64% of organizations fail to continuously assess vendor and supplier security after onboarding.

37% of consumers worldwide still write down passwords, while 32% reuse the same password across multiple accounts in 2025.

90% of organizations reported facing challenges in transitioning to passwordless authentication.

44% of CISOs rank board or executive expectations as their number-one stressor.

58% of the world's top 1,000 most visited websites do not require special characters for their passwords.

Only 1%, or five websites, among the top 1,000 most visited websites met all best-practice password criteria.

42% of the world's top 1,000 most visited websites do not enforce any minimum password length requirements.

90% of global organizations reported challenges in moving toward passwordless authentication.

Japan ranks #1 in the proportion of organizations using passwordless as the primary authentication method.

57% of global users still do not use passwordless authentication as their primary method.

58% of organizations attribute their most significant data loss events to careless employees or third-party contractors.

Germany's Bundesagentur für Arbeit saw 181% growth in passkey authentications.

E-commerce platforms represent approximately 45% of all passkey authentications, led by Amazon's commanding 39.9% share.

HubSpot has seen a 25% improvement in login success rates over passwords.

Gemini's passkey authentications grew by 269% after making passkeys mandatory for all users.

40% of Dashlane users now store at least one passkey, double the rate from just a year ago.

Roblox's passkey authentications grew by 856%, representing the most dramatic surge in the dataset.

Passkey authentications have more than doubled year over year to 1.3 million per month.

The average person now manages 301 passwords across their personal and work accounts.

Microsoft's decision to make passkeys the default sign-in method drove 120% growth in passkey authentications.