New website catalogs 24% of top websites still lacking passkey support
Tags Consumer · Enterprise
A newly launched website names and shames major companies that still don't offer passkey authentication, finding that 24% of the world's most popular websites lack support. Notable holdouts include Instagram, Netflix, and Spotify. Passkeys, based on FIDO2/WebAuthn standards, are considered the most secure authentication method as they are phishing-resistant and eliminate password reuse risks. The site aims to pressure laggard companies to adopt the standard.
Technical significance
Passkey adoption at the top websites is critical for the FIDO2 standard to reach critical mass. When Instagram and Netflix lack support, hundreds of millions of users remain on password-based authentication vulnerable to credential stuffing and phishing. The 24% gap suggests consumer-facing companies are slower to implement passkeys than enterprise/SaaS companies, likely due to concerns about account recovery flows and cross-platform sync complexity.