One in four major apps and services still don’t offer passkeys, according to whynopasskeys.com, a site launched by security researcher Scott Helme. That means giants like Instagram, Netflix and Spotify leave users stuck with passwords that can be phished or stolen. Passkeys, by contrast, are device-generated, tied to a specific site and usually unlocked by biometrics or a security key. You don’t have to memorize anything, and a hacker would need your physical device to break in. Helme built the list to pressure companies into adding passkeys. Apple, Google and Microsoft already support them. Instagram technically allows passkeys only if your account is linked to Facebook (and Facebook has passkeys turned on). Meta hasn’t explained why Instagram itself doesn’t offer the feature, and Netflix and Spotify haven’t replied to TechCrunch. TechCrunch says it will update the story if they respond.