u/vdelitz

For this year's world passkey day (sometimes called world password day - not sure if it's now officialy passkey day), we put toegther a passkey benchmark to understand where the adoption of passkeys in consumer apps/websites really stands.

Some things that I found quite interesting

- mobile passkey readiness is at 97-99%

- passkey enrollment rates can reach up to 83% with the right nuding

I think it's obvious that passkeys are gaining a lot of traction. Some deployments are better than others and there's many ways how you can optimize an existing implementation (this will take time until best practices really are universally implemented).

See the full benchmark here if useful: https://www.corbado.com/passkey-benchmark-2026

Curious whether this matches what others are seeing in their deployments?

In a recent update Meta introduced they're launching passkeys for Instagram via the improved Meta account.

In general the statement (see below) is quite strategic IMO. For a decade, Meta has been quietly behind Apple and Google on credential infrastructure. While Apple unified iCloud Keychain and Google built One Account, Meta let Facebook, Instagram, WhatsApp and Quest each maintain separate authentication universes. Slowly they were merged in parts through Accounts Center (Whatsapp is still kind of kept separate). but with the new Meta Account, there's now a unified login for:

- Facebook
- Instagram
- Messenger
- Threads
- Meta AI
- Meta Quest
- Ray-Ban / Oakley AI glasses

1. Meta needed an identity layer to compete in AI + AR
   Meta bets that the next decade of consumer tech is glasses, agents and credentials shared across devices. Apple has Apple ID. Google has One Account. Meta couldn't ship Meta AI needs something comparable to really make use of its 3 billion user accounts.

2. Passkeys are pushed on all apps
   Instagram getting passkeys aligns the path they had started with Whatsapp, Facebook and Messenger. Every Meta surface needs to support the same login primitive or the "one account" promise breaks.

3. Payments are the next domino (?)
   Meta has tried to ship a payments solution multiple times. Without account unification it never worked. With Meta Account as the rail, every Meta property can now make use of a passkey (most users will use their biometrics, that's the missing piece for payment UX). This way they could introduce a PayPal / Amazon Pay / Google Pay / Apple Pay competitive solution.

Read more: https://about.fb.com/news/2026/04/meta-account/

What do you think about this update?

Next superannuation fund in Australia offers phishing-resistant auth to their members.

List continues to grow (after last year's massive credential stuffing attacks in the industry): https://www.corbado.com/faq/superannuation-funds-passkeys