- One in four major apps and services on the internet, including Instagram, Netflix, and Spotify, still lack passkey support.
- A new website, whynopasskeys.com, has publicly criticized companies that do not provide this modern protection method and published a list of them.
- Seven of the top 25 most-visited websites globally, around 28 percent, offer no passkey support whatsoever.
- The list includes household names such as Instagram, Netflix, and Spotify, which serve hundreds of millions of user accounts protected by passwords and multi-factor authentication.
- The project founder, renowned cybersecurity researcher Scott Helme, noted that the purpose of creating this site is to put pressure on companies to enable passkeys.
- In the world of cybersecurity, passkeys are considered the gold standard for protecting accounts, yet four large services still do not allow users to sign in with passkeys.
- Passkeys are more secure than passwords because they are generated by a user’s device and tied to that phone or computer and the website they are created for.
- Currently, tech giants like Apple, Google, and Microsoft are setting an example in security by fully implementing passkeys technology.
One in four major apps and services on the internet, including Instagram, Netflix, and Spotify, lack passkey support, according to a new website, whynopasskeys.com.12467
Of the top 25 most-visited websites globally, seven, around 28 per cent, offer no passkey support whatsoever. This alarming statistic highlights the vulnerability of millions of user accounts, which are often protected only by traditional passwords and, at best, multi-factor authentication.3
Scott Helme, the founder of the site and a renowned cybersecurity researcher, stated that the goal is to pressure companies into adopting passkeys, which are now widely considered the gold standard for account security.5
The site draws its rankings from Cloudflare Radar and the Tranco list, while passkey adoption data comes from passkeys.directory, a community-maintained resource.
Major tech companies like Apple, Google, and Microsoft have already implemented passkeys, setting a standard for security.8
However, Netflix and Spotify have not provided an official explanation for their lack of support, raising concerns among users.
Helme noted, “Lists are surprisingly effective motivators. No one wants to be on such a list,” emphasizing the need for accountability in the tech industry.
As the cybersecurity landscape evolves, the pressure mounts on these platforms to enhance their security measures and protect user data more effectively.
“A new website has publicly named major companies that do not offer passkey login options, including Instagram, Netflix, and Spotify. This initiative aims to motivate these services to adopt passkeys, which are considered the gold standard in cybersecurity.”
t2ONLINE
mezha.net
TechCrunch
