CEHCertified Ethical Hacker
Think like a hacker to defend like a pro
Details last reviewed January 2026. Fees and exam formats change — always confirm on the official page.
About this certification
The CEH teaches and validates the ability to find and exploit security vulnerabilities using the same techniques as malicious hackers — but legally and ethically. It covers penetration testing, social engineering, web app hacking, session hijacking, and cryptography.
MyCertPath verdict
More résumé keyword than skill validation. EC-Council's CEH is widely required by HR filters and certain federal roles, but practitioners generally treat it as a baseline that doesn't prove hands-on penetration-testing ability. If your goal is actually doing the job, plan to follow CEH with OSCP.
What it actually tests
125 multiple-choice questions over four hours. The exam is heavy on tool names, default ports, and attack-methodology terminology — and lighter on actually exploiting anything. The optional CEH Master practical is a separate, more demanding hands-on assessment; without it, the credential reads as recognition-only.
Common traps
Things candidates underestimate or get wrong on this exam.
- Confusing CEH with hands-on skill — the multiple-choice exam is mostly recognition.
- Skipping the CEH Master practical if you want real credibility.
- Not budgeting the renewal burden — EC-Council requires ECE credits to maintain.
What you'll validate
- ✓Penetration testing methodology
- ✓Reconnaissance and footprinting
- ✓Network scanning
- ✓Session hijacking
- ✓Social engineering
- ✓Web application hacking
- ✓Malware analysis
Pros & Cons
Advantages
- +Industry-recognized ethical hacking credential
- +Practical offensive security skills
- +Strong demand in penetration testing market
Disadvantages
- −Expensive
- −Some argue it's more theoretical than OSCP
- −EC-Council's reputation has occasional controversy
Who it's for
Best for
- →Security professionals moving into offensive security
- →Penetration testers seeking a recognized credential
Not ideal for
- ×Pure defenders (use Security+ or CISSP instead)
- ×Those without security fundamentals
Career paths this unlocks
CEH: quick answers
- How much does the CEH exam cost?
- The listed exam fee is $950 (USD). Includes training materials when taken via EC-Council Fees vary by region and change over time — confirm on the official page before you buy.
- How long does it take to prepare for CEH?
- We estimate roughly 150 hours of study for most candidates; your time depends on prior experience.
- How long is the CEH exam?
- The exam is 240 minutes with about 125 questions.
- How long is the CEH credential valid?
- 3 years. ECE credits required every 3 years
Study Resources
Contains affiliate linksTop picks for CEH
Register for the exam
Official exams through EC-Council or authorized partners; iLearn self-study bundles include exam
More places to study
Self-paced video courses from independent instructors
Courses and certificates from universities and companies
Practice tests and hands-on labs for IT certifications
Printed and Kindle exam guides
Subscription video courses
Links marked “Affiliate” may earn MyCertPath a commission if you buy, at no extra cost to you. Other links are unpaid. As an Amazon Associate we earn from qualifying purchases. Prices and ratings change often, so we don't list them — check the provider's page. Disclosure
Jobs for CEH holders
Pay depends on role, location, and experience more than on any single credential. Check current postings below for real ranges in your market.
LinkedIn Jobs
Posted in the last 7 days
Indeed
Dice (tech roles)
Tech-focused job board
CyberSeek (cyber only)
NIST-backed supply/demand tool
Job links open external sites. Search results are live and not curated by MyCertPath.
Quick Facts
- Exam Cost
- $950 (Includes training materials when taken via EC-Council)
- Exam Duration
- 240 minutes
- Questions
- ~125
- Passing Score
- 70% (varies by form)
- Exam Format
- Multiple Choice
- Study Time
- ~150 hours
- Validity
- 3 years
- Salary Impact
- Strong (editorial rating)
- Last Reviewed
- January 2026
Prerequisites
- !2 years of IT security experience, or EC-Council training
Provider
EC-Council
Ethical hacking and offensive security credentials
Actyra Training
Custom eLearning built on the science of how people actually learn
Actyra designs and builds cert-prep training programs for enterprise teams — custom courseware grounded in cognitive science.
Talk to a training expert →