What a passkey is
A cryptographic key pair held by your device. The private key never leaves it and never gets sent, so there is nothing to steal in a phishing attack or a database breach.
What changes for users
Signing in becomes a fingerprint or device PIN. Nothing to remember, nothing to type, nothing to reuse across sites.
What it means for site owners
Support is arriving through the WebAuthn standard and platform libraries. Most sites will offer passkeys alongside passwords for years before considering removing the older option.
