Abstract
Privacy-invasive apps and social media phishing pose emerging online risks to young adults. Hybrid nudges, which combine simple nudges with educational aspects directly within related mobile interactions, represent a promising intervention to support informed decisions when confronted with security and privacy (S&P) risks. However, they are rarely adapted to the user-specific vulnerabilities and needs of young adults, which may limit their real-world uptake. In four workshops involving fourteen students aged 20-27, we explored risk perceptions influencing young adults' S&P decisions and obtained end-user feedback to research-based hybrid nudge designs. Participants emphasized the behavior of relevant others and platform-provided social indicators as key risk factors. However, social influence was also discussed as a key resource, with participants stating that previous experiences of others increased their risk awareness. Our findings further indicate that the appropriate level of information and friction may depend on the type and perceived immediacy of the respective S&P risk. Based on our findings, we discuss design implementations for integrating S&P support into mobile app stores and social media interfaces. In addition, we discuss design directions for future user research and intervention paths beyond nudging.

This publication has 45 references indexed in Scilit: