NCSAM: Tales from the crypt…ographically secure authentication system, passkey

This blog examines the promise and pitfalls of passkeys, praising their public key foundations and strengths in reducing password-related risks while critiquing confusing, pushy enrollment UX that may train users into risky click-through behavior. It argues that because most sites still retain password fallback, key risks from breaches and social engineering persist, and widespread syncing by major platforms undermines the notion of a single secure enclave. Overall, the author cautiously recommends passkeys as slightly more convenient and generally beneficial, while noting they are not yet a comprehensive replacement for passwords.