David Heinemeier Hansson:

The problem with passkeys is that they’re essentially a halfway house to a password manager, but tied to a specific platform in ways that aren’t obvious to a user at all, and liable to easily leave them unable to access of their accounts. Much the same way that two-factor authentication can do, but worse, since you’re not even aware of it.

Passkeys have become a requirement for logging in to one of our accounts at work and I’m not a fan at all. I have it saved in 1Password, so I can use it across all of my devices. But if there was ever a need for me to login on a device that doesn’t have 1Password installed, I’m not even sure how I would login at all.

I actively avoid enabling passkeys for any of my other accounts, instead opting for strong, randomly generated passwords combined with standard two-factor authentication when available.

➝ Source: world.hey.com