{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T07:03:30Z","timestamp":1782975810463,"version":"3.54.5"},"reference-count":85,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,5,18]]},"DOI":"10.1109\/sp63933.2026.00022","type":"proceedings-article","created":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T19:34:20Z","timestamp":1782934460000},"page":"3607-3626","source":"Crossref","is-referenced-by-count":0,"title":["No Password, No Problem? A Large-Scale Field Study of Passkey Adoption and Usage"],"prefix":"10.1109","author":[{"given":"Tobias","family":"Reittinger","sequence":"first","affiliation":[{"name":"University of Regensburg"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"G\u00fcnther","family":"Pernul","sequence":"additional","affiliation":[{"name":"University of Regensburg"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"What are passkeys","year":"2024"},{"key":"ref2","volume-title":"Login and security","year":"2025"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3532105.3535013"},{"key":"ref4","volume-title":"About the security of passkeys","year":"2022"},{"key":"ref5","volume-title":"Share passwords or passkeys with people you trust on iphone","year":"2025"},{"key":"ref6","first-page":"239","article-title":"Digital nudges for access reviews: Guiding deciders to revoke excessive authorizations","volume-title":"Twentieth Symposium on Usable Privacy and Security (SOUPS 2024)","author":"Baumer"},{"key":"ref7","volume-title":"Security of passkeys in the google password manager","year":"2022"},{"key":"ref8","volume-title":"Innovating in passwordless","year":"2024"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.5948\/upo9781614440260.011"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.5220\/0013380600003899"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3290605.3300733"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363258"},{"key":"ref13","first-page":"339","article-title":"Of two minds about Two-Factor: Understanding everyday FIDO U2F usability through device comparison and experience sampling","volume-title":"Fifteenth Symposium on Usable Privacy and Security (SOUPS 2019)","author":"Ciolino"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.4324\/9780203771587"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3173574.3174030"},{"key":"ref16","volume-title":"Making authentication faster than ever: passkeys vs. passwords, 2023","author":"Convento","year":"25"},{"key":"ref17","volume-title":"Mathematical Methods of Statistics","author":"Cram\u00e9r","year":"1946"},{"key":"ref18","article-title":"A framework for abusability analysis: The case of passkeys in interpersonal threat models","volume-title":"Proceedings of the 34th USENIX Security Symposium","author":"Daffalla","year":"2025"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-58387-6_9"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3167996.3167997"},{"key":"ref21","volume-title":"Windows 11\u2019s upcoming passkey (windows hello) features","author":"Delitz","year":"2024"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1177\/0049124118799377"},{"key":"ref23","first-page":"19","article-title":"you still use the password after all \u201cexploring fido2 security keys in a small company","volume-title":"Sixteenth Symposium on Usable Privacy and Security (SOUPS 2020)","author":"Farke","year":"2020"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1016\/S1573-448X(06)03031-7"},{"key":"ref25","volume-title":"Apple, google and microsoft commit to expanded support for fido standard to accelerate availability of passwordless sign-ins, 2022","year":"25"},{"key":"ref26","volume-title":"Client to authenticator protocol (ctap), 2022","year":"25"},{"key":"ref27","volume-title":"Sc magazine: Finding fido: What fast identity online is, and how it works, 2022","year":"25"},{"key":"ref28","volume-title":"Fido alliance ux guidelines for passkey creation and sign-ins, 2023","year":"25"},{"key":"ref29","volume-title":"Fido authentication, 2023","year":"25"},{"key":"ref30","volume-title":"Passkeys, 2024","year":"25"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/1242572.1242661"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1080\/10447318.2018.1456150"},{"key":"ref33","doi-asserted-by":"crossref","first-page":"1549","DOI":"10.1145\/3243734.3243767","article-title":"what was that site doing with my facebook password?\u201d designing password-reuse notifications","volume-title":"Proceedings of the 2018 acm sigsac conference on computer and communications security","author":"Golla","year":"2018"},{"key":"ref34","volume-title":"The easiest and most secure way to sign in to your google account, 2025","year":"25"},{"key":"ref35","volume-title":"Save, manage & protect your passwords, 2025","year":"25"},{"key":"ref36","volume-title":"Cybersecurity forecast 2024","year":"2024"},{"key":"ref37","volume-title":"Mercari\u2019s passkey authentication speeds up signin 3.9 times, 2023","year":"25"},{"key":"ref38","volume-title":"Password manager dashlane sees 70 % increase in conversion rate for signing-in with passkeys compared to passwords, 2023","year":"25"},{"key":"ref39","article-title":"Digital identity guidelines: Authentication and lifecycle management","author":"Grassi","year":"2020","journal-title":"Special Publication 800-63B, National Institute of Standards and Technology, Gaithersburg"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2012.162"},{"key":"ref41","volume-title":"Save