Comment by lokar

A lot of (good) debate about the usability, etc when using passkeys for all/many of your "everyday" sites.

Setting that aside, I would suggest people strongly consider them for their 2-3 most critical sites. You primary email, your main bank/investment account, and any cloud infra / dns registrations you have.

IMO, for these the trade-off between usability and security is strongly in favor of passkeys. I use 4 hardware keys for these accounts (USB-A and USB-C on my keychain, USB-C in the laptop, and a USB-C backup locked away).