TL;DR: During Cybersecurity Awareness Month, $100,000 was donated to six organisations supporting youth digital literacy, online safety, and STEM education, according to 1Password. The signal for identity teams is that secure behaviour starts earlier than policy enforcement, and security culture has to extend beyond the enterprise.
NHIMG editorial — based on content published by 1Password: community donations and online safety education during Cybersecurity Awareness Month
By the numbers:
- Digital Moment reached over 4,000 Canadian youth and educators with essential digital safety training in the last year.
Questions worth separating out
Q: How do digital literacy programmes affect identity security?
A: They reduce the likelihood that users will hand over credentials, approve suspicious prompts, or mishandle account recovery.
Q: Why should IAM teams care about online safety education?
A: IAM controls assume people can make safe choices when they are asked to reset credentials, approve access, or follow login prompts.
Q: What should security teams measure after awareness training?
A: Measure behaviour, not attendance.
Practitioner guidance
- Map awareness content to identity failure modes Build training around phishing, account recovery, suspicious consent prompts, and unsafe sharing rather than generic cyber hygiene messaging.
- Use school and community programmes to shape future user behaviour Support digital literacy initiatives that teach safe online behaviour before users become employees, contractors, or administrators.
- Measure whether awareness changes reporting quality Track whether users submit better-quality phishing reports, recognise suspicious verification flows, and escalate account anomalies faster after education campaigns.
What's in the full article
1Password's full post covers the community partnerships and volunteer activity this analysis intentionally leaves at a higher level:
- Profiles of the six supported organisations and the specific communities they serve
- Details of 1Password employee volunteering, curriculum review, and pro bono workshop activity
- The parent-focused cybersecurity guide developed with the Family Online Safety Institute
- Direct quotes from partner organisations describing how the support was used
👉 Read 1Password’s community impact update on digital literacy and online safety →
Digital literacy and online safety skills: why they matter?
Explore further
Community digital safety is upstream identity security. This post is not about enterprise IAM mechanics, but it does show that security behaviour begins long before a user enters a corporate directory. If people are not taught to recognise unsafe requests, suspicious links, and poor account habits early, the IAM programme inherits avoidable risk later. Practitioner conclusion: security teams should treat digital literacy as a foundational trust input, not an afterthought.
A few things that frame the scale:
- 96% of organisations store secrets outside of secrets managers in vulnerable locations including code, config files, and CI/CD tools, according to Ultimate Guide to NHIs.
- Only 20% have formal processes for offboarding and revoking API keys, which shows how often lifecycle governance lags behind operational reality.
A question worth separating out:
Q: How can organisations connect community education to IAM outcomes?
A: They can support programmes that teach safe online behaviour, then use the same lessons internally in security awareness and policy design. The point is to build a broader culture of verification and caution that makes enterprise identity controls easier to operate effectively.
👉 Read our full editorial: 1Password’s community donations highlight digital safety skills