Digital resources are often collectively owned and shared by small social groups: friends sharing Netflix accounts, roommates sharing game consoles, families sharing WhatsApp groups. Yet, little is known about how these groups jointly navigate cybersecurity and privacy decisions for shared resources. Researchers conducted group interviews and a supplemental diary study with nine social groups of varying relationship types. They identified why, how and what resources groups shared, their jointly construed threat models, and how these factors influenced group strategies for securing shared resources.