Passkeys Hit Critical Mass: Microsoft Auto-Enables for Millions, 87% of Companies Deploy as Passwords Near End-of-Life

This report summarizes the rapid move to passkeys in 2025–2026 — including Microsoft auto-enabling passkey profiles for Entra ID tenants, Reddit’s deployment of passkeys for ‘‘proof of humanness,’’ and industry adoption metrics — and highlights security research that exposes new attack surfaces in cloud-synced passkey implementations (notably Google Authenticator), urging organizations to review configurations, plan phased rollouts, and monitor cloud identity infrastructure.