Website shames major platforms for lacking passkey support

๐กUnderstand the growing industry push for passwordless security and how it impacts user authentication standards.
โก 30-Second TL;DR
What Changed
WhyNoPasskeys.com tracks passkey adoption status across major web services.
Why It Matters
Increased public pressure may accelerate the industry-wide shift toward FIDO-based authentication, reducing reliance on vulnerable password systems.
What To Do Next
Audit your own authentication flows and prioritize implementing WebAuthn/Passkeys to improve user security posture.
๐ง Deep Insight
AI-generated analysis for this event.
๐ Enhanced Key Takeaways
- โขWhyNoPasskeys.com is an open-source project hosted on GitHub, allowing community contributions to track the implementation status of FIDO2/WebAuthn standards across various services.
- โขThe website categorizes platforms based on their support level, distinguishing between those with full passkey support, partial support (e.g., only for specific devices), and those with no support at all.
- โขSecurity researchers behind the initiative argue that password-based authentication remains the primary vector for credential stuffing and phishing attacks, which passkeys effectively neutralize.
- โขThe project maintains a 'Hall of Shame' and a 'Hall of Fame' to gamify the adoption process and provide clear incentives for companies to prioritize security updates.
- โขMany platforms cited as laggards often cite legacy infrastructure constraints or the complexity of cross-platform synchronization as primary barriers to rapid passkey deployment.
๐ ๏ธ Technical Deep Dive
- Passkeys utilize public-key cryptography where the private key is stored on the user's device (e.g., Secure Enclave or TPM) and never leaves the hardware.
- The authentication process relies on the WebAuthn API, which facilitates the exchange between the browser/OS and the relying party (the website).
- Implementation requires the server to store a public key associated with the user account, which is then used to verify the digital signature provided by the user's device during login.
- Unlike traditional passwords, passkeys are resistant to server-side breaches because the server only holds the public key, which cannot be used to authenticate as the user.
๐ฎ Future ImplicationsAI analysis grounded in cited sources
โณ Timeline
Weekly AI Recap
Read this week's curated digest of top AI events โ
๐Related Updates
Same topic
Explore #security
Same product
More on whynopasskeys.com
Same source
Latest from Digital Trends
Windows Secure Boot certificate expires, affecting over a billion PCs

Russia Uses Cellebrite Tools Despite Exit Claims

Google Play Store expands billing options for Android apps

HapticPad adds tactile feedback to Mac browsing
AI-curated news aggregator. All content rights belong to original publishers.
Original source: Digital Trends โ