Orgs Move to SSO, Passkeys to Solve Bad Password Habits

In 2025, organisations are increasingly pushing passwordless authentication after recognising that weak passwords persist and that forcing complex ones is largely impractical. According to Portnox, 92% of CISOs surveyed indicated they are implementing passwordless authentication, up from 70% a year earlier. Keeper Security’s report from early 2025 found that 80% of organisations have adopted, or are planning to adopt, passkey authentication.

The Dark Reading poll shows that just over a quarter of respondents’ organisations still force labyrinthine passwords, while around 17% use more secure passphrases, about a fifth rely on password managers, and one third now use single sign-on or passkeys to access accounts.

The shift toward passwordless is being framed as delivering real business impact: Portnox’s data and commentary from its CEO, Denny LeCompte, note reductions in phishing risk, password reuse, and credential exploits, plus improved login success and user experience. As platforms ship passkeys by default and phishing threats persist, the article frames the move to SSO with passkeys as the dominant trajectory, with password hygiene measures fading in importance.