What is a passkey: the site never gets your secret
A passkey is a public/private key pair tied to one site. The phone unlocks the private key. A fake login page cannot replay it. That is the whole trick.
phishing
Your Daily Scope and News of What Matters
A passkey is a public/private key pair tied to one site. The phone unlocks the private key. A fake login page cannot replay it. That is the whole trick.