New study finds 76% of Australians feel confident spotting cyber threats, but risky habits like password reuse and credential sharing remain widespread
KnowBe4, the world-renowned platform that comprehensively addresses human and agentic AI risk management, today released new research “Australia’s Cybersecurity Paradox: Strong Defences, Weak Habits,” revealing a disconnect between Australians’ cybersecurity confidence and their everyday online behaviours.
The report, based on a national survey conducted by YouGov, shows that while Australians believe they understand cyber threats, many continue to follow practices that increase their exposure to cyber risk. One of the most telling findings is that more than half of Australia’s workforce admits to putting more thought into securing their work accounts than their personal ones, suggesting security behaviours are often driven by workplace policies rather than personal habits.
Key findings from the report include:
- 53% of employed Australians prioritise protecting work accounts over personal accounts
- More than one in five Australians share login credentials for sensitive accounts such as email or banking
- The tendency to prioritise work security over personal accounts is highest among younger generations, reaching 66% for Gen Z, 65% for Millennials and just 35% for Gen X.
- 24% take no action after hearing about a major data breach unless directly notified
- 66% reuse passwords across multiple online accounts
The research highlights a broader behavioural challenge for organisations: security behaviours often disappear outside the workplace.
“Many people are careful with their work accounts because policies require it, but those same habits don’t always carry over into personal life,” said Erich Kron, CISO advisor at KnowBe4. “Cybersecurity resilience improves when secure behaviour becomes second nature — not just something employees do to meet workplace requirements. That’s where human risk management plays a critical role in turning awareness into lasting behaviour.”
The research highlights a critical reality: technology alone cannot close the cybersecurity gap if everyday behaviours remain unchanged. As cybercriminals increasingly use AI to scale and personalise attacks, organisations must secure both the human layer and the AI agents that are becoming part of the modern workforce. A comprehensive human risk management approach helps reinforce secure behaviour and reduce risk where attacks most often begin — with people.
Download the full report “Australia’s Cybersecurity Paradox: Strong Defences, Weak Habits” here.
Methodology
This report is based on an independent online survey conducted by YouGov between 17–20 October 2025 among 524 Australians aged 18 and over. Data was weighted by age, gender and region to reflect Australian Bureau of Statistics population estimates and conducted in accordance with ISO 20252:2019 standards.