Cloud Security Awareness, Practices, and Password Management Among Students

This study examined cloud security awareness, security practices, password-management behaviour, and perceived security risks among students using cloud-based services. The analysis of the 50-response dataset indicates that respondents generally demonstrated a good level of awareness of common cloud-security threats, including unauthorized access, phishing, privacy risks, and multi-factor authentication. However, the findings also indicate that awareness does not always translate into consistent secure behaviour.   Password management was identified as an important area requiring greater attention. Although a majority of respondents reported using strong passwords, fewer reported using unique passwords for different accounts, and password reuse remained relatively common. The adoption of password managers was also comparatively low. Similarly, although most respondents were aware of multi-factor authentication, a smaller proportion reported having MFA enabled. These findings highlight a potential awareness–behaviour gap in student cloud-security practices. The study therefore emphasizes the importance of practical cybersecurity education that goes beyond creating awareness. Students should be encouraged to adopt secure and consistent practices such as using unique passwords, enabling MFA, avoiding password reuse and sharing, using password managers, monitoring cloud accounts, and recognizing phishing attempts. Educational institutions can support these practices through regular awareness programmes, practical demonstrations, and guidance on secure cloud usage. The study also highlights the importance of considering the human factor when examining cloud-security risks. Technical security controls alone may not provide sufficient protection if users do not consistently follow secure practices. Therefore, future cybersecurity initiatives should combine technical safeguards with user education and behavioural awareness.   Finally, the present analysis is based on a dataset of 50 respondents and should therefore be treated as a preliminary demonstration of the proposed research-analysis framework rather than evidence representing an actual student population. Future work should collect genuine responses from a larger and more diverse student population and examine relationships between awareness, perceived risk, password behaviour, and security practices using appropriate statistical methods. Such research can provide stronger evidence for developing effective student-focused cloud-security awareness and password-management programmes./

[1]   O. A. Adeosun, “Cloud data security: An empirical study of user awareness, perceived risks and protective measures,” World Journal of Advanced Research and Reviews, vol. 25, no. 2, pp. 1185–1192, 2025, doi: 10.30574/wjarr.2025.25.2.0399. [2]     A. Moallem, Cybersecurity Awareness Among Students and Faculty. Boca Raton, FL, USA: CRC Press/Taylor & Francis, 2019, ISBN: 978-0-367-14407-4 (hardback), 978-0-429-03190-8 (ebook). [3]  A. Al Zaidy, “Measuring Cybersecurity Awareness of Students: a Study of State College Students,” Journal of Information Technology, Cybersecurity, and Artificial Intelligence, 2025, doi: 10.70715/jitcai.2025.v2.i3.030. [4]   A. Alshaikh, M. Maynard, M. Ahmad, and S. L. A. Haris, “Factors Affecting Cybersecurity Awareness among University Students,” Applied Sciences, vol. 12, no. 5, Art. no. 2589, 2022. [5]  R. C. T. Ming, N. H. Rahaman, L. A. S. Saidi, W. S. E. Y. Wan Yusof, and S. N. S. Ramlee, “Knowledge, Attitude, and Password Practices: Determinants of Cybersecurity Awareness among Students in Malaysian Public Universities,” International Journal of Education, Psychology and Counselling. [6]  P. A. Grassi, J. L. Fenton, E. M. Newton, R. Perlner, A. R. Regenscheid, W. E. Burr, J. P. Richer, N. Lefkovitz, J. M. Danker, Y.-Y. Choong, K. Greene, and M. F. Theofanos, Digital Identity Guidelines: Authentication and Lifecycle Management, NIST Special Publication 800-63B, National Institute of Standards and Technology, 2020. [7]  D. Temoshok, J. Fenton, Y.-Y. Choong, N. Lefkovitz, A. Regenscheid, R. Galluzzo, and J. Richer, Digital Identity Guidelines: Authentication and Authenticator Management, NIST Special Publication 800-63B-4, National Institute of Standards and Technology, 2025. [8]   Verizon Business, 2025 Data Breach Investigations Report, Verizon, 2025. [9]  IBM Security and Ponemon Institute, Cost of a Data Breach Report 2025, IBM, 2025. [10]  P. A. Grassi, M. E. Garcia, and J. L. Fenton, Digital Identity Guidelines, NIST Special Publication 800-63-3, National Institute of Standards and Technology, 2017.