New Site Names Companies Still Not Using Passkeys

Modern authentication methods like passkeys are becoming the standard for protecting accounts from breaches and phishing. However, according to the new whynopasskeys.com project, nearly a quarter of major online services still don’t offer this technology to users. The list includes platforms like Instagram*, Netflix, and Spotify, which continue to rely on traditional passwords.

Passkeys operate using cryptographic keys generated by the user’s device and tied to a specific site or app. Users can log in with biometric authentication (Face ID, Touch ID) or a physical security key. Unlike passwords, passkeys don’t need to be memorized and are nearly impossible to steal remotely, significantly boosting security.

The project’s creator, cybersecurity expert Scott Helme, explains that the site’s goal is to push companies toward passkey adoption through public pressure. “No one wants to be on the lagging list,” he notes. Meanwhile, tech giants like Apple, Google, and Microsoft already support the technology, proving its effectiveness and demand.

Interestingly, Instagram* does allow passkeys—but only if the account is linked to a Facebook* profile with the feature enabled. Representatives for Meta*, Netflix, and Spotify have not commented on the delays in implementing passkeys in their services.