Passkey use doubled this year. Seven in ten Google logins are still a password.

Dashlane published its Passkey Power 20 on 13 October, and it changed the question it was asking. Previous versions counted how many passkey logins happened at each site. This one measures what share of all logins at a site were passkeys, which tells you something far more useful: where the password has actually been displaced.

The growth is real. Passkey sign-ins among Dashlane's users nearly doubled year on year to about 2.5 million a month, and 57 percent of users now have at least one passkey stored, up from 40 percent a year ago. That climb has held at roughly 20 percentage points a year for three years running.

Then look at the leaderboard. Google tops it at 28 percent. PayPal manages 18. eBay sits at 8. Google is the best performing major site measured, and roughly seven of every ten sign-ins there are still someone typing a password. Dashlane's own conclusion is that offering passkeys has stopped being the differentiator, because almost everyone offers them now. Requiring them is the differentiator, and almost nobody does. None of the top ten domains make passkeys mandatory. LY Corporation has set a deadline for Yahoo Japan in spring 2027, and that is the unusual case rather than the norm.

The practical takeaway is small and worth doing. Pick the two or three accounts that would hurt most if someone else got in, your email first, and check whether a passkey is already waiting in the security settings. It takes about a minute each, and it removes the thing phishing pages are built to capture. Tendvane's privacy and accounts check runs through how you sign in to Windows and which account protections are currently switched on.