New website names and shames companies that still don’t offer passkeys to users

A new website, Passkeys.io, launched on May 15, 2024, to identify and publicly list companies that have not yet adopted passkey technology for user authentication. The site reports that 24% of the top 100 most popular websites globally do not offer passkey support, despite their designation as the most secure method for logging into applications and services. Passkeys, which utilize public-key cryptography, eliminate the need for traditional passwords and are resistant to phishing attacks. The initiative aims to pressure companies into adopting this more secure authentication standard by highlighting their lack of support. Passkeys are designed to be more user-friendly than passwords, requiring only biometric authentication or a device PIN to log in, and are synchronized across a user's devices via cloud services. The website's creators hope this public shaming will accelerate the transition away from vulnerable password-based systems.