Passkeys Readiness & Risk Assessment

Welcome! This survey helps us assess our organization's readiness for passkeys/passwordless authentication and surface any risks to address before rollout. Your participation is voluntary and you may stop at any time. There are no right or wrong answers—we want your honest perspective. Responses will be kept confidential and reported only in aggregate to inform our rollout planning. Estimated time: 6–8 minutes. Thank you for your input.

Which of the following describe your involvement with authentication today? Select all that apply.

• I make authentication strategy decisions
• I implement authentication systems
• I provide security governance/risk oversight
• I support end users (help desk/training)
• I own a product or service affected by auth UX
• Other (please specify)

Which sign-in methods are currently in active use at our organization? Select all that apply.

• Passwords + MFA (e.g., OTP/app push)
• Passwords without MFA
• Single sign-on (SSO)
• Hardware security keys
• Biometric login on managed devices
• Magic links or one-time codes
• Social login (e.g., Google/Apple)
• Not sure
• Other (please specify)

Rank the outcomes we should prioritize with a passkeys rollout. Drag to order; top = highest priority.

1. Reduce phishing risk
2. Lower password reset volume
3. Improve login UX and speed
4. Strengthen overall security posture
5. Reduce credential stuffing and fraud
6. Improve compliance posture

Which concerns should we address before a wider passkeys rollout? Select all that apply.

• Account recovery and lost devices
• Shared or kiosk device scenarios
• Legacy browser/app support
• Help desk workload during transition
• Total cost and licensing
• Compatibility with SSO/IdP
• Vendor lock-in or portability
• Regulatory/assurance requirements
• User resistance or change fatigue
• Other (please specify)

Who would be the best candidates for an initial passkeys pilot? Select all that apply.

• Security/IT staff
• Engineering teams
• Early adopters/volunteers
• New hires
• Contractors/partners
• Customer support
• Other (please specify)

Based on your responses in this survey, please share any additional comments, concerns, or context we should consider for a passkeys rollout.

Which department or function do you primarily represent?

• Security/GRC
• IT/Infrastructure
• Engineering/Development
• Product Management
• Design/UX
• Customer Support
• Finance/Procurement
• HR/People
• Other

Thank you for your time—your input will directly inform our passkeys rollout planning and risk mitigation strategy. If you have any questions, please reach out to [contact].

How familiar are you with passkeys/passwordless authentication concepts?

In your view, which technical dependencies are most important to address for a passkeys rollout? Select up to 3.

• Compatibility with our IdP/SSO
• Mobile device management (MDM) integration
• Platform coverage (iOS, Android, Windows, macOS, ChromeOS)
• Browser support
• FIDO2/security key support
• SDKs for native and mobile apps
• Compliance/audit logging requirements
• Disaster recovery and fallback access
• Not sure / not applicable to my role

What timeline feels realistic for piloting or expanding passkeys at our organization?

• Already in use
• Evaluating now
• 0–3 months
• 3–6 months
• 6–12 months
• Over 12 months
• No plans

How likely is it that account recovery and lost-device scenarios will cause significant issues during rollout?

Which metrics would you use to judge the success of a passkeys rollout? Select up to 3.

• Password reset tickets down
• Fewer MFA prompts
• Authentication success rate
• Median login time
• Fewer phishing/security incidents
• User satisfaction (CSAT)
• Support cost per user
• Passkeys adoption rate

We'd like to explore your perspective on passkeys adoption in more depth. An AI moderator will ask a couple of follow-up questions based on your earlier responses.

What is your seniority level?

• Individual contributor
• Team lead/Manager
• Director
• VP or above

Overall, how ready is our organization to move forward with passkeys?

How likely is it that legacy app/browser compatibility will cause significant issues during rollout?

What do you see as the biggest blockers to adopting passkeys at our organization?

How long have you been with the organization?

• Less than 1 year
• 1–2 years
• 3–5 years
• 6–10 years
• More than 10 years

How likely is it that user resistance or change fatigue will cause significant issues during rollout?

Where are you primarily based?

• North America
• Europe
• Asia-Pacific
• Latin America
• Middle East & Africa
• Prefer not to say

How likely is it that help desk overload will cause significant issues during rollout?

Rank the following areas by where we should invest most to mitigate passkeys rollout risks. Drag to order; top = highest investment priority.

1. User training and communications
2. Support tooling and staffing
3. Account recovery and backup flows
4. Legacy app/browser compatibility
5. Compliance and audit readiness
6. Vendor evaluation and exit plans
7. Monitoring and analytics