sequences, see the related career entries for soc-analyst and penetration-tester, the certification entries for comptia-security-plus and google-cybersecurity, and the glossary entries for ctf and penetration-testing.