Exposing the Laggards: Website Calls Out Companies Refusing to Adopt Secure Passkeys

Despite the growing consensus on the superiority of passkeys in protecting user accounts from cyber threats, a significant number of major online services still fail to offer this option. According to a newly launched website, whynopasskeys. com, created by security researcher Scott Helme, about one in four prominent apps and services do not provide passkeys, including notable names such as Instagram, Netflix, and Spotify. Passkeys offer enhanced security by being device-specific and tied to the user's device and the website they are created for, often leveraging biometric authentication like Face ID or Touch ID.

This method eliminates the need for users to remember complex passwords, significantly reducing the risk of hacking and phishing. Helme's website aims to encourage companies to adopt passkeys by publicly listing those that have not yet implemented this security feature. Major tech giants like Apple, Google, and Microsoft have already embraced passkeys, setting a positive example. Interestingly, while Instagram does not directly offer passkeys, users can enable this feature if their account is linked to a Facebook account with passkeys enabled, highlighting inconsistencies within Meta's own products.

The website's approach is straightforward: by naming companies that lag behind in security, it seeks to motivate them to upgrade their authentication methods, enhancing user protection across the web.

Source: TechCrunch