A World Full of Privacy and Security (Mis)conceptions? Findings of a Representative Survey in 12 Countries

TL;DR

This large-scale global survey reveals that misconceptions about digital security and privacy are prevalent worldwide, with regional differences highlighting the need for targeted educational efforts.

Contribution

First comprehensive survey across 12 countries examining misconceptions in digital security and privacy, emphasizing regional differences and influencing factors.

Findings

Country of residence strongly predicts misconceptions

Significant regional differences between Western and non-Western countries

General lack of understanding and uncertainty about key security topics

Abstract

Misconceptions about digital security and privacy topics in the general public frequently lead to insecure behavior. However, little is known about the prevalence and extent of such misconceptions in a global context. In this work, we present the results of the first large-scale survey of a global population on misconceptions: We conducted an online survey with n = 12, 351 participants in 12 countries on four continents. By investigating influencing factors of misconceptions around eight common security and privacy topics (including E2EE, Wi-Fi, VPN, and malware), we find the country of residence to be the strongest estimate for holding misconceptions. We also identify differences between non-Western and Western countries, demonstrating the need for region-specific research on user security knowledge, perceptions, and behavior. While we did not observe many outright misconceptions, we did identify a lack of understanding and uncertainty about several fundamental privacy and security topics.