Nearly 800 million people — around 10% of the world’s population — use ChatGPT, and millions turn to it daily for advice on protecting their online privacy and securing their digital lives. The most common questions reveal users’ deepest digital fears — those about scams, data leaks, and how to stay safe online. Ironically, many end up unknowingly sharing personal data while seeking help.
NordVPN researchers analyzed the most popular and most bizarre cybersecurity questions asked to ChatGPT and provided a summary of their findings.
“While some questions are serious and insightful, others are hilariously bizarre — but they all reveal a troubling reality: Many people still misunderstand cybersecurity. This knowledge gap leaves them exposed to scams, identity theft, and social engineering. Worse, users unknowingly share personal data while seeking help,” says Marijus Briedis, CTO at NordVPN.
The 5 most common cybersecurity questions asked in 2025 so far
In 2025, users are most concerned about three key areas of cybersecurity: protecting their personal information, securing their online accounts, and maintaining private communications. These priorities are reflected in the most frequently asked questions:
- “How can I recognize and avoid phishing scams?”
- “How can I secure my social media accounts from hackers?”
- “Is using a VPN really safe, and how do I choose the right one?”
- “What should I do if my data has been leaked or my account has been hacked?”
- “What are the safest messaging apps for privacy?”
These are valid concerns, but they only scratch the surface of the issue. Some shockingly strange or misguided questions also highlight a fundamental misunderstanding of digital security.
The most surprising cybersecurity questions people ask
Beyond the reasonable concerns about online safety, here are some of the most bizarre and misguided questions users have asked:
- “Can hackers steal my thoughts through my smartphone?”
- “If I delete a virus by pressing the delete key, is my computer safe?”
- “Can my smart toaster join a botnet and attack me?”
- “If I whisper my password while typing, can hackers still hear it?”
- “Can I get hacked if I charge my phone during a thunderstorm?”
These questions are good for a laugh, but they also highlight a deeper problem: Many users fundamentally misunderstand how digital security works.
The real problem: Users reveal personal data without realizing it
“While the questions can be amusing, they also reveal a deeper issue — users frequently disclose personal information without realizing the risks,” says Marijus Briedis.
Here are some of the most common types of personal information users reveal:
- Full name and contact details. Users often include their full name, email address, or phone number, especially when requesting help with email or account recovery.
- Location data. People often share their city, street address, or GPS coordinates when seeking local recommendations or troubleshooting.
- Social media profiles. Users may paste their profile link or username into ChatGPT when seeking advice on account security.
- Financial data. Some users provide sensitive details, such as bank account numbers, credit card information, or payment screenshots, when seeking help with online payments.
- Login credentials. Users occasionally disclose usernames, passwords, or even two-factor authentication codes when asking for help with account access.
This unintentional oversharing serves as a reminder that even when seeking cybersecurity advice, users must exercise caution when providing personal information. After all, protecting your privacy starts with knowing what you share. For added safety, ChatGPT users can disable data usage for training by going to Data Controls and switching off the “Chat history & training” option.
“Why does this matter? Because what may seem like a harmless question can quickly turn into a real threat,” says Briedis. “Scammers can exploit the information users share — whether it’s an email address, login credentials, or payment details — to launch phishing attacks, hijack accounts, or commit financial fraud. A simple chat can end up compromising your entire digital identity.”
