As Data Privacy Week* puts a spotlight on digital hygiene and taking control of your data, findings from Yubico’s latest Global State of Authentication Report** reveal a paradoxical trend in cybersecurity. While younger generations are the fastest to adopt modern security tools, they are also the most likely to fall for attacks.
The research challenges the assumption that ‘digital natives’ are inherently safer online. Despite being more likely to use multi-factor authentication (MFA), Gen Z respondents reported interacting with phishing messages at a significantly higher rate than older generations, who – while reliant on outdated password methods – appear more cautious or less likely to click suspicious links.
Key findings on the generational security divide reveal:
- The click-happy paradox: Gen Z is the most susceptible generation to phishing. A staggering 62 percent of Gen Z respondents admitted to interacting with a phishing message (clicking a link, opening an attachment, or responding) within the last year. In contrast, only 23 percent of Baby Boomers reported doing the same.
- The MFA gap: Younger generations are leading the charge in security adoption, with 71 percent of Gen Z using MFA for personal accounts compared to just 51 percent of Baby Boomers. However, this technical layer has not immunised them against social engineering
- Overconfidence in AI detection: When presented with a message, 38 percent of Gen Z confidently believed an AI-generated message was written by a human, compared to just 21 percent of Baby Boomers.
- Password persistence: Baby Boomers are sticking to legacy habits, with 67 percent primarily relying on a simple username and password to log in to personal accounts (vs. 57 percent of Gen Z). While this leaves them vulnerable to credential theft, their hesitation to interact with unsolicited messages may be serving as an accidental defence.
Niall McConachie, regional director (UK & Ireland) at Yubico, discusses the generational cyber gap and how users of all ages can protect themselves online: “Data Privacy Week is the perfect time to debunk the myth that being tech-savvy equates to the ability to easily become cyber resilient and safe online. Our data shows a concerning disconnect: Gen Z is adopting the right tools, like MFA, but their comfort with digital communication makes them a prime target for social engineering and phishing attacks.
“When we look at why people are falling for these scams, the data tells a deeper story: Gen Z are most likely to be tricked because they are ‘in a rush’ or because the message offered a ‘valuable opportunity’ like a job or prize. In contrast, Baby Boomers are rarely tricked by opportunities but are more likely to fall for messages that appear to come from a ‘trusted source’.
“The takeaway for 2026 is that no generation is immune, but that the vulnerabilities differ. True privacy and security require a combination of the right habits – scepticism of unexpected messages – and modern, phishing-resistant tools like hardware security keys that protect your personal information even when you do inevitably click on a fraudulent phishing link in emails or text messages.”
