Japanese version of this article is available here.
Intro
Hi, I’m @nov from Money Forward ID Service Development team.
Well, everyone, how are you spending Valentine’s Day?
The time has come for the passkey usage report, which is released roughly every quarter.
Over the past three months, Money Forward ID has undergone the following changes regarding passkeys.
- The number of sign-in using passkeys surpassed Google Sign-in and is now in second place after passwords
- Started passkey promotion in contexts other than after sign-in
- Started supporting passkey for users without email addresses
We’ll look at the details of each one later, but let’s start with this corner, which is customary every time.
Registered Passkeys @ 2024 Feb.
As of February 2024, there are about 750,000 passkeys registered in Money Forward ID.
In the last report, we had 320,000 units, so that number has more than doubled in the last three months.
The breakdown by OS is as follows. There is no big movement here.
| OS | Percentage of total (last time → this time) |
|---|---|
| iOS | 63% -> 62% |
| Android | 17% -> 19% |
| macOS | 10% -> 9% |
| Windows | 7% -> 9% |
Passkey Usage @ 2024 Feb.
Let’s also look at the percentage of all registered passkeys that are actually used for authentication for each OS.
| OS | Percentage actually used for authentication (last time → this time) |
|---|---|
| iOS | 20% -> 32% |
| Android | 20% -> 29% |
| macOS | 26% -> 40% |
| Windows | 18% -> 23% |
There has been no major expansion in the range of promotions over the past three months, and the number of passkeys has continued to increase at a steady pace, so the passkey usage rate has increased significantly compared to last time.
Compared to the usage rate of “passkeys that have been registered more than one month ago” and “passkeys that have been registered more than two months ago” in the previous report, the usage rate of registered passkeys is probably stable at this figure. I’m sure it will come.
Movements in the last 3 months
Now, let’s take a look at the changes over the past three months mentioned above.
The number of sign-in using passkeys surpassed Google Sign-in and is now in second place after passwords
Trends in Passkey As mentioned in the 2023 Review (Sorry, this article is JA only), the number of sign-in using Passkey for Money Forward ID began to exceed that of Google Sign-in around the end of last year. It’s been about a month and a half since then, and the difference is only getting wider.
Currently, the number of sign-in using passkeys in B2B services is more than double that of Google Sign-in, and although Google Sign-in still barely exceeds passkeys in B2C services, passkeys exceed Google Sign-in there as well. The day seems to be near.
The next report will mark exactly one year since the full-scale release of Passkey, and by that time, will Passkey have become the second-largest authentication method for B2C services?
Furthermore, looking at the breakdown of the usage rate of authentication methods, the number of password users is decreasing and the number of passkey users is increasing, and the number of Google Sign-in and Sign in with Apple users is not decreasing.
| Authentication Method | Percentage of total (last time → this time) |
|---|---|
| Password | 83% -> 79% |
| Passkey | 5% -> 9% |
| Google Sign-in | 7% -> 7% |
| Sign in with Apple | 3% -> 3% |
| Others | 2% -> 2% |
Started passkey promotion in contexts other than after sign-in
In fact, when we published the previous report, we had already started promoting passkeys at times other than after sign-in, but currently Money Forward ID is also promoting passkeys at the following times.
- After initial password setup for B2B users
- After setting up 2FA
Also, although it is included after logging in, the wording on the promotion page will be changed at the following times.
- After 2FA authentication
After 2FA setup and authentication, unlike the normal promotional page, the page promotes that “One-step two-factor authentication is possible using a passkey” as shown below.
Both parameters are small compared to the total number of sign-in, but the registered CVR is much higher than after sign-in.
| Promotion Context | Select “Register” | Select “Skip” |
|---|---|---|
| After sign-in | 40% | 60% |
| After password setup | 55% | 45% |
| After setting up 2FA | 68% | 32% |
| After 2FA authentication | 49% | 51% |
Due to requests from businesses, we have not yet been able to implement passkey promotions at the time of account registration, except when setting up passwords for B2B users. However, if we simply look at passkey registration CVR, it is clear that promotions after registration are better than after sign-in. It is only natural that the CVR will be higher.
Started supporting passkey for users without email addresses
Money Forward Cloud supports users without email addresses (referred to as “Login ID Accounts”) in some of our Services.
We have a different sign-in page for these users, and now that sign-in path also supports passkeys.
However, Chrome’s passkey autofill does not work in the “Business ID” field of this sign-in form.
Currently, the following issue has been raised in Chromium, but there is probably a trigger that fires the password manager above the passkey autofill, and that trigger is implemented on the assumption that there is only one user identifier in the sign-in form. This seems to be the cause.
autocomplete=webauthn doesn’t always trigger passkey autofill
Originally, autocomplete=webauthn is defined independently of autocomplete=username and autocomplete=password, and we naturally expect them to work independently, but this is not the case in Chrome. It seems that.
I hope it gets fixed soon…
For service representatives with similar sign-in forms, please be careful. Passkey autofill support may be a little early for that sign-in form.
The above is the Passkey usage status report for Money Forward ID as of February 2024.
See you again in vol.5.
— @nov