Skip to content
Research

FIDO Passkey Index 2026: 36% of sign-ins use a passkey, 42% of eligible accounts enrolled

The FIDO Alliance's Passkey Index 2026, published October 15, 2026 from 15 consumer relying parties, reports 90% eligibility, 42% of eligible accounts enrolled, and passkeys on 36% of successful sign-ins, up from 26%.

What happened

The FIDO Alliance published the Passkey Index 2026 on October 15, 2026. It draws on confidential data from 15 consumer relying parties, up from 9 in 2025, including Amazon, Google, Microsoft, PayPal, Shopify, TikTok and WhatsApp. Results were compiled on September 21, 2026, and figures are unweighted averages across participants that reported each one.

Headline findings from the full report:

  • Eligibility: 90% of active accounts are eligible for passkeys (n=13), against 93% in 2025.
  • Enrollment: 42% of eligible accounts have a passkey (n=13), roughly 38% of all active accounts, up from 36% of eligible accounts in 2025 (Finding 1).
  • Sign-in share: 36% of successful sign-ins use a passkey (n=12), up from 26%. The measure includes re-authentication and excludes account recovery (Finding 2).
  • Success rate: passkey sign-ins succeed 93% of the time against 78% for passwords and traditional MFA (n=12), and are 2.8 times faster, saving about 27 seconds per sign-in (n=9) (Finding 4).
  • Phishing: all 8 participants that measure it report fewer successful phishing attacks since deploying passkeys.
  • Plans: 9 of 13 respondents plan to implement passwordless accounts in the next 12 months.

FIDO notes that because the participant group changed, year-on-year comparisons are directional.

Why it matters

The Index gives the industry shared definitions for passkey adoption metrics. The most useful finding is the gap between having a passkey and using one: 34% of accounts enrolled against 26% of sign-ins in 2025, and 38% against 36% in 2026, per Finding 3 of the report. Eight of ten participants that reported both still had sign-in share below enrollment.

Deepak's take

Availability is no longer the bottleneck; routing is. Two participants said their flow shows a password or OTP before the passkey even to users who have one, and one estimated passkey-first would roughly double its passkey sign-in share. That is a product decision, not a standards problem. If your enrolled users are still typing passwords, fix the order of the sign-in screen before you spend on another enrollment campaign.

What to do

  • Measure the three numbers separately: eligibility, enrollment and sign-in share, using the Index's scope rules, so you can compare yourself year to year.
  • Route enrolled users to the passkey first, and use conditional UI where the platform supports it.
  • Grade the implementation: the passkey maturity tiers presented at Authenticate 2026 list the checks that close the gap.
  • Further reading: passkeys explained and the ROI of passwordless.

Sources

Curated 2026-11-09.