#USA #New York #Google #Dashlane #passkey

The Adoption Landscape of Passkeys

In a world increasingly paying attention to cybersecurity, the latest findings from Dashlane's third annual Passkey Power 20 report reveal the complex landscape of passkey adoption among major tech giants. Published during Cybersecurity Awareness Month, this report offers a crucial perspective that highlights both the potential and challenges of passkey technology in securing user accounts.

The report shows that despite substantial progress, the adoption of passkeys remains limited. Currently, passkeys make up only 28% of logins at Google, 23% at GitHub, and 21% at HubSpot. Meanwhile, they account for only 6% of logins at Microsoft and a mere 4% at OpenAI. These findings indicate a slow transition from traditional passwords to the more secure, phishing-resistant passkey solutions that have been introduced by these leading companies.

Growing User Awareness but Limited Use

Interestingly, while the percentage of Dashlane users storing at least one passkey has risen to 57% from 40% last year, the actual use of passkeys remains disproportionately low compared to conventional passwords. This disparity raises questions about the effectiveness of existing adoption strategies and underlines the necessity for technology providers to prioritize passkeys as the default authentication method rather than merely an optional one.

Dashlane's extensive data analysis reveals that many of the leading players in the passkey landscape adopt different strategies that impact user adoption rates. For instance, Google transitioned its sign-in method to passkeys as the default option for personal accounts back in 2023, which remarkably positions it at the top of the rankings in Dashlane's study. This proactive approach highlights a pivotal factor: availability does not inherently equate to usage. By making passkeys the automatic method of sign-up, companies can reduce the cognitive load on users, thereby enhancing adoption rates.

The Challenge Ahead

With the increasing recognition of passkeys as a necessary measure against password-related security threats like phishing and brute-force attacks, their limited application poses a broader challenge within cybersecurity. Research suggests that introducing passkey support alone does not suffice to bring about a behavioral shift among users. Hence, organizations need to take further steps—such as simplifying the passkey integration process—to encourage their adoption effectively.

According to Christophe Frenet, Chief Product Officer at Dashlane, "Our findings indicate that services must move beyond treating passkeys as an optional feature and make phishing-resistant authentication the default. The technology is ready; the challenge lies in boosting adoption rates while minimizing password dependency."

As the digital landscape evolves, the report indicates that organizations must take concrete actions to bridge the gap between availability and adoption. For example, enterprises that still offer traditional password-based logins alongside passkeys risk exposing themselves to credential-based attacks. A dual system can perpetuate security vulnerabilities, making the transition to passkeys not just advisable but essential.

Momentum for Change

Despite the apparent hurdles, Dashlane's data also reveals some promising trends. Monthly passkey authentications have surged to 2.5 million, with tremendous growth observed across certain services. Notably, platforms like BetMGM saw passkey authentication activities increase by 391%, Experian by 383%, and Gusto by 354% from Q1 to Q2 of 2026. This surge reflects a growing inclination toward implementing passkeys in services handling sensitive data, though overall reliance on passkeys still has a long way to go.

Frenet emphasizes, "Even with the significant increases in passkey usage, we're still not fully transitioned. There’s still much work to be done to simplify passkey usability, and more companies need to enforce changes that prioritize passkeys as the primary authentication method."

Conclusion

In summary, the Dashlane Passkey Power 20 report sheds light on a critical juncture in cybersecurity. As major tech platforms navigate the path toward widespread passkey adoption, they must focus on creating frictionless user experiences while urging staff and clients alike to eschew outdated password practices. The findings serve as both a warning and a guide, reminding the industry that the shift from passwords to passkeys is not merely a technological upgrade, but a necessary evolution toward a more secure digital future.

For those interested in diving deeper, access the full Dashlane Passkey Power 20 report for comprehensive insights into authentication trends and user behaviors.