Comment by hobo123

I don't know man. We use the Microsoft thingy at work and every time I sso somewhere, it nags me to create a passkey, and when I say "ok fine" it wants me to also add a PIN or something, so even more to remember.

No thanks, I'll keep using the MS authenticator on my phone for 2FA instead.

Btw: sites cannot phish my passwords if only the browser remembers passwords and ... drumroll... binds them by site, just like passkeys.