2022 Password Decisions Survey
IT decision makers shed light on enterprise password management
The 2022 Password Decisions Survey posed questions to IT decision makers about password sharing practices, technologies in use, security risks, and the Great Resignation. While there are bright spots, password and security practices remain a challenge many companies still need to address.
Download Full Survey
In November 2021, Bitwarden partnered with Propeller Insights to poll over 400 independent IT decision makers across a wide range of industries who play a key role in enterprise purchasing decisions. The findings show an uptick in password manager usage, indicating its increasingly mainstream appeal. Concurrently, IT decision makers continue to struggle with adhering to security best practices and express security-related unease about remote work.
While password best practices are improving among IT decision makers, there is still a long way to go:
2FA (two-factor authentication) is now mainstream, with 88% of respondents using it at work
Despite the increase in password manager use and 2FA, more than half (53%) of IT decision makers still share passwords with colleagues via email, a 14% jump from last year due in part to the sudden shift to remote work
Nearly half (41%) share passwords over chat and 31% share passwords in conversation
.avif?eu=dcdc06b0b59cfad15939a8806f74646bb33702fef60267d83f31b2ad1ea1978024fb4d50719472b92b3d5eded6e947ba31c42d6248e6d6df95bb49f6eb30a80806d60bec36b22552552bc3f8e4a705453a901251a0d5cb0ef26d2480e7e0b5771c041a2aa222fcc5acea3f7bafda7263bde3e5303686fd29a3510b1088062fa920a4979c6d4da894b149e7bba9ae16cadb86584044a49a3240052b48029f5ae6deb043235d36495a33cda651c437c4b66d193324570900a563328503ae6e35c2e3fdf3088f2c64e3a8cb331fe692edc3aa45ee7e19939a74f0c16225504ec370e8fe3da29b0b1b61e14f88e935c16c6a342f9c5cd773&a=w%3D850%26h%3D478%26fm%3Davif%26q%3D75&cd=2022-12-28T00%3A35%3A22.329Z)
Ransomware, phishing, and cyberattacks continue, yet many organizations still lack a mitigation strategy:
More than half (54%) of IT decision makers admit their organization has experienced a cyberattack
While two-thirds of organizations have a ransomware mitigation strategy in place, 25% do not have one or are not sure
Phishing attacks remain a scourge: emails purporting to be from financial institutions (35%) or a government entity (22%) are the most common
Remote work and the Great Resignation are impacting cybersecurity:
Almost two-thirds (61%) of respondents are “more concerned” about cybersecurity this year and attribute this to the fear that employees working remotely may be more lax about their overall security hygiene
Almost half (48%) are working more hours than last year, with 58% faulting turnover (29%) and difficulty hiring (29%) as the primary culprits
