Comment by xp84

They offer advantages but it’s anyone’s guess if the sites you use them with use most of them sanely.

1. In practice everything that saves a passkey requires a biometric to unlock each time, so you SHOULD not be required to use another factor (the secret is “something you have” and the bio is “something you are.” In practice though, now every F—-ing site insists on the damn “we emailed you a code” BS.

2. Passkeys certainly don’t need to be changed every arbitrary period like some idiotic sites (or IT admins) insist for passwords.

3. If one becomes compromised, you can revoke just the one. Unlike a password.