{
 "title": "Phishing-Resistant MFA 2026: Passkeys vs OTP Data Study",
 "url": "https://www.servnetuk.com/research/phishing-resistant-mfa-adoption-study-2026",
 "publisher": "Servnet Research",
 "license": "CC BY 4.0 — free to reuse with attribution",
 "collected": "2026-08-13",
 "records": [
  {
   "metric": "Microsoft Entra ID passkeys default date",
   "value": "2026-09-01",
   "source": "Microsoft Learn"
  },
  {
   "metric": "Microsoft-provided SMS/voice retirement date",
   "value": "2027-02-01",
   "source": "Microsoft Learn"
  },
  {
   "metric": "Global active passkeys",
   "value": "5 billion",
   "source": "SWIF.AI"
  },
  {
   "metric": "Regular use of passkeys when available",
   "value": "49%",
   "source": "SWIF.AI"
  },
  {
   "metric": "Okta phishing-resistant authenticator adoption, starting share",
   "value": "8.6% of users",
   "source": "SWIF.AI"
  },
  {
   "metric": "Okta phishing-resistant authenticator adoption, ending share",
   "value": "14.0% of users",
   "source": "SWIF.AI"
  },
  {
   "metric": "Okta adoption increase over one year",
   "value": "63%",
   "source": "SWIF.AI"
  },
  {
   "metric": "UK NCSC comparison scope",
   "value": "passkeys vs traditional MFA against attacks seen in the wild",
   "source": "NHIMG"
  },
  {
   "metric": "Microsoft Entra users auto-enabled for passkeys",
   "value": "users currently enabled for SMS or voice",
   "source": "Microsoft Learn"
  }
 ]
}