Key facts
- Whynopasskeys.com is a new website that lists companies not offering passkey login options.
- Passkeys are more secure than passwords and use biometrics or security keys.
- Scott Helme, a security researcher, created the site to encourage passkey adoption.
- Instagram, Netflix, and Spotify are cited as examples of services lacking passkey support.
- Apple, Google, and Microsoft are recognized for providing passkey options.
A new website, whynopasskeys.com, has been launched to publicly identify and shame companies that have not yet implemented passkey authentication for their users. Passkeys are widely regarded as a more secure alternative to traditional passwords, utilizing device-specific biometrics like Face ID or Touch ID, or physical security keys, and are often stored within password managers.
Security researcher Scott Helme created the website with the explicit goal of motivating companies to adopt passkeys. He stated that being publicly listed serves as a significant motivator, as "nobody wants to be on the list." The site highlights major internet services that still do not offer this advanced security feature.
While prominent technology firms such as Apple, Google, and Microsoft are recognized on the site for providing passkey options, several other major platforms are still lagging. Notably, Instagram is mentioned as not offering passkeys directly, although users can enable them if their account is linked to a Facebook account that has passkeys enabled. TechCrunch has reached out to Meta, Netflix, and Spotify for comment on their passkey strategies.