Gen Z Phone Security Habits Are Failing, Study Finds

Gen Z Phone Security Habits are failing the one test that actually counts. More than half of Gen Z have experienced a cyberattack on their devices, online accounts or personal data, according to new research from Kaspersky released on October 21, 2026. The generation that grew up online is confident behind a screen — but far less protected than it believes.

The survey covered 7,200 respondents across 18 countries, from Brazil and India to France and South Africa, and the headline number should land hard: 52% of young respondents reported an attack involving their devices, accounts or personal data. Among them, 17% said a social media account had been hacked outright, while 12% had lost access to a gaming account.

The Confidence Gap

Gen Z spends more time online than any other generation in the survey, with 57% saying they are online more than they are offline. Smartphones sit at the center of that life: 67% named a phone as their primary way of getting on the internet. None of that will surprise anyone who has looked at their own screen-time report lately.

The twist is confidence. Almost three in five respondents — 59% — said they feel confident navigating the digital environment, yet fewer than three in ten rated their own digital skills as advanced. That gap between confidence and competence is where the attacks walk in. Just 27% use antivirus software on their phones, regular password changes are less common among Gen Z than among older generations, and only 28% back up important smartphone data on a regular basis.

This is not the first time researchers have flagged young people as the prime targets: fake job scams have been hitting Gen Z at more than double the rate of older workers, and the pattern is the same — high exposure, low defenses.

What Attackers Actually Get

The stakes are not abstract. When researchers asked what lives on those phones, 38% of Gen Z respondents rated photos and personal documents as critically important, and 30% said the same of passwords and login credentials. A single compromised device can hand an attacker identity documents, email accounts, social profiles and financial apps at once — one breach echoing across a person's entire digital life. Recent hijacked shopping-app alerts showed how quickly a stolen credential can be weaponized against millions of users.

"Familiarity should not be confused with security expertise," said Irina Ermilova, Kaspersky's vice-president for consumer product management, in the study announcement. She stressed that moving through apps confidently is not the same as recognizing a scam or protecting personal information. The findings were detailed in reporting by CAJ News Africa on the survey release.

Three Habits That Fix Most of It

Building better Gen Z Phone Security Habits is genuinely boring — which is the point. Strong, unique passwords for every account close the easiest door attackers walk through. Regular backups turn a hacked phone from a catastrophe into an afternoon of reinstalling apps. And a basic layer of malware protection on the device that holds your entire life is the cheapest insurance named in the survey's own recommendations.

Kaspersky is trying to make the lesson stick with a gamified twist: the company released Case 404, an interactive cyber-detective game built to teach players how to spot scams, phishing attempts and account-takeover tactics, particularly in gaming communities. It is a telling choice of venue — gaming accounts ranked among the most commonly compromised targets in the survey, and players who learn to spot a fake trade offer learn to spot a fake login page too.

A fifteen-minute audit tonight covers most of the risk. Turn on automatic cloud backups and confirm the last successful backup date. Enable two-factor authentication for your email first — it is the account everything else resets through — then for banking and social apps. Move the passwords you have saved in a notes app into a password manager, which also makes unique passwords painless. Finally, install the phone update you have been postponing: most attacks ride in on software flaws that patches already fixed.

The bigger shift is cultural, not technical. Gen Z Phone Security Habits need to become reflexes rather than emergency measures — backing up like you charge overnight, treating a sketchy login prompt the way you treat an unknown number, changing the password you have reused since high school. Your phone holds your photos, your bank account and your identity. Protect it like it does.