2026-06-28
What is a passkey? Public-key login, phishing resistance and sync
A passkey authenticates with a private-key signature, while the login service holds the public key. Synced passkeys can transfer encrypted credentials between devices; device-bound passkeys do not sync. MFA depends on required user verification, and device, sync-account and recovery protections still matter.