and sign in to android apps with passkeys using 1password, 2024","author":"Hogan","year":"25"},{"key":"ref42","volume-title":"Passkey, 2025","year":"25"},{"key":"ref43","volume-title":"Sign in with apple account, 2025","year":"25"},{"key":"ref44","volume-title":"Passkeys","year":"2025"},{"key":"ref45","article-title":"Detecting compromise of passkey storage on the cloud","volume-title":"Proceedings of the 34th USENIX Security Symposium","author":"Islam","year":"2025"},{"key":"ref46","volume-title":"Web authentication: An api for accessing public key credentials level 3, 2023","author":"Jones","year":"25"},{"key":"ref47","volume-title":"Sign in or create an account, 2025","year":"25"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3623072"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/1978942.1979321"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3623063"},{"key":"ref51","article-title":"Evaluation of account recovery strategies with fido2-based passwordless authentication","author":"Kunke","year":"2021","journal-title":"arXiv preprint"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1016\/j.chb.2017.11.036"},{"key":"ref53","first-page":"91","article-title":"\u201cit\u2019s stored, hopefully, on an encrypted server\u201d: Mitigating users\u2019 misconceptions about fido2 biometric webauthn","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Lassak","year":"2021"},{"key":"ref54","first-page":"7231","article-title":"Why aren\u2019t we using passkeys? obstacles companies face deploying fido2 passwordless authentication","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"Lassak"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00047"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359828"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1214\/aoms\/1177730491.MR0022058.Zbl0041.26103"},{"key":"ref58","volume-title":"mdn web docs. Web authentication api, 2024","year":"25"},{"key":"ref59","volume-title":"Microsoft digital defense report 2023","year":"2023"},{"key":"ref60","volume-title":"Microsoft digital defense report 2024","year":"2024"},{"key":"ref61","volume-title":"How yahoo! japan increased passkeys adoption to 11 % and reduced sms otp costs, 2023","author":"Mihajlija","year":"25"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-39235-1_9"},{"key":"ref63","article-title":"Quantitative analysis of fido2 client support","volume-title":"Proc. WAY","author":"Nawrath","year":"2021"},{"key":"ref64","volume-title":"Observation study on usability challenges for fingerprint authentication using webauthn-enabled android smartphones. Age, 20:29","author":"Oogami","year":"2020"},{"key":"ref65","first-page":"57","article-title":"User perceptions of the usability and security of smartphones as \\{FIDO2\\} roaming authenticators","volume-title":"Seventeenth Symposium on Usable Privacy and Security (SOUPS 2021)","author":"Owens","year":"2021"},{"key":"ref66","volume-title":"passkeys.dev. Device support, 2024","year":"25"},{"key":"ref67","volume-title":"Password security, 2025","year":"25"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3133973"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1080\/14786440009463897"},{"key":"ref70","volume-title":"Convincing a billion users to love passkeys: Ux design insights from microsoft to boost adoption and security, 2024","author":"Ranjit","year":"25"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-72559-3_1"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1108\/ics-02-2025-0046"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.24251\/HICSS.2025.545"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00067"},{"key":"ref75","volume-title":"Despite increasing cybersecurity attacks, people still believe antiquated username and passwords are strong enough","author":"Schin","year":"25"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560584"},{"key":"ref77","volume-title":"How kayak reduced sign in time by 50 % and improved security with passkeys, 2023","author":"Semenova","year":"25"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.2307\/2333709"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1145\/2891411"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1146\/annurev-psych-081914-124745"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.2139\/ssrn.3033101"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1016\/S0968-090X(96)00025-3"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1109\/JCDL57899.2023.00060"},{"key":"ref84","first-page":"175","article-title":"Understanding password choices: How frequently entered passwords are re-used across websites","volume-title":"Twelfth Symposium on Usable Privacy and Security (SOUPS 2016)","author":"Wash","year":"2016"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1145\/3544548.3580993"}],"event":{"name":"2026 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2026,5,18]]},"end":{"date-parts":[[2026,5,21]]}},"container-title":["2026 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11573355\/11573356\/11573563.pdf?arnumber=11573563","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T05:38:21Z","timestamp":1782970701000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11573563\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,18]]},"references-count":85,"URL":"https:\/\/doi.org\/10.1109\/sp63933.2026.00022","relation":{},"subject":[],"published":{"date-parts":[[2026,5,18]]}}}