Passkeys are built on the FIDO2 standard (CTAP2 + WebAuthn standards). They remove the shared secret, stop phishing at the source, and make credential-stuffing useless.

But adoption is still low, and interoperability between Apple, Google, and Microsoft isn’t seamless.

I broke down how passkeys work, their strengths, and what’s still missing

you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 10 months ago

MFA can be a variety of different things. In the case of passkeys, a prompt comes up on the screen, you click it, and that's it. It's both secure and convenient. That's why it's great.

  • source
  • parent