Passkeys - The Future of Secure Login
New website whynopasskeys.com has been launched to name and shame companies that still don't offer passkeys for users to log in to their apps and services.
"A list is a surprisingly effective motivator. Nobody wants to be on the list," wrote Scott Helme, the longtime security researcher who created the website.
Passkeys are more secure than passwords because they are generated by a user's device and tied to that phone or computer and the website they are created for. They can rely on biometrics such as Face ID, Touch ID, or a physical security key; and can be stored automatically in someone's password manager.
- They are much harder to steal or phish by a hacker unless they get physical control of the target's devices.
- This is a crucial advantage over passwords, which users have to remember and can be vulnerable to phishing attacks.
- Major companies such as Apple, Google, and Microsoft are already offering passkeys to users.
However, some major apps and services still don't offer passkeys, including Instagram, Netflix, and Spotify. Instagram does offer passkeys, but only if the account is tied to a Facebook account with a passkey enabled.
TechCrunch reached out to Netflix and Spotify for comment, but no response was received at the time of writing.
The lack of passkey support from these companies is concerning, especially considering the growing importance of security in the digital age. Users deserve the option to use passkeys to log in to their apps and services, and it's up to companies to provide this option.
Last chance to save up to $190 on TechCrunch Founder Summit. Join 1,000+ founders and VCs at all stages for real-world scaling insights and connections that move the needle. Savings end June 26, 11:59 p.m. PT.