Passkey use lags at major platforms, Dashlane says

Dashlane has published research showing that passkeys still account for a minority of measured logins at major online platforms. Google recorded the highest share among the named services, at 28%.

Other large consumer brands posted lower levels in the study, with passkeys accounting for 18% of measured logins at PayPal, 17% at Amazon and 8% at eBay. The figures suggest a gap between companies offering passkey sign-in and users adopting it for routine account access.

The findings come as concern over account security rises in the UK. Report Fraud, the national reporting service for cybercrime and fraud, recently urged internet users to switch to passkeys after reporting a sharp increase in money lost through hacking of email and social media accounts. Losses rose to GBP £6.3 million in the 2025/26 financial year from GBP £1.2 million in 2024/25.

Passkeys are designed to replace passwords with device-based authentication using biometrics or a PIN. Because they are tied to a legitimate service and do not require a reusable password to be sent, they are widely seen as less vulnerable to phishing and credential theft than conventional password sign-ins.

Dashlane based its ranking on millions of aggregated, anonymised authentications managed over the past year. It measured passkey adoption against total login activity, giving a view of how often people actually use passkeys after they become available on a service.

Adoption gap

The research suggests that making passkeys available alone does not shift user behaviour at scale. Even at Google, which made passkeys the default sign-in option for personal accounts several years ago, fewer than three in 10 measured logins in the study used the method.

That distinction between availability and use has become a central issue for security teams and consumer technology groups. Many services still allow password-based sign-in alongside passkeys, leaving open a route for phishing, password reuse and credential-stuffing attacks even after a more secure option has been introduced.

"Passkeys represent a significant step forward in tackling credential theft, phishing and account takeover, but simply making them available isn't enough. Our research is the first to highlight the gap between passkey support and actual adoption, and is a reality check that many organisations still rely heavily on passwords despite the security risks. The leaders on our list have taken meaningful steps to make their users safer and should be recognised for their success so far. Our findings show that services need to move beyond treating passkeys as an optional feature and make phishing-resistant authentication the default. The technology is already here. The challenge now is accelerating adoption and reducing the reliance on passwords that continues to expose businesses and their customers to unnecessary risk," said Christophe Frenet, Chief Product Officer at Dashlane.

The report points in particular to product design and sign-in flows as factors in whether people switch from passwords. It said Google's move to make passkeys the default sign-in option for personal accounts helped it top the ranking, while Amazon found that stressing convenience rather than security could be more effective in prompting users to use passkeys.

Usage rises

Although overall use remains limited at the largest platforms measured, the report also points to faster growth in activity over the past year. Monthly passkey authentications among Dashlane users nearly doubled to 2.5 million, while the share of users storing at least one passkey rose to 57% from 40% a year earlier.

Several services recorded sharp quarter-on-quarter increases in passkey authentication activity between the first and second quarters of 2026. Dashlane said Experian rose 383%, Meta 310%, Ticketmaster 218%, PayPal 66%, and Klarna 64%.

Those figures measure growth in authentication activity rather than the number of individual customers adopting passkeys. Even so, they suggest users are becoming more willing to use passwordless sign-in on services that handle personal data, payments and other sensitive account information.

The broader conclusion is that the industry still faces a long transition away from passwords. While passkeys have gained visibility and support across major consumer platforms, the data suggests large numbers of users continue to rely on older login methods unless companies make the newer option the simplest way to sign in.

Dashlane said the main ranking covered the period from July 2025 to June 2026 and included domains with at least 400,000 total authentications, with related domains combined into single brand-level entries.