Archive — US — techcrunch
New website names and shames companies that still don’t offer passkeys to users
A new website, whynopasskeys.com, highlights companies failing to offer passkeys for account security, including Instagram, Netflix, and Spotify. Passkeys are considered a safe alternative to passwords, as they utilize device-generated credentials and biometrics. The site aims to motivate companies to adopt passkeys, pushing users to opt for more secure login methods.
Key points
- Passkeys are the gold standard for account security and are generated by a user's device.
- One in four major apps does not offer passkeys, including popular services like Instagram, Netflix, and Spotify.
- The website whynopasskeys.com was created by security researcher Scott Helme to pressure companies into adopting passkeys.
- Passkeys are tied to specific devices and are difficult to steal compared to traditional passwords.
- Major companies like Apple, Google, and Microsoft have already implemented passkeys.
- Users can use passkeys on Instagram only if linked to a Facebook account that supports it.
Why it matters
- The rise of passkeys reflects the broader trend in cybersecurity emphasizing user convenience and enhanced security.
- As of 2025, more businesses are expected to transition away from password-based systems towards passwordless authentication methods including biometrics.
- There have been recent high-profile security breaches emphasizing the need for more secure login methods.
The push for widespread adoption of passkeys is critical, as the security landscape evolves and threats become more sophisticated, indicating that companies must prioritize user security in their service offerings.