Notifications
Clear all
Topic starter
04/06/2026 2:59 pm
TL;DR: FIDO’s 2026 State of Passkeys shows consumer awareness reaching 90%, 75% enabling passkeys on at least one account, and 68% of organisations deploying, piloting, or rolling out passkeys for employee authentication, according to Descope’s summary of the report. The evidence says passwordless is moving from optional upgrade to operational baseline, while recovery, legacy compatibility, and rollout discipline still determine success.
NHIMG editorial — based on content published by Descope: 2026 FIDO Report, Passkeys at Global Scale
By the numbers:
- Consumer awareness has climbed to 90%, up from 75% in the 2025 World Passkey Day report.
- 75% enable them on at least some accounts, and 40% enable them across most of their apps.
- 68% of organizations are deploying, piloting, or rolling out passkeys for employee authentication.
Questions worth separating out
Q: How should organisations roll out passkeys without breaking existing login flows?
A: Start with the highest-friction, highest-support-cost applications, then phase in passkeys alongside a measured fallback strategy.
Q: Why do passkeys matter even when users still need fallback authentication?
A: Passkeys matter because they remove the reusable secret from the primary sign-in path and sharply reduce phishing risk.
Q: What breaks when organisations treat passwordless as only a front-end change?
A: What breaks is recovery governance.
Practitioner guidance
- Audit password-dependent login paths Map every workforce and customer application that still depends on reusable passwords or phishable fallback methods.
- Test passkey recovery as a control Run device-loss and account-restoration drills using secure administrative recovery, cloud recovery, and multi-credential registration rules.
- Use phased rollout and A/B testing Introduce passkeys in controlled cohorts so you can compare abandonment, login success, and helpdesk volume against existing methods.
What's in the full article
Descope's full post covers the operational detail this post intentionally leaves for the source:
- Branch Insurance implementation detail, including how passkeys reduced auth-related support tickets by 50%
- The report’s breakdown of workforce deployment patterns, including which organisations are already fully passwordless across most employees
- Practical guidance on conditional routing, enrollment orchestration, and compatibility handling in mixed authentication estates
- The article’s discussion of phased rollout, A/B testing, and implementation timelines for teams planning migration
👉 Read Descope's analysis of the 2026 FIDO passkey report →
Passkey adoption in 2026: are passwords finally losing ground?
Explore further
04/06/2026 3:11 pm
Passkey adoption is now a governance problem, not an awareness problem. Consumer familiarity has climbed to the point where resistance is no longer the main blocker, and enterprise deployment is following that trend. The centre of gravity has shifted from convincing users to ensuring the authentication stack can support secure rollout, recovery, and fallback. For practitioners, this means the strategic debate has moved from education to operating model design.
A few things that frame the scale:
- 92% agree governing AI agents is critical to enterprise security, yet only 44% have implemented any policies to do so, according to AI Agents: The New Attack Surface report.
- Only 52% of companies can track and audit the data their AI agents access, leaving 48% with a complete blind spot for compliance and breach investigation.
A question worth separating out:
Q: How can IAM teams tell whether passkey adoption is actually working?
A: Look for lower password-reset volume, shorter login times, reduced phishing-related incidents, and a declining share of applications that still require phishable methods. A healthy programme also shows stable recovery outcomes when devices are lost or replaced. If those signals do not move together, adoption is cosmetic rather than architectural.
👉 Read our full editorial: Passkey adoption is crossing from awareness into enterprise habit
