← All tech signals
In motion

Post-Password

The password you had to remember loses its official backing to passkeys, yet passkeys remain a minority of sign-ins on major sites, by one vendor’s count.

What is it?

The password is being phased out. Passkeys tied to a device and a face have moved from experiment to default across the largest platforms, trading something you memorise for something you physically are. How far the body can be trusted as a system stays open.

Why now?

Trust in identity checks has been eroding as deepfakes and account takeovers multiply, and passwords were always the weakest point in that chain. Biometrics and device-bound keys promise proof that is harder to fake — a scarcity turned into infrastructure, built faster than anyone can verify it holds.

Who’s building it?

Platform giants and device makers are building the rails; standards bodies and regulators are setting the terms.

Platform giantsDevice makersFIDO AllianceEnterprise IT teamsRegulators
The full read
Why now, who is building it, where the market goes, and what stays unsettled.
Get weekly →
01 · The market
Who’s in it
Builders — platform giants and the device makers beneath them.
Buyers — enterprises first, migrating whole workforces; then consumers adopting through their platform defaults.
Gatekeepers — standards bodies, browser makers, and regulators writing the eventual rules.
What’s at stake
The same shift that kills phishing also moves recovery risk onto biometrics — convenience and exposure rise together.
Migration cost, run twice — old systems kept live.
Trust, once broken by a breach, is harder to rebuild.
What’s unsettled
Whether biometrics can be revoked as cleanly as a stolen password.
How account recovery works once the body is the key.
Whether one global standard wins, or platforms keep incompatible versions of the same idea.
02 · How the demand matureda progression, not a timeline
Rollout
Passkeys appear as a quiet option, tucked beside the password field.
Default
Platforms flip the switch, and passkeys become the first choice offered.
Lock-in
Recovery, devices and accounts fuse so tightly that leaving the ecosystem costs more.
Standard
Passwords become the fallback, kept for edge cases as the biometric key becomes assumed infrastructure.
03 · Where the market goesthe forks, not a prediction
→Converge or fragment — either one biometric standard spans every platform, or each device maker keeps its own walled sign-in, splitting the convenience it promised.
→Recovery becomes the industry’s next unsolved problem, once the password can no longer be reset by email.
→Regulators may mandate passkeys outright, turning a market feature into a compliance requirement overnight.
→Biometric data breaches could reverse the whole shift, overnight and permanently.
The open question is whether a body can be revoked like a password — and what happens to the person who can’t prove they’re still themselves.
04 · The Verification Stack deskadjacent markets, moving now
Proof of Human
Verifying people, not just their devices.
Spotify launched a ‘Verified by Spotify’ authenticity badge.
TechCrunch
The Trust Layer
Machines now watermark reality, at truly massive scale.
SynthID has watermarked over 100 billion images and videos.
Mashable
The Deepfake Dividend
Fraud losses now fund demand for stronger verification.
$893M in AI-fraud losses reported in 2025.
SecureWorld
05 · The Wire
01
Microsoft makes new accounts passwordless by default
The Hacker News ↗
02
ISACA article warns weak account recovery can undermine passwordless sign-in
ISACA ↗
03
UK cyber agency says passkeys should be consumers’ first-choice login
UK National Cyber Security Centre ↗
04
Dashlane data: passkeys are 28% of its users’ Google sign-ins
Infosecurity Magazine ↗
The panel on this signal
They agreed on
–Passwordless authentication has already crossed from optional upgrade to default, driven by phishing losses and platform incentives alike.
–Recovery risk is the real unresolved cost of this shift.
–Platforms and standards bodies, not legislators, are setting the actual pace of rollout.
The security researcher disagreed on
–A compromised password can be reset; a compromised biometric template cannot be reissued. Shifting authentication onto immutable physical traits exchanges a recoverable vulnerability for a permanent one.
Know more about the method →
✦How this signal was built
01 · Panel
A Delphi panel of 4 AI analysts, each reasoning independently.
→
02 · Debate
They challenge and revise each other’s reads over two rounds.
→
03 · Evidence
Every claim is tied to a cited, linked source on The Wire.
→
04 · Synthesis
A moderator writes it into one read, disagreement and all.