A new survey by password management company Bitwarden reveals important findings about Generation Z’s password security habits. The study, conducted before World Password Day on May 1, 2025, surveyed over 2,300 working adults across six countries including the United States, United Kingdom, Australia, France, Germany, and Japan.
The research found that while 79 percent of Gen Z respondents understand the risks of password reuse, 72 percent still use identical passwords across multiple accounts. Moreover, 59 percent continue to reuse existing passwords even after companies experience data breaches – a particularly concerning behavior given the rising availability of stolen credentials on the dark web.
Password management poses a significant challenge for younger users, with 62 percent of Gen Z reporting stress related to managing their credentials. The survey found that 30 percent of Gen Z respondents frequently or always forget passwords to important accounts. Such difficulties have led to 55 percent of respondents either abandoning login attempts or creating new accounts rather than dealing with password resets.
Despite these challenges, the data shows some positive security practices among younger generations. Over 80 percent of Gen Z and Millennials report enabling multi-factor authentication (MFA) even when not required, compared to 51 percent of Baby Boomers. The adoption rate stands out as organizations increasingly move toward stronger authentication methods, including passkeys, which saw a 550 percent increase in implementation during 2024.
The survey also revealed potentially risky password sharing behaviors, with 25 percent of Gen Z sharing passwords through text messages, 19 percent sending credential screenshots, and 19 percent sharing passwords verbally. These practices continue despite Bitwarden’s recent implementation of mandatory email verification requirements and other security measures designed to protect user accounts.
The findings highlight a complex relationship between security awareness and practical implementation among younger users, where high levels of security consciousness exist alongside password reuse and sharing behaviors that could compromise account security. The results emerge as major technology companies work to reduce reliance on traditional passwords through initiatives like passkeys, which offer both enhanced security and improved user experience.
Sources: Morningstar, BetaNews, Beamstart, AboutDFIR