New Website Names and Shames Companies That Still Don’t Offer Passkeys to Users
The login screen flickered on a smartphone, its fields demanding a username and password—yet another reminder that the world of digital access is still tethered to the archaic, easily compromised system of text-based credentials. For users seeking a more secure, seamless alternative, passkeys are the future, but the transition is far from universal. A new website, whynopasskeys.com, is now exposing the lagging adoption of this modern authentication method, calling out major platforms that have yet to implement it.
The Security Gap in Major Apps
Despite growing awareness of the vulnerabilities associated with passwords, passkeys—a passwordless authentication system—remain out of reach for many users. According to the website, one in four major apps and services still lacks support for passkeys. Among the names listed are Instagram, Netflix, and Spotify, all of which have been slow to adopt the technology despite its widespread endorsement by security experts.
The absence of passkey support is not just an oversight; it's a glaring security risk. Unlike passwords, which can be guessed, stolen, or phished, passkeys are generated by the user’s device and linked to specific websites. They rely on biometric authentication or physical security keys, making them significantly harder to compromise. The system also eliminates the need for users to remember complex strings of text, reducing the likelihood of poor password hygiene.
Why the Push for Passkeys Matters
Scott Helme, the creator of whynopasskeys.com, has made it clear that the goal of the site is to apply pressure where it matters. In a blog post, he explained that the simple act of naming and shaming can be a powerful motivator for companies to act. “A list is a surprisingly effective motivator. Nobody wants to be on the list,” he wrote.
The website functions as a public tracker, allowing users to see which services support passkeys and which still lag behind. It also includes a feature that lets users report companies that have added passkey support after being listed, creating a dynamic and evolving record of progress.
- Apple, Google, and Microsoft are among the companies that have fully embraced passkeys.
- Instagram currently offers passkey support—but only when linked to a Facebook account that has one enabled.
- Netflix and Spotify have not yet made their positions clear, as of the latest update.
The Road Ahead for Passwordless Authentication
As the digital world continues its shift toward passwordless authentication, the pressure on major platforms to adopt passkeys will only grow. The technology is not just a convenience—it's a necessary evolution in how users interact with their online accounts. While some companies are moving forward with implementation, others are holding back, leaving users exposed to the same risks that have plagued the password era for decades.
whynopasskeys.com is more than a list; it’s a call to action. Whether through public scrutiny or internal pressure from users, the hope is that companies will recognize the urgency of modernizing their authentication systems. As more services roll out passkey support and the technology becomes increasingly standardized across operating systems, the time to adopt it is running out for those still clinging to the past.
In the coming months, the site will likely grow in influence, with more users turning to it to assess the security posture of their favorite platforms. If the trend continues, the days of typing in passwords may be numbered—though for now, passkeys remain a work in progress, one that the public is helping to accelerate.
