Passkeys are built on the FIDO2 standard (CTAP2 + WebAuthn standards). They remove the shared secret, stop phishing at the source, and make credential-stuffing useless.

But adoption is still low, and interoperability between Apple, Google, and Microsoft isn’t seamless.

I broke down how passkeys work, their strengths, and what’s still missing

  • filcuk@lemmy.zip
    link
    fedilink
    English
    arrow-up
    16
    ·
    8 hours ago

    Refresh…Refresh…Refresh…
    Send new link…
    Message arrives…
    ‘This link is no longer valid’