Three years after the standard shipped, the adoption curve has bent. Platform nudges, synced credentials across devices and a steady drumbeat of password breaches have done what years of security training could not. Phishing of these accounts has fallen accordingly.

The remaining friction

Recovery is the hard part. Lose every device and you depend on the platform account, which becomes the new single point of failure. Enterprises are pairing passkeys with hardware tokens for administrators and keeping recovery flows deliberately slow.

Key takeaways

  • Passkey share of logins exceeds 50% on several platforms
  • Phishing success rates drop sharply
  • Account recovery is the next weak point

This story is part of our ongoing coverage of cybersecurity. We will update it as more details emerge.