Updated
Updated · t2online · Jun 25
Whynopasskeys.com Finds 7 of Top 25 Websites Lack Passkey Support
Updated
Updated · t2online · Jun 25

Whynopasskeys.com Finds 7 of Top 25 Websites Lack Passkey Support

3 articles · Updated · t2online · Jun 25

Summary

  • Seven of the world’s 25 most-visited websites — 28% — launched on Whynopasskeys.com without any passkey support, including Instagram, Netflix, Spotify, Samsung, Roblox and Baidu.
  • Passkeys tie logins to a user’s device and site, often through biometrics or security keys, making them far harder to phish than passwords or standard multi-factor authentication.
  • Scott Helme and Troy Hunt said the site is meant to give the public a shareable snapshot of adoption and push companies to explain why they still have not enabled passkeys.
  • The rankings use Cloudflare Radar and Tranco traffic data, but passkey status comes from the community-run passkeys.directory, so disputed listings must be corrected through submissions there.
  • Instagram shows the gap the project is highlighting: it can use passkeys only through a linked Facebook account, even as Meta’s Facebook and WhatsApp already support them directly.

Insights

With 5 billion passkeys now active, what's the real reason popular apps still cling to risky passwords?
Passkeys promise unhackable logins, but does a hidden 'backdoor' in account recovery make them useless?