Will passkeys ever replace passwords? Can they?

The report analyzes passkeys (WebAuthn) as a safer alternative to passwords, noting strong anti-phishing advantages but highlighting practical challenges: bootstrapping via legacy authentication, mixed implementations (hardware tokens vs. password managers), risks tied to cloud-synced vaults, and confusing, inconsistent user experiences across OS, browsers, and password managers. It argues that without coherent, user-friendly workflows and true password deprecation, passkeys may fail to achieve broad impact despite solid technical foundations.