Observed Signal · Jun 24, 2026 · Product Launch · Source: techcrunch · Impact: 2/5 · Sentiment: Positive
Site Lists Companies Still Without Passkey Support
A new website, whynopasskeys.com, created by security researcher Scott Helme, lists major apps and services that still do not offer passkeys as a login option. The site reports that roughly one in four major apps and services — including Instagram, Netflix and Spotify — lack passkey support. Major platform providers such as Apple, Google and Microsoft do offer passkeys. The site’s stated goal is to pressure companies to enable passkeys so users can adopt the more phishing‑resistant, device‑tied authentication method. TechCrunch contacted Meta, Netflix and Spotify for comment; Meta did not immediately respond regarding discrepancies across its products (Facebook and WhatsApp support passkeys, Instagram’s support is limited to accounts linked to Facebook with a passkey enabled).
Wider passkey adoption affects authentication and identity management practices; the site could pressure major platforms to accelerate passkey support, which matters to identity providers, password managers and security posture but is not a platform policy or major technical release.
Track Instagram Signals & Market Shifts in Real-Time
Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your free Explorer workspace to monitor these entities.
Key Takeaways & Evidence Grounding
- whynopasskeys.com is a new website that names companies that do not offer passkeys to users.
- The site reports that one in four major apps and services on the internet do not offer passkeys, citing examples such as Instagram, Netflix and Spotify.
- Scott Helme, a longtime security researcher, created whynopasskeys.com to pressure companies to enable passkeys.
- Major companies including Apple, Google and Microsoft are listed as offering passkeys to users.
- Instagram allows passkeys only when an account is tied to a Facebook account with a passkey enabled.
Connected Companies & Entities
9 Entities mapped“And yet they are still not offered by one in four major apps and services on the internet, including Instagram, Netflix, and Spotify....”
“And yet they are still not offered by one in four major apps and services on the internet, including Instagram, Netflix, and Spotify....”
“And yet they are still not offered by one in four major apps and services on the internet, including Instagram, Netflix, and Spotify....”
“Major companies such as Apple, Google, and Microsoft are on the good side of the list and do offer passkeys to users....”
“Major companies such as Apple, Google, and Microsoft are on the good side of the list and do offer passkeys to users....”
“Major companies such as Apple, Google, and Microsoft are on the good side of the list and do offer passkeys to users....”
“Meta did not immediately respond to TechCrunch’s request for comment as to why some of its products, like Facebook and WhatsApp, offer passk...”
“Meta did not immediately respond to TechCrunch’s request for comment as to why some of its products, like Facebook and WhatsApp, offer passk...”
“Meta did not immediately respond to TechCrunch’s request for comment as to why some of its products, like Facebook and WhatsApp, offer passk...”
Ontology Mapping & Concepts
Related Market Signals & Shifts
Recent verified developments and strategic activity across this market segment.
Passkeys Explained Simply
This explainer describes passkeys — a passwordless authentication method built on asymmetric cryptography (public/private key pairs) and standardized by WebAuthn and FIDO2. Private keys remain on the user device (Secure Enclave, TPM, or hardware tokens like YubiKey), while servers store only public keys; authentication uses signed challenges, making passkeys resistant to phishing and server-side credential leaks. Major platform vendors (Apple, Google, Microsoft) now support passkey synchronization (iCloud Keychain, Google Account/Password Manager, Windows Hello) to aid device recovery. Many consumer services already offer passkeys (Google, Apple, GitHub, Microsoft, PayPal, Amazon, X). The article notes standards bodies (W3C, FIDO Alliance) and mentions implementation helpers and libraries used by developers.
Microsoft makes Passkeys default in Entra ID
Microsoft announced that passkeys will become the default authentication method in its Entra ID identity system starting September 1, 2026. Users who currently rely on SMS or voice call codes for multi-factor authentication (MFA) will be required to switch; Microsoft will continue to support SMS and voice codes only for companies that explicitly request it until February 2027. The change will be rolled out gradually, prompting affected users to register passkeys at their next MFA sign-in. Microsoft is also expanding support for device-bound and synchronized passkeys and adding administrative management controls. The company cited rising success rates of AI-powered phishing (reported up to 54% click rates versus ~12% for conventional phishing) as a key reason for the shift. Passkeys are based on FIDO2 and WebAuthn standards and replace passwords with cryptographic credentials tied to biometric or PIN-based device authentication.
Decision Guide: Should Your App Adopt Passkeys?
This technical decision guide explains how product, engineering, and security teams should evaluate whether to adopt passkeys for user authentication. It defines passkeys, passwords, and MFA; describes what passkeys protect (phishing and credential-stuffing) and what they don't (stolen session tokens, device malware, coercion, insider threats); and provides a 10‑item readiness checklist (scored 0–2, weighted) plus clear show‑stoppers (notably recovery and enterprise SSO). The article recommends piloting passkeys with narrow cohorts, keeping password fallbacks, measuring registration/sign‑in success and support metrics, and using a one‑page template to present a recommendation to leadership.
Track Real-Time Market Signals & Shifts
Set up custom watchlists to receive automated, evidence-grounded executive digests whenever material signals or shifts occur across your tracked landscape.