Survey results are in: 59% of employees still rely on username and password as primary method to authenticate their accounts

Our inaugural State of Global Enterprise Authentication Survey – which we exclusively previewed in September during YubiSummit – captures a snapshot of how companies around the world are tackling authentication. 

We received over 16,000 responses from entry-level employees up to business owners at organizations ranging in size from one to 2,000+ employees, in eight countries: the United Kingdom, the United States, Australia, New Zealand, Singapore, France, Germany, and Sweden. Now, we’re excited to share the full of the global survey results – offering a comprehensive and in-depth look at the practices and attitudes driving authentication at real companies. Download the full report here.

The results show:

  • 59% of employees still rely on passwords as a primary authentication method
  • 62% of US employees have written down or shared a password over the past year
  • 78% of respondents have been exposed to a cyber attack in their personal life in the last year

Employees worldwide are increasingly aware of – and exposed to – harmful cyberattacks, both at home and at work. Yet account security is still put at risk by employees’ poor security hygiene and by enterprises who rely on legacy authentication practices. Phishing-resistant MFA offers an easy, affordable, and effective way for any organization to upgrade their security – but the findings indicate that most companies are not using it to their advantage. The report helps organizations understand how and why they need to improve. 

Every country surveyed has some way to go, though progress is uneven. The US leads the world on cyber education: 62% of employees frequently receive security training, compared to only 24% in New Zealand. However, businesses remain complacent: 26% of US businesses aren’t concerned about cyber attacks; only 9% of UK companies say the same.

Individual reports, translated and featuring additional deep dives into exclusive local survey data, are now available for:

The full global report is also available in Spanish.

Talk to our teamTalk to our team

Share this article:


  • Ditching passwords for good: Celebrating the inaugural World Passkey DayHave you ever been stuck in a relationship with someone who constantly lets you down, exposes your secrets, and leaves you vulnerable? Odds are you cut your losses, packed up your things and moved on. Today is the day to do the same with your passwords: say goodbye forever! The reality is a majority of […]Read morepasskeyspasswordlessWorld Passkey Day
  • Digital security’s unique role in protecting our environmentAs sustainability expands to include social, economic, and technological challenges, cybersecurity has emerged as a top global threat – with cybercrime projected to cost $12 trillion this year. Stolen credentials and phishing account for 80% of breaches. At Yubico, making the world more secure is just part of how we care for the world around […]Read moreCSREarth DaySecure It ForwardSustainability
  • Breaking down Australia’s plan to combat AI-driven phishing scamsAcross Australia, cybercrime continues to be a major challenge impacting businesses, critical infrastructure and consumers alike. The use of AI by bad actors across the spectrum of cybercrime is on the rise, and as a result, credential phishing scams are becoming increasingly sophisticated. AI is effectively helping to lower the cost of phishing and increase […]Read moreAIAPACAustraliaphishing
  • 5 fast cybersecurity tips to clean up your digital lifeWith today being Identity Management Day, now is the perfect time to take stock of your online presence, update security settings, and ensure that your personal data remains protected from cyber threats like phishing. We’re also seeing increasing concerns of DeepSeek and other AI tools around data privacy making these kinds of attacks more successful […]Read morebest practices