South Korea scored 40 out of 100 in a global survey of cybersecurity knowledge, exposing gaps in digital security awareness that respondents had assumed they understood well.
Password Skills Score 97%, Privacy Tools Score Zero
South Korea ranked 10th worldwide with a score of 40 out of 100 in the 2026 National Privacy Test released on the 23rd by global cybersecurity firm NordVPN.
The test is an annual public survey designed to assess knowledge of cybersecurity and online privacy protection. This year, 23,181 people in 167 countries answered 24 questions covering everyday digital habits, privacy protection and digital risks.
Korean respondents performed strongly on familiar security practices. A total of 97% correctly identified how to create a strong password, placing the country among the top performers on that question. Some 71% knew that apps should be updated promptly for security reasons, and 61% understood how devices become infected with malware.
The weakness lay in applying that knowledge to real situations. Not a single Korean respondent correctly identified all of the online tools that help protect personal information. Only about 1% each knew how to use public Wi-Fi safely and correctly understood the risks that can arise from app permissions.
Understanding of newer cyber threats was even lower. Just 12% correctly identified what data can be stolen by infostealers, malicious code that takes sensitive information stored on devices such as passwords and browser cookies. Only 1% correctly identified the privacy issues to consider when using artificial intelligence at work.
70% Say They Know How Their Data Is Used, but Gaps Remain in Practice
Koreans are not indifferent to privacy protection itself. In a separate privacy survey NordVPN released in May, 70% of Koreans said they understand how online services and social media collect and use their personal information. Some 66% said they regularly check or change privacy settings on the websites and apps they use.
Wariness about data breaches was also high. Of respondents, 84% said they want to be notified immediately if their personal information is compromised. By contrast, only 52% felt they could control their own personal information online, and 68% said they feel confident entering payment details on online shopping sites.
A similar gap appeared in financial security. While 67% understood the risks of saving credit card details in a browser, only 51% knew how to respond correctly to a bank email reporting an unexpected withdrawal.
NordVPN stressed that simply knowing about security risks is not enough. The company recommended avoiding reuse of the same password across multiple accounts, using a password manager and enabling multi-factor authentication. It also advised using a virtual private network on public Wi-Fi and periodically reviewing app permissions for location, contacts, camera and microphone access.
"Digital safety is no longer just about spotting obvious threats," said Marijus Briedis, chief technology officer at NordVPN. "Today's attacks often exploit everyday habits and judgments that appear harmless, such as trusting the content of a message or storing sensitive information in a browser."
He added that the challenge is not merely knowing that threats exist but understanding how to prevent harm before it occurs.
