/
← Voltar ao feed
low

Dashlane report: passkey authentications nearly double to 2.5M per month, but adoption on major sites stays low

1 fonte(s) · 1 atualização(ões) · publicado 14/10/2026 07:15 · coletado há 9 horas

Dashlane's third annual Passkey Power 20 report found that passkey use is growing but still trails passwords. The report covers millions of aggregated, anonymized authentications between July 2025 and June 2026. Authentications by Dashlane users nearly doubled year on year to 2.5 million per month, and 57% of users now store at least one passkey, up from 40% last year. Passkeys still account for a minority of logins on major sites: Google (28%), PayPal (18%), Amazon (17%) and eBay (8%). Dashlane's CPO Christophe Frenet argued that companies need to move from soft adoption to enforcement so that passkeys become the primary authentication method.

Technical Details

  • Passkeys are phishing-resistant because there is no password to guess or steal. Users authenticate with a device PIN or a biometric such as a face scan.
  • Passkeys are cryptographically bound to legitimate websites, and the private key stays on the user's device. A breach of the website therefore does not expose it.
  • HubSpot and Cisco Duo led by authentication volume. New entrants to the top 20 include isolved HCM, BambooHR, AWS and Dropbox.
  • LY Corporation has announced a spring 2027 mandatory passkey deadline for Yahoo Japan users. The report notes that few developers force passkey adoption.

Remediation

Dashlane recommends four steps to close the gap between passkey support and adoption:

  • Make passkeys highly visible and easy to use within existing workflows.
  • Promote passkeys as a faster alternative to passwords with higher completion rates.
  • Start removing alternatives such as one-time passcodes and passwords.
  • Set a deadline for mandatory passkey use.

Report Fraud also recommends passkeys as one of the most effective ways to mitigate account takeover attacks.

Linha do tempo

  1. infosecurity-magazine.com ↗ · pub. 14/10/2026 07:15 · coletado 20/10 16:31 primeiro registro

    Dashlane report: passkey authentications nearly double to 2.5M per month, but adoption on major sites stays low

    ler a análise desta fonte

    Dashlane's third annual Passkey Power 20 report found that passkey use is growing but still trails passwords. The report covers millions of aggregated, anonymized authentications between July 2025 and June 2026. Authentications by Dashlane users nearly doubled year on year to 2.5 million per month, and 57% of users now store at least one passkey, up from 40% last year. Passkeys still account for a minority of logins on major sites: Google (28%), PayPal (18%), Amazon (17%) and eBay (8%). Dashlane's CPO Christophe Frenet argued that companies need to move from soft adoption to enforcement so that passkeys become the primary authentication method.

    Technical Details

    • Passkeys are phishing-resistant because there is no password to guess or steal. Users authenticate with a device PIN or a biometric such as a face scan.
    • Passkeys are cryptographically bound to legitimate websites, and the private key stays on the user's device. A breach of the website therefore does not expose it.
    • HubSpot and Cisco Duo led by authentication volume. New entrants to the top 20 include isolved HCM, BambooHR, AWS and Dropbox.
    • LY Corporation has announced a spring 2027 mandatory passkey deadline for Yahoo Japan users. The report notes that few developers force passkey adoption.

    Remediation

    Dashlane recommends four steps to close the gap between passkey support and adoption:

    • Make passkeys highly visible and easy to use within existing workflows.
    • Promote passkeys as a faster alternative to passwords with higher completion rates.
    • Start removing alternatives such as one-time passcodes and passwords.
    • Set a deadline for mandatory passkey use.

    Report Fraud also recommends passkeys as one of the most effective ways to mitigate account takeover attacks.