Gen Z’s Cybersecurity Complacency Raises Alarm

A new study from global consumer insights platform GWI has revealed a concerning trend: Generation Z, often hailed as digital natives, is significantly less vigilant about cybersecurity than older generations. Despite growing up in a hyper-connected world, many Gen Zers neglect basic security practices, potentially exposing themselves to cyber risks.

The GWI data highlights a stark generational divide in cybersecurity habits. Only 30% of Gen Zers regularly change their passwords, compared to 42% of Baby Boomers.

Similarly, just 43% keep their software and devices updated, lagging behind 51% of Boomers. Antivirus software, a cornerstone of digital protection, is installed by only 36% of Gen Z, further underscoring their lax approach.

Passwords & Updates Neglected

Gen Z’s preference for convenience over security extends to everyday behaviours. Only 35% avoid unsecured public Wi-Fi, compared to 48% of Boomers, and just 40% regularly check their accounts for suspicious activity, against 54% of Boomers. While Gen Z leads in adopting two-factor authentication (58%), their overall concern about cyber threats is lower, with only 44% expressing significant worry compared to 49% of Boomers.

AI Adoption Outpaces Security Awareness

The study also reveals Gen Z’s growing reliance on artificial intelligence (AI), which may exacerbate their cybersecurity vulnerabilities. Eighteen percent of Gen Zers feel comfortable with AI agents acting on their behalf, compared to just 4% of Boomers. Only 8% of Gen Z express discomfort with AI autonomy, against 12% of Boomers.

In practical applications, 24% of Gen Z AI users rely on the technology for health-related information, and 22% use it for financial advice. In the workplace, 24% are comfortable with AI completing tasks, more than double the 11% of Boomers. This enthusiasm for AI, while innovative, contrasts sharply with their neglect of basic digital security measures.

Workplace Expectations vs. Personal Habits

Despite their personal lapses, Gen Z acknowledges the importance of cybersecurity in professional settings. Nine in ten (91%) prioritise staff training on data security, followed closely by protecting against unauthorised access (90%) and secure data storage (89%). However, the data suggests Gen Z expects employers to enforce these measures rather than taking personal responsibility. As cyber attacks rise, this reliance could pose risks as Gen Z enters the workforce in greater numbers.

A Culture Of Convenience

Experts attribute Gen Z’s cybersecurity complacency to their dependence on smartphones, where features like face ID, auto-login, and password managers minimise active engagement with security. Matt Smith, a data journalist at GWI, notes: “Gen Z has grown up with devices that auto-fill passwords and sync data seamlessly, creating a false sense of safety. Many lack the fundamental tech skills to respond when things go wrong.”

Smith also points to cultural trends like the rise of “dumb phones” and digital detoxes, suggesting Gen Z’s relationship with technology is conflicted. “They’re fluent in trends but often skip the basics,” he says.

The findings highlight the need for targeted cybersecurity education for Gen Z. As they increasingly rely on AI and digital platforms, fostering proactive security habits will be crucial to safeguarding their personal and professional data.

Without intervention, their digital dependence without discipline could leave them vulnerable in an era of escalating cyber threats.

Image: Marta Klement

You Might Also Read:

Students Should Learn About Phishing:


If you like this website and use the comprehensive 8,000-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.

  • Individual £5 per month or £50 per year. Sign Up
  • Multi-User, Corporate & Library Accounts Available on Request

Cyber Security Intelligence: Captured Organised & Accessible


 

 

 

 

« A Brief Guide To Navigating Ransomware Extortion 
Hybrid Cloud - Organisations Face Big Challenges In Securing Their Applications »

ManageEngine
CyberSecurity Jobsite
Check Point

Directory of Suppliers

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

NordLayer

NordLayer

NordLayer is an adaptive network access security solution for modern businesses — from the world’s most trusted cybersecurity brand, Nord Security. 

DigitalStakeout

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

Resecurity

Resecurity

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

Emerson Electric Co

Emerson Electric Co

Emerson provides industrial automation systems and associated cybersecurity solutions to protect critical process control systems from cyber attack.

StackRox

StackRox

StackRox delivers a container-native security platform that adapts detection and response to new threats.

Digital Ship

Digital Ship

Digital Ship provides news, information, conferences and events focused on digital ship systems, information technology and security relating to maritime operations.

ICTSecurity Portal - Austria

ICTSecurity Portal - Austria

The ICTSecurity Portal is an interministerial initiative in cooperation with the Austrian economy and acts as a central internet portal for topics related to security in the digital world.

Trinity Cyber

Trinity Cyber

Trinity Cyber’s patent-pending technology stops attacks before they reach internal networks,reducing risk and increasing cost to adversaries.

Specops Software

Specops Software

Specops Software is a leading password management and authentication solution vendor.

Allthenticate

Allthenticate

Allthenticate Single Device Authentication (SDA), enables seamless authentication in both the physical and digital words while unifying management in one easy-to-use interface.

IQ4 - Cybersecurity Workforce Alliance (CWA)

IQ4 - Cybersecurity Workforce Alliance (CWA)

Cybersecurity Workforce Alliance, a division of iQ4, is an organization comprised of a diverse range of professionals dedicated to the development of the cybersecurity workforce.

Mobileum

Mobileum

Mobileum is a leading provider of Telecom analytics for roaming, security and risk management and end-to-end domestic and roaming testing solutions.

UK Cyber Security Association (UKCSA)

UK Cyber Security Association (UKCSA)

The UK Cyber Security Association (UKCSA) is a membership organisation for individuals and organisations who actively work in the cyber security industry.

Bluefin Payment Systems

Bluefin Payment Systems

Bluefin is the recognized integrated payments leader in encryption and tokenization technologies that protect payments and sensitive data.

Daisy Corporate Services

Daisy Corporate Services

Daisy is one of the largest providers of communications and IT solutions across the UK, with a portfolio spanning unified communications, cloud, cyber security and resilience.

Aura Information Security

Aura Information Security

Aura Information Security consists of a team of highly-skilled and renowned information security professionals spanning Australia and New Zealand.

Prizsm Technologies

Prizsm Technologies

Prizsm is a computational storage capability that provides flexible, easy-to-use, resilient solutions for quantum-resistant, hyper-secure cloud storage and communications.

Surf Security

Surf Security

SURF Security has transformed the browser into your strongest security asset while providing complete end-user privacy – all with full compliance.

GoGeekz Inc

GoGeekz Inc

GoGeekz is a leading Managed IT services company in Toronto. We offer services from cyber security to cloud solutions and web development to meet your business needs.