Survey results are in: 59% of employees still rely on username and password as primary method to authenticate their accounts

Our inaugural State of Global Enterprise Authentication Survey – which we exclusively previewed in September during YubiSummit – captures a snapshot of how companies around the world are tackling authentication. 

We received over 16,000 responses from entry-level employees up to business owners at organizations ranging in size from one to 2,000+ employees, in eight countries: the United Kingdom, the United States, Australia, New Zealand, Singapore, France, Germany, and Sweden. Now, we’re excited to share the full of the global survey results – offering a comprehensive and in-depth look at the practices and attitudes driving authentication at real companies. Download the full report here.

The results show:

  • 59% of employees still rely on passwords as a primary authentication method
  • 62% of US employees have written down or shared a password over the past year
  • 78% of respondents have been exposed to a cyber attack in their personal life in the last year

Employees worldwide are increasingly aware of – and exposed to – harmful cyberattacks, both at home and at work. Yet account security is still put at risk by employees’ poor security hygiene and by enterprises who rely on legacy authentication practices. Phishing-resistant MFA offers an easy, affordable, and effective way for any organization to upgrade their security – but the findings indicate that most companies are not using it to their advantage. The report helps organizations understand how and why they need to improve. 

Every country surveyed has some way to go, though progress is uneven. The US leads the world on cyber education: 62% of employees frequently receive security training, compared to only 24% in New Zealand. However, businesses remain complacent: 26% of US businesses aren’t concerned about cyber attacks; only 9% of UK companies say the same.

Individual reports, translated and featuring additional deep dives into exclusive local survey data, are now available for:

The full global report is also available in Spanish.

Talk to our teamTalk to our team

Share this article:


  • Introducing new features for Yubico Authenticator for iOSWe’re excited to share the new features now available for Yubico Authenticator for iOS in the latest app update on the App Store. Many of these improvements aim to address frequently requested features from our customers, while providing additional new functionalities for a seamless authentication experience on iOS.  With increased interest in going passwordless and […]Read moreiOSYubico Authenticator
  • Platform independent digital identity for all Many are understandably concerned that the great invention called the Internet, initially created by researchers for sharing information, has become a major threat to democracy, security and trust. The majority of these challenges are caused by stolen, misused or fake identities. To mitigate these risks, some claim that we have to choose between security, usability […]Read moreDigital IdentityEUDIFounderStina Ehrensvard
  • Q&A with Yubico’s CEO: Our move to the main Nasdaq market in StockholmAs 2024 draws to a close, it’s the perfect time to reflect on the incredible journey we’ve had this year and how it has shaped where we stand today as a company. To mark this moment, I sat down with our CEO, Mattias Danielsson, to look back on the milestones and achievements of 2024—culminating in […]Read moreCEOMattias Danielsson
  • Exploring DORA: A look at the next major EU mandateFinancial institutions have historically managed operational risk using capital allocation, but under EU Regulation 2022/2554 – also known as the Digital Operational Resilience Act (DORA) – the financial sector and associated entities in the European Economic Area (EEA) must also soon follow new rules. These new rules focus on the protection, detection, containment, and the […]Read moreDORAEU