Over 50% of websites collect visitors’ email addresses, creating the possibility of privacy breaches, as revealed by a survey conducted by Clutch (https://clutch.co/), a research and reviews platform for business services.
Website visitors’ email addresses are most commonly collected (57%), followed by names (47%), and locations (45%), the survey found. Although this information can provide valuable insights for businesses, inconsistent security measures may increase the risk to visitors’ privacy, according to Clutch. Industry leaders point out that email addresses present the greatest security risk to consumers.
“When data is correlated over multiple web services, whether that is a Gmail account, a bank account, or a password retrieval from Facebook, it’s done through the email address,” said Idan Udi Edry, CEO of Trustifi, a company specializing in email transaction data security and privacy. “The combination of an email address and a name is enough [for a hacker] to start the reconnaissance on someone as a user.”
Although security tools are widely available, 63% of website managers admit that they don’t currently use common security features, including encryption. Michael Tys is a mobile developer at TechMagic, a mobile app and web development studio based in Ukraine. He believes cumbersome user experience may explain the lack of widespread adoption of security tools.
“The user is required to do a lot of things–provide your password, your cat’s name, the street you’re living on, your favorite number,” said Tys. He is encouraged by the increasing availability of banking and other apps that use a fingerprint to unlock encrypted information.
Once a website visitor’s information has been collected, decisions about storage and hosting can help to avoid privacy risks. When it comes to how they host their sites, website managers are split nearly evenly. Forty-seven percent use self-hosting services, while 49% use externally managed servers. Self-hosting provides the highest level of security and control.
Websites are also split in how they store visitors’ information. Many rely on a combination of storage on the website itself (48%), on a third party app (46%), or offline (25%), all of which can benefit from widely available security tools.
Despite this evidence of privacy risks, the survey also found that respondents are aware that improvement is needed. In particular, use of encryption appears to be on the rise: More than one in five respondents plan to encrypt sensitive
Clutch’s 2017 Website Security Survey included 302 website managers who built and/or maintain a website for personal, business, or other use.