CompTIA Retake Policy: What Happens If You Fail Security+ (or Any CompTIA Exam)
Reach 50,000+ security professionals
Sponsor a newsletter slot and put your brand in front of CISOs, engineers, and IT decision-makers.
CompTIA requires no waiting period between your first and second attempt at an exam, at least 14 calendar days before a third or later attempt, and payment of the full exam price each time. Those rules come from section 6 of CompTIA's Candidate Agreement. This guide explains the policy, notes where third-party sites get it wrong, and covers what to do in the first 48 hours after a failed attempt. It also explains why you should avoid exam dumps on a retake. Always confirm the current wording on CompTIA's site before you book.
The Official Retake Rules
CompTIA's Candidate Agreement sets the retake policy in section 6. These rules come from that document.
| Situation | Rule |
|---|---|
| Between the first and second attempt | No waiting period is required |
| Before a third and any later attempt | Wait at least 14 calendar days from the date of your last attempt |
| Cost | You pay the exam price for each attempt, with no free re-tests or retake discounts |
| Retaking a passed exam | Not allowed under the same exam code without CompTIA's prior consent |
Third-party sites often describe these rules differently, for example saying the 14-day wait applies after the first failure. The Candidate Agreement is the authoritative source, so check it before you book.
Retake Rules Differ From Retake Strategy
The rules set the earliest date you are allowed to retake, not the best date. Booking an immediate retake without changing how you study usually repeats the result. Use whatever detail your score report gives, plus your own notes, to see which domains were weakest and rebuild your plan around them.
Briefings like this, every morning before 9am.
Threat intel, active CVEs, and campaign alerts, distilled for practitioners. 50,000+ subscribers. No noise.
What to Do in the First 48 Hours After a Fail
Work through these in order while the experience is fresh and before you book anything.
Write down what you remember
While it is fresh, note which topics and question types felt hard, such as performance-based questions, cryptography, or risk calculations. Do not record or share actual exam questions.
Read your score report for weak areas
If your score report breaks results down by domain or topic, use that to rank your weak areas instead of looking only at the overall score. If it does not, rely on your memory notes and practice-test results.
Rebuild your study plan around the weakest domains
Our Security+ study plan guide shows how to split days by domain weight. Give extra days to the domains you missed.
Retake practice before the real thing
Do timed practice sets on the weak domains and retry missed questions on different days until you answer correctly.
Pick a date you can defend
A retake is allowed immediately on the second attempt, but a date a few weeks out with a revised plan is usually stronger than a rushed one.
Avoid Exam Dumps When You Retake
After a fail, the temptation to look for real exam questions grows. CompTIA's materials warn that using unauthorized exam content, often called brain dumps, can lead to certification revocation. Study from the published objectives and legitimate materials instead. Our objectives explained guide and practice questions are original and built for that purpose.
If You Are Moving to SY0-801
SY0-801 is expected on or around November 17, 2026, and SY0-701 retires in English on June 11, 2027. If you fail SY0-701 and your next date is after June 2027, you would need SY0-801. See our guide to what changed between the versions.
The bottom line
You can retake immediately for the second attempt, then wait 14 calendar days before a third, and you pay each time. Rebuild your plan around your weakest domains, study from legitimate materials, and book a date you can defend.
Frequently asked questions
How long do you have to wait to retake a CompTIA exam?
According to CompTIA's Candidate Agreement, there is no waiting period between your first and second attempt. Before a third and later attempts, you must wait at least 14 calendar days from the date of your last attempt.
Do you have to pay again to retake Security+?
Yes. The Candidate Agreement says you must pay the exam price for each attempt, with no free re-tests or retake discounts.
Can I retake Security+ immediately after failing?
For the second attempt, CompTIA's Candidate Agreement requires no waiting period, so you can book as soon as you are ready. After the second attempt, there is a 14 calendar day wait from your last attempt.
How many times can you fail Security+?
The Candidate Agreement describes waiting periods for third and later attempts but does not state a lifetime cap in the section we checked. Confirm the current policy on CompTIA's site, and note that violating the retake policy can invalidate a test result.
Can I retake Security+ if I passed?
Not under the same exam code without CompTIA's prior consent, according to section 6.1 of the Candidate Agreement. To recertify, you generally wait for a new exam series or use CompTIA's continuing education options.
Does failing Security+ look bad?
CompTIA does not publish pass rates, and a certification shows only that you passed. Many candidates take more than one attempt. What matters is finding your weak domains and fixing them before the retake.
Is the retake policy different for SY0-801?
The retake rules are in CompTIA's Candidate Agreement and apply to its exams generally, not to a single exam code. Check the Candidate Agreement on CompTIA's site for the current wording before you book.
Sources & references
Free resources
Critical CVE Reference Card 2025–2026
25 actively exploited vulnerabilities with CVSS scores, exploit status, and patch availability. Print it, pin it, share it with your SOC team.
Ransomware Incident Response Playbook
Step-by-step 24-hour IR checklist covering detection, containment, eradication, and recovery. Built for SOC teams, IR leads, and CISOs.
Daily briefings + Google Top Stories in one step.
Enter your email and we'll subscribe you to the daily briefing and add Decryption Digest to your Google Search feed at the same time.
Founder & Cybersecurity Evangelist, Decryption Digest
Cybersecurity professional with expertise in threat intelligence, vulnerability research, and enterprise security. Covers zero-days, ransomware, and nation-state operations for 50,000+ security professionals every morning.
