On average, Internet users are not aware of basic online security rules, according to new research from NordVPN.

The company conducted a National Privacy Test — a survey of almost 5 000 respondents in English-speaking countries – which revealed the average rate of correct answers was 44 out of 100, showing some dangerous gaps in the general public’s cybersecurity knowledge.

“We understand that privacy tools can sometimes be overwhelming,” says Marty P. Kamden, CMO of NordVPN. “Therefore, our goal is to find major weaknesses in cybersecurity knowledge of average Internet users and to show them the privacy tools used by experts. Moreover, we want to help people realise that significantly enhancing their security is not that complicated and can be done in a few clicks. We have also noticed that even though people seem to know the answers to many questions, they do not apply their knowledge in practice. So we also want to close the gap between theory and practice when it comes to online security.”

NordVPN has observed the following mistakes that people usually make in cybersecurity:

1. 94% of Internet Users Think They Recognise Phishing Emails — But Half of Them Keep Clicking. 94% of respondents said they would ignore an email request from a bank asking for personal information. Yet statistics show that up to 45% of Internet users keep clicking on dangerous links or providing personal information where they shouldn’t.
This suggests that although users may recognise basic malicious emails, more sophisticated phishing attempts often still work. NordVPN recommends checking the sender’s address, looking for spelling and grammar mistakes and not clicking on links — instead, hovering the mouse over to see if it’s legitimate (one of the indicators of legitimacy would be https URL).

2. Social Media Users Still Share Vacation Photos. According to the survey, while social media users know they shouldn’t share their home address, current location or phone number on Facebook, half of them still share vacation photos or social plans. However, each time a social media user announces that they are on vacation, it’s a signal that their home is empty. NordVPN recommends posting vacation pictures after getting home, never sharing personal data on Facebook, and protecting one’s location by using a VPN, which allows to set one’s location to any country in the world.

3. Many Online Shoppers Believe Public Wi-Fi Is Safe. It was found in the survey that as many as one-third of respondents believe that various activities — such as checking email, logging into a social media account, shopping online or checking a bank account — are safe on public WiFi. While checking a bank account on a public hotspot is assumed to be very risky (less than 2% agree that is safe), entering banking credentials to make a purchase online is seen as a lesser risk (23% think it is safe). NordVPN recommends staying away from public terminals when shopping online and using a VPN when conducting any online transaction.

4. Information Overload Is Confusing to Internet Users. Only slightly over 50% of the survey respondents realised that an email confirming a genuine online purchase does not pose a security threat. The outcome shows that the topics of online privacy and security can be very confusing for an average Internet user. If they are surrounded with information on various threats for long enough, every little thing starts looking like another phishing attempt. That’s why it’s so important to educate users about crucial online habits and tools so that they can tell credible threats from myths.