The world's most popular sites that
still don't support passkeys.
Passkeys are phishing-resistant by design — they can't be phished, leaked in a breach, or replayed, whether they replace a password or back one up. These top sites haven't turned on passkeys yet. Let's change that.
18 of the top 50
Globally — that's 36% of the most popular sites with a login but no passkey support.
| # | Website | Passkeys |
|---|---|---|
| 1 | google.com | Passkeyspasswordless |
| 2 | cloudflare.com | PasskeysMFA only |
| 3 | apple.com | Passkeyspasswordless |
| 4 | microsoft.com | Passkeyspasswordless |
| 5 | facebook.com | Passkeyspasswordless |
| 6 | amazon.com | Passkeyspasswordless |
| 7 | instagram.com | No passkeysSupports passkeys? Fix it ↗ |
| 8 | youtube.com | Passkeyspasswordless |
| 9 | live.com | Passkeyspasswordless |
| 10 | bing.com | Passkeyspasswordless |
| 11 | icloud.com | Passkeyspasswordless |
| 12 | netflix.com | No passkeysSupports passkeys? Fix it ↗ |
| 13 | chatgpt.com | Passkeyspasswordless |
| 14 | ui.com | PasskeysMFA only |
| 15 | yahoo.com | Passkeyspasswordless |
| 16 | office.com | Passkeyspasswordless |
| 17 | spotify.com | No passkeysSupports passkeys? Fix it ↗ |
| 18 | samsung.com | Passkeyspasswordless |
| 19 | sentry.io | PasskeysMFA only |
| 20 | roblox.com | Passkeyspasswordless |
| 21 | msn.com | Passkeyspasswordless |
| 22 | baidu.com | No passkeysSupports passkeys? Fix it ↗ |
| 23 | wikipedia.org | PasskeysMFA only |
| 24 | whatsapp.com | Passkeyspasswordless |
| 25 | snapchat.com | Passkeyspasswordless |
| 26 | linkedin.com | Passkeyspasswordless |
| 27 | skype.com | Passkeyspasswordless |
| 28 | xiaomi.com | No passkeysSupports passkeys? Fix it ↗ |
| 29 | oxylabs.io | No passkeysSupports passkeys? Fix it ↗ |
| 30 | gmail.com | Passkeyspasswordless |
| 31 | adobe.com | Passkeyspasswordless |
| 32 | avast.com | No passkeysSupports passkeys? Fix it ↗ |
| 33 | qq.com | No passkeysSupports passkeys? Fix it ↗ |
| 34 | sharepoint.com | Passkeyspasswordless |
| 35 | miui.com | No passkeysSupports passkeys? Fix it ↗ |
| 36 | tiktok.com | Passkeyspasswordless |
| 37 | reddit.com | Passkeyspasswordless |
| 38 | imdb.com | No passkeysSupports passkeys? Fix it ↗ |
| 39 | yelp.com | Passkeyspasswordless |
| 40 | espn.com | No passkeysSupports passkeys? Fix it ↗ |
| 41 | nytimes.com | No passkeysSupports passkeys? Fix it ↗ |
| 42 | pinterest.com | No passkeysSupports passkeys? Fix it ↗ |
| 43 | fandom.com | No passkeysSupports passkeys? Fix it ↗ |
| 44 | mayoclinic.org | No passkeysSupports passkeys? Fix it ↗ |
| 45 | clevelandclinic.org | No passkeysSupports passkeys? Fix it ↗ |
| 46 | x.com | Passkeyspasswordless |
| 47 | nih.gov | No passkeysSupports passkeys? Fix it ↗ |
| 48 | merriam-webster.com | No passkeysSupports passkeys? Fix it ↗ |
| 49 | homedepot.com | Passkeyspasswordless |
| 50 | walmart.com | Passkeyspasswordless |
Reports by country
Top sites without passkeys in each country. The number shows how many of the top 50 lack passkeys.
Special-interest domains
Some country-code TLDs are used worldwide as generic domains — .io by tech, .ai by AI companies — rather than by their own territory's sites. Their reports sit under their territory's flag in the country list above, but since most people know them by TLD, we've also listed them here.