Is cybersecurity research missing a trick? Integrating insights from the psychology of habit into research and practice

•The security literature does not discuss important aspects of habit theory.•Omissions include the moderating role of habit in the intention-behaviour link.•The role of cues in triggering behaviour.•The mechanisms for habit formation and change.•Key implications for the security and privacy literature of the above are discussed.