A new site, Why No Passkeys, publicly lists major platforms that still haven’t added passkey support—naming Instagram, Netflix, Spotify, Samsung, Roblox, and Baidu—while noting how some big tech players have already moved on.
The next time you log into Instagram or Netflix, there’s a good chance you’ll do it the old way—at least according to a new security website that’s keeping score.
Why No Passkeys puts a public spotlight on big companies that still rely on password logins instead of passkeys. The site is built around a simple premise: passkeys are the safer option, and companies that haven’t adopted them are falling behind.
Passkeys are designed to replace passwords with device-based logins such as Face ID or fingerprint scans. They’re harder to steal and are built to resist phishing, while also being easier to use. The website frames its target list against that promise—arguing these are not minor players without resources. but popular platforms with huge user bases still protected by nothing more than passwords.
The list includes Instagram, Netflix, and Spotify, along with Samsung, Roblox, and Baidu. It also points out that 7 of the top 25 most visited sites globally still lack native passkey support. In the site’s view, that gap is exactly what needs public pressure.
Why No Passkeys was created by security researcher Scott Helme. Helme previously teamed up with Troy Hunt in 2017 to launch WhyNoHTTPS, a site that pushed the internet toward encrypted browsing. This time. the effort is aimed at identity security—pushing companies toward modern authentication instead of sticking with credentials that have repeatedly failed users in real-world breaches and scams.
The tension gets sharper with examples from companies that appear to be moving in different directions. Meta, for instance, already offers passkeys on Facebook and WhatsApp. But Instagram users are said to be able to access the feature only if they link their account to a Facebook login with passkeys enabled.
The site’s function is blunt: it works like a public leaderboard, separating companies that support passkeys from those that do not. The stated goal is to make it harder for major platforms to ignore a shift that security experts have wanted for years.
Passwords still remain one of the weakest links online. Breaches. reused logins. and phishing scams continue to impact users every day—and passkeys remove many of the risks tied to passwords. For people using these apps. it’s a reminder that even widely trusted services can lag behind on security. and now there’s a website designed to make that delay visible every time someone checks the leaderboard.
passkeys Why No Passkeys Scott Helme Instagram passkeys Netflix passkeys Spotify passkeys password security phishing resistant authentication Face ID fingerprint login digital identity