Brave is Chromium until the passkey prompt opens
Plus: what a 19 million dollar MFA fine says about insurance portals.
Passkeys Substack
Substack about passkeys, WebAuthn and passwordless authentication.
Live Last read · last published · next check
Latest posts
Explain passkeys to one colleauge in one sentence
Plus: what PhonePe, MakeMyTrip and Visa shared in Bengaluru
80% of passkey failures never reach your server
Plus: 91% of Japan knows passkeys and 84% still reuse passwords
Payday Super turns your SMS bill into $1.38m
Plus: Malaysia's central bank just made SMS OTP non-compliant.
The best CIAM won't fix your 5% passkey adoption
Plus: why native passkeys break 3-5x more on Android than iOS
Why hardware security keys lose users before the first tap
Plus: Android hides 50+ passkey error codes. You see 12
Why Apple passkey error 1004 tells you nothing
Plus: which of WebAuthn, CTAP and FIDO2 you actually code against
The £1.17bn reason the UK backs passkeys
Plus: the Chrome setting that quietly breaks your security keys in Safari.
Why bank passkeys stall below 1% adoption
Plus: why native iOS and Android passkeys take 3 to 6 months not two weeks
The passkey problems nobody warns you about
Why launching passkeys is the easy part and what breaks once real users show up
From 5% to 90%: passkey adoption playbook at Identiverse 2026
5 phases behind one of world's largest gov agency passkey rollouts. Full version presented at Identiverse 2026.