Surprisingly Useful AI Article Enhancements
At work, Australians suit up in digital armour. At home, many take it off without a second thought. New research by KnowBe4, drawing from a nationally representative YouGov survey of 524 Australians, has found that more than half (53 per cent) of employed Australians put more effort into protecting work accounts than personal ones. And younger generations widen the gap, with 66 per cent of Gen Z and 65 per cent of Millennials focusing more on work security than their own everyday online habits. The behaviour suggests a shift from disciplined vigilance to relaxed familiarity the moment people step outside the structured environment of the workplace.
Confidence leads, evidence disagrees. Three in four (76 per cent) Australians claim to be phishing savvy, yet risky habits like password reuse (66 per cent), credential sharing (21 per cent) and post-breach inaction (24 per cent) remain common. These habits reveal an alarming gap between how capable people think they are and how vulnerable they actually remain.
Inside the workplace, this gap narrows because people operate within a system that constantly supports good judgement. Policies spell out expectations. Training refreshes knowledge at regular intervals. Multi factor authentication (MFA) becomes routine. Simulations and real time prompts offer immediate feedback when someone makes a risky choice. The environment itself keeps people anchored to safer decisions.
Outside that environment, those cues fade. Personal accounts rarely come with mandated MFA or real time warnings. No one is tracking mistakes or offering quick guidance when something seems off. There are no policies, no simulations and no compliance reminders. The result is a behavioural slide back into habits that feel easy, familiar and fast, even when they introduce risk. The everyday shortcuts people adopt at home, like saving passwords in browsers, sharing streaming logins or delaying a security update, seem harmless in isolation. But as the research shows, they are part of a broader pattern of relaxed decision making that increases vulnerability.
This separation between work-secure and home-relaxed behaviour exposes a deeper truth. Organisations have successfully built compliance, but not habit and culture. Many Australians act securely at work because the environment directs them to do so, not because secure behaviour has become instinctive. KnowBe4’s research reinforces this reality: technology alone cannot compensate for inconsistent behaviour, especially when threats move quickly and people rely heavily on their own judgement outside corporate systems.
Helping good habits stick and travel is therefore the real challenge. This is where the shift toward comprehensive human risk management becomes critical. It begins with making security feel relevant to people’s everyday lives. When employees understand how a reused password on a shopping account might compromise their email, and how that email could be used to access work systems, risk becomes personal. Clear, relatable examples help people connect the dots and make stronger choices across all their accounts. The survey results reinforce this need for guidance: 24 per cent take no action after a breach unless they are directly notified, showing that people still rely heavily on explicit instruction.
Organisations can also pay more attention to everyday signs of risky behaviour. This includes how employees respond to suspicious messages, whether they report unexpected requests or whether they follow through on simple security steps like turning on multi factor authentication. These cues offer a clearer picture of where support is needed and where habits may be slipping. Over time, reinforcing good behaviour in these small moments helps build instincts that last well beyond the office network.
Brief, timely reminders are especially powerful. When someone clicks on something questionable, opens a suspicious attachment or dismisses an update, a short, immediate prompt is far more effective than a long training session delivered months later. These micro interventions help people develop a natural pause and check reflex, which is essential because many digital decisions happen quickly and without much thought. A habit formed in this way becomes more portable, following people from their desks to their homes and everywhere in between.
Finally, organisations can extend simple, practical support into the personal lives of employees. Providing easy to follow checklists, such as how to set up a password manager, how to check if personal information has been exposed in a breach or how to enable MFA on personal accounts, helps people take immediate steps to improve their digital hygiene.
Australia’s cybersecurity paradox is clear. People feel confident, yet their behaviour tells a more complicated story. At work, structure and support make secure choices the default. At home, convenience takes over. The opportunity now is to help people bridge that gap, instead of leaving their armour behind at the office door. When secure habits follow people into their personal digital lives, resilience grows across every part of the organisation. And when that happens, confidence finally reflects reality.
Erich Kron is Security Awareness Advocate at KnowBe4.
Last Updated on April 10, 2026 by Erich Kron
