23 April 2026
The research, undertaken by The Research Agency (TRA), found that the number of people who suffered some kind of impact as the result of an online threat went down from 36% in 2024 to 27% in 2025. Impacts can include loss of money, lost productivity or stress.
NCSC Chief Operating Officer Michael Jagusch says there are many factors which could contribute to the reduction in harm, including an increase in awareness by New Zealanders of what they need to do to protect themselves online.
“People are taking more necessary actions to keep themselves protected”, he said.
The TRA research showed 43% of people always enable two-factor authentication (2FA) on their main online accounts, a significant increase from 38%. The report also showed an increase in the use of password managers.
“People are exercising safer behaviours with their finances, prioritising security actions for banking accounts, followed by email and then social media accounts.
“The use of two-factor authentication on main accounts, ensuring passwords on accounts and devices are long, strong and unique, and using password managers are key cyber security actions that we highly recommend”, Mr Jagusch said.
“Better password management and the use of 2FA have been key themes the NCSC has emphasised in campaigns over the past couple of years, so it’s pleasing to see this behaviour change but the job is never done”, Mr Jagusch says.
“The increase in use of 2FA is great, but we would like to see that number increased further for New Zealanders’ online protection”.
Almost half the population (48%) of adult New Zealanders experienced an online threat in the last six months, around the same as 2024.
The TRA research found 95% of New Zealanders agree that it is important to protect themselves online.
However, just 56% said they reported a threat. Those 55 years old and above were significantly less likely to report an online security threat (47%), with apathy being the key barrier.
“Reluctance to report threats or to perform key cyber security actions can come from a feeling of not knowing how to or feeling it is too complicated”, Mr Jagusch said.
“We face a range of online threats, and we need people to report them so the NCSC can understand these threats and to inform our response”.
This helps everyone to keep secure from similar attacks, reducing financial and emotional harm. Online security threats can be reported on the NCSC website.
We encourage people to visit the Own Your Online website External Link for information and guides on how to keep themselves protected.
Key Data Highlights
- This year’s survey interviewed a nationally representative sample of 1,011 New Zealanders aged 18 years and over between 20th November – 30th November 2025.
- 48% of adult New Zealanders experienced an online threat in the last six months -4% since 2024.
- 27% of adult New Zealanders who experienced an online threat suffered some kind of impact such as financial loss or stress, down 9 percentage points from the previous year.
- 1 in 5 of those impacted suffered financial loss.
- 95% of New Zealanders agreed it’s important to protect themselves online.
- Use of 2FA on main accounts has increased from 38% to 43%.