Archive - Passkeys Substack

Payday Super turns your SMS bill into $1.38m

Plus: Malaysia's central bank just made SMS OTP non-compliant.

Jul 31

The best CIAM won't fix your 5% passkey adoption

Plus: why native passkeys break 3-5x more on Android than iOS

Jul 24

Why hardware security keys lose users before the first tap

Plus: Android hides 50+ passkey error codes. You see 12

Jul 18

Why Apple passkey error 1004 tells you nothing

Plus: which of WebAuthn, CTAP and FIDO2 you actually code against

Jul 10

The £1.17bn reason the UK backs passkeys

Plus: the Chrome setting that quietly breaks your security keys in Safari.

Jul 3

June 2026

Why bank passkeys stall below 1% adoption

Plus: why native iOS and Android passkeys take 3 to 6 months not two weeks

Jun 26

The passkey problems nobody warns you about

Why launching passkeys is the easy part and what breaks once real users show up

Jun 12

From 5% to 90%: passkey adoption playbook at Identiverse 2026

5 phases behind one of world's largest gov agency passkey rollouts. Full version presented at Identiverse 2026.

Jun 5

95% of WebAuthn errors are not errors

Plus: the iOS 26.2 isUVPAA bug that broke passkey detection in WKWebView, fixed in 26.3 stable.

Jun 1

May 2026

Why 2FA no longer stops modern phishing

Plus: why checkout on Amazon feels like magic and what every other shop gets wrong.

May 15

World Passkey Day: Passkey Benchmark 2026 is live

8 benchmark numbers from production and a new way to track them in your stack.

May 7

Deploying Entra ID passkeys without breaking MFA

Why Vietnam froze 86 million bank accounts

May 1