In this exploratory study, we use the constructs of habit, social influence, and self-efficacy from UTAUT to evaluate how they influence the intention and use of cybersecurity practices among university students in Mexico City. We evaluated our model with Generalized Structured Component Analysis (GSCA), despicted that these constructs explain the impact on intention and use.