Passkeys Are Better Than Passwords, but They Are Not a Silver Bullet

Passkeys are a major improvement over passwords, but weak recovery flows, SMS fallbacks, legacy credentials, and help desk shortcuts can still give attackers a way around them